last executing test programs: 15.861911132s ago: executing program 2 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 15.069672475s ago: executing program 2 (id=443): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) 9.212112487s ago: executing program 2 (id=459): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.530367373s ago: executing program 0 (id=464): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8.508375844s ago: executing program 2 (id=466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs(r1, &(0x7f00000000c0)='net/hci\x00') sendfile(r4, 0xffffffffffffffff, &(0x7f0000000340)=0x9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x9c) 8.297629951s ago: executing program 0 (id=469): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) 6.866695846s ago: executing program 2 (id=471): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000dc00"/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x6611) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffff) 5.166878344s ago: executing program 4 (id=474): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.015268275s ago: executing program 4 (id=476): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.374902437s ago: executing program 0 (id=477): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.069281972s ago: executing program 4 (id=478): setgid(0xee00) setresuid(0x0, 0xee00, 0xee00) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x12000, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 4.014117306s ago: executing program 1 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.877822847s ago: executing program 1 (id=480): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.798819424s ago: executing program 4 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs(r1, &(0x7f00000000c0)='net/hci\x00') sendfile(r4, 0xffffffffffffffff, &(0x7f0000000340)=0x9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x9c) 3.733854739s ago: executing program 1 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.645013916s ago: executing program 1 (id=483): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f00000006c0)=""/94, 0x5e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 2.713621281s ago: executing program 0 (id=484): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="ce", 0x1}], 0x1}, 0x50) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/209, 0xd1}], 0x1}, 0x2) 2.643655697s ago: executing program 4 (id=485): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") creat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6e) setgid(0xee00) setresuid(0x0, 0xee00, 0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x0, 0x0, 0x0, 0x100000040000}) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x12000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 2.421845325s ago: executing program 0 (id=486): openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x1, 0x5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) 2.307835064s ago: executing program 2 (id=487): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) fanotify_mark(r1, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61"], 0x10b8}, 0xff00) 1.61146524s ago: executing program 3 (id=489): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.081884393s ago: executing program 0 (id=490): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysinfo(&(0x7f0000000300)=""/133) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), &(0x7f0000000780), 0x800) setregid(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003fc0)={{{@in=@private, @in6=@private1}}, {{@in6=@dev}, 0x0, @in6}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x15, 0xfb33, 0x3, [0x4, 0x9c7, 0x4a55]}}) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.079874853s ago: executing program 3 (id=491): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.075166343s ago: executing program 4 (id=492): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) 808.291355ms ago: executing program 3 (id=493): setgid(0xee00) setresuid(0x0, 0xee00, 0xee00) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x12000, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 598.766302ms ago: executing program 3 (id=494): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 547.256456ms ago: executing program 3 (id=495): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 541.230316ms ago: executing program 1 (id=496): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="ce", 0x1}], 0x1}, 0x50) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/209, 0xd1}], 0x1}, 0x2) 368.26837ms ago: executing program 1 (id=497): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000dc00"/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x6611) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffff) 0s ago: executing program 3 (id=498): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f00000006c0)=""/94, 0x5e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Opts: ,errors=continue. Quota mode: none. [ 58.759667][ T3734] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.772809][ T3737] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.036901][ T3747] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 59.036993][ T3747] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.036993][ T3747] [ 59.037049][ T3747] EXT4-fs (loop2): Total free blocks count 0 [ 59.037083][ T3747] EXT4-fs (loop2): Free/Dirty block details [ 59.037144][ T3747] EXT4-fs (loop2): free_blocks=2415919104 [ 59.037199][ T3747] EXT4-fs (loop2): dirty_blocks=16 [ 59.037232][ T3747] EXT4-fs (loop2): Block reservation details [ 59.037284][ T3747] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 60.707957][ T3751] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.723355][ T3751] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 60.735743][ T3751] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.735743][ T3751] [ 60.745549][ T3751] EXT4-fs (loop0): Total free blocks count 0 [ 60.751612][ T3751] EXT4-fs (loop0): Free/Dirty block details [ 60.757571][ T3751] EXT4-fs (loop0): free_blocks=2415919104 [ 60.764001][ T3751] EXT4-fs (loop0): dirty_blocks=16 [ 60.769346][ T3751] EXT4-fs (loop0): Block reservation details [ 60.775382][ T3751] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 60.830352][ T3751] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 60.842701][ T3751] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.842701][ T3751] [ 61.036345][ T3749] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.051196][ T3749] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 61.063548][ T3749] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.063548][ T3749] [ 61.073197][ T3749] EXT4-fs (loop1): Total free blocks count 0 [ 61.079195][ T3749] EXT4-fs (loop1): Free/Dirty block details [ 61.085082][ T3749] EXT4-fs (loop1): free_blocks=2415919104 [ 61.090819][ T3749] EXT4-fs (loop1): dirty_blocks=64 [ 61.095924][ T3749] EXT4-fs (loop1): Block reservation details [ 61.101918][ T3749] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 61.235113][ T3706] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.360281][ T3706] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.360281][ T3706] [ 61.416939][ T3680] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.430396][ T3680] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.430396][ T3680] [ 62.154966][ T3759] loop1: detected capacity change from 0 to 256 [ 62.210730][ T3757] loop2: detected capacity change from 0 to 512 [ 62.237428][ T3759] FAT-fs (loop1): Directory bread(block 64) failed [ 62.256952][ T3761] loop0: detected capacity change from 0 to 512 [ 62.270178][ T3757] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.275333][ T3759] FAT-fs (loop1): Directory bread(block 65) failed [ 62.289282][ T3759] FAT-fs (loop1): Directory bread(block 66) failed [ 62.304983][ T3759] FAT-fs (loop1): Directory bread(block 67) failed [ 62.333964][ T3759] FAT-fs (loop1): Directory bread(block 68) failed [ 62.348875][ T3757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.374467][ T3759] FAT-fs (loop1): Directory bread(block 69) failed [ 62.391917][ T3761] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.421717][ T3757] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.23: Allocating blocks 41-42 which overlap fs metadata [ 62.439600][ T3759] FAT-fs (loop1): Directory bread(block 70) failed [ 62.447142][ T3759] FAT-fs (loop1): Directory bread(block 71) failed [ 62.454179][ T3759] FAT-fs (loop1): Directory bread(block 72) failed [ 62.460953][ T3759] FAT-fs (loop1): Directory bread(block 73) failed [ 62.700174][ T3757] EXT4-fs (loop2): Remounting filesystem read-only [ 62.707736][ T3761] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.715405][ T3757] Quota error (device loop2): write_blk: dquota write failed [ 62.724380][ T3757] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 62.741786][ T3757] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.23: Failed to acquire dquot type 0 [ 62.796519][ T3770] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 62.820805][ T3757] EXT4-fs (loop2): 1 truncate cleaned up [ 62.941864][ T3757] EXT4-fs (loop2): pa ffff8880613880e0: logic 1, phys. 41, len 23 [ 62.949973][ T3757] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 62.972829][ T3761] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3879: comm syz.0.24: Allocating blocks 41-42 which overlap fs metadata [ 63.263941][ T3761] EXT4-fs (loop0): Remounting filesystem read-only [ 63.272029][ T3757] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 63.401984][ T3761] Quota error (device loop0): write_blk: dquota write failed [ 63.418801][ T3761] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 63.574432][ T3761] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.24: Failed to acquire dquot type 0 [ 63.609719][ T3777] loop4: detected capacity change from 0 to 512 [ 63.922172][ T3761] EXT4-fs (loop0): 1 truncate cleaned up [ 63.934691][ T3761] EXT4-fs (loop0): pa ffff8880613881c0: logic 1, phys. 41, len 23 [ 63.943412][ T3761] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 63.969220][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 63.978890][ T3761] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 63.985734][ T3777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.007140][ T3782] device bridge_slave_1 left promiscuous mode [ 64.023050][ T3777] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 64.059528][ T3782] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.172018][ T3782] device bridge_slave_0 left promiscuous mode [ 64.206935][ T3782] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.670140][ T3796] loop3: detected capacity change from 0 to 512 [ 64.876861][ T3796] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.946496][ T3796] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.995107][ T3796] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.32: Allocating blocks 41-42 which overlap fs metadata [ 65.205322][ T3796] EXT4-fs (loop3): Remounting filesystem read-only [ 65.214165][ T3796] Quota error (device loop3): write_blk: dquota write failed [ 65.648895][ T3806] loop1: detected capacity change from 0 to 2048 [ 65.673036][ T3796] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 65.944267][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.951665][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.014081][ T3809] loop2: detected capacity change from 0 to 512 [ 66.049373][ T3796] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.32: Failed to acquire dquot type 0 [ 66.065185][ T3806] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.083703][ T3796] EXT4-fs (loop3): 1 truncate cleaned up [ 66.154753][ T3815] loop0: detected capacity change from 0 to 2048 [ 66.259444][ T3815] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.268038][ T3796] EXT4-fs (loop3): pa ffff8880613882a0: logic 1, phys. 41, len 23 [ 66.277857][ T3796] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 66.286144][ T3809] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.316510][ T3796] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 66.496062][ T3819] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.511997][ T3819] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 66.524551][ T3819] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.524551][ T3819] [ 66.534289][ T3819] EXT4-fs (loop1): Total free blocks count 0 [ 66.540343][ T3819] EXT4-fs (loop1): Free/Dirty block details [ 66.546273][ T3819] EXT4-fs (loop1): free_blocks=2415919104 [ 66.552064][ T3819] EXT4-fs (loop1): dirty_blocks=64 [ 66.557216][ T3819] EXT4-fs (loop1): Block reservation details [ 66.563259][ T3819] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 67.041015][ T3822] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.056257][ T3822] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 67.068663][ T3822] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.068663][ T3822] [ 67.078389][ T3822] EXT4-fs (loop0): Total free blocks count 0 [ 67.084440][ T3822] EXT4-fs (loop0): Free/Dirty block details [ 67.090396][ T3822] EXT4-fs (loop0): free_blocks=2415919104 [ 67.096160][ T3822] EXT4-fs (loop0): dirty_blocks=64 [ 67.101335][ T3822] EXT4-fs (loop0): Block reservation details [ 67.107351][ T3822] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 67.476679][ T3809] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.514380][ T3685] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.569687][ T3685] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.569687][ T3685] [ 67.582542][ T3809] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.36: Allocating blocks 41-42 which overlap fs metadata [ 67.620416][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.622797][ T3809] EXT4-fs (loop2): Remounting filesystem read-only [ 67.641243][ T3809] Quota error (device loop2): write_blk: dquota write failed [ 67.651534][ T3809] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 67.661725][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.661725][ T144] [ 67.671961][ T3809] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.36: Failed to acquire dquot type 0 [ 67.704667][ T3809] EXT4-fs (loop2): 1 truncate cleaned up [ 67.740747][ T3809] EXT4-fs (loop2): pa ffff888061388620: logic 1, phys. 41, len 23 [ 67.748800][ T3809] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 67.773193][ T3828] loop1: detected capacity change from 0 to 2048 [ 67.797097][ T3809] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 67.797523][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 67.851992][ T3829] device bridge_slave_1 left promiscuous mode [ 67.887921][ T3828] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 67.896225][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.901797][ T3828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.427400][ T3829] device bridge_slave_0 left promiscuous mode [ 68.434438][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.783702][ T3836] loop1: detected capacity change from 0 to 2048 [ 68.887175][ T3838] loop0: detected capacity change from 0 to 128 [ 68.912363][ T3836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.948018][ T3838] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.063118][ T3844] loop3: detected capacity change from 0 to 128 [ 69.078264][ T3838] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 69.262619][ T3847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.355866][ T25] audit: type=1804 audit(1726823921.272:4): pid=3847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.44" name="/newroot/12/file1/bus" dev="loop1" ino=1368 res=1 errno=0 [ 70.816896][ T25] audit: type=1800 audit(1726823921.982:5): pid=3848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="bus" dev="loop3" ino=1048595 res=0 errno=0 [ 70.915772][ T3853] loop2: detected capacity change from 0 to 512 [ 70.938170][ T3857] loop0: detected capacity change from 0 to 512 [ 70.979885][ T3859] loop1: detected capacity change from 0 to 128 [ 71.027530][ T3857] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.039160][ T3857] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 71.049091][ T25] audit: type=1800 audit(1726823923.022:6): pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="bus" dev="loop1" ino=1048597 res=0 errno=0 [ 71.225483][ T7] cfg80211: failed to load regulatory.db [ 71.231948][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.239152][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.256142][ T3853] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.733918][ T3853] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.156470][ T3853] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.48: Allocating blocks 41-42 which overlap fs metadata [ 72.180920][ T3853] EXT4-fs (loop2): Remounting filesystem read-only [ 72.201468][ T3853] Quota error (device loop2): write_blk: dquota write failed [ 72.208896][ T3853] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 72.376584][ T3853] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.48: Failed to acquire dquot type 0 [ 72.399512][ T3853] EXT4-fs (loop2): 1 truncate cleaned up [ 72.426856][ T3875] loop4: detected capacity change from 0 to 2048 [ 72.722839][ T3875] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.025281][ T3853] EXT4-fs (loop2): pa ffff8880613887e0: logic 1, phys. 41, len 23 [ 73.033338][ T3853] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 73.204800][ T3853] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 73.416083][ T3892] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.431517][ T3892] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 73.443939][ T3892] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.443939][ T3892] [ 73.453729][ T3892] EXT4-fs (loop4): Total free blocks count 0 [ 73.459778][ T3892] EXT4-fs (loop4): Free/Dirty block details [ 73.466260][ T3892] EXT4-fs (loop4): free_blocks=2415919104 [ 73.472226][ T3892] EXT4-fs (loop4): dirty_blocks=64 [ 73.477393][ T3892] EXT4-fs (loop4): Block reservation details [ 73.483438][ T3892] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 74.003041][ T3685] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.086341][ T3685] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.086341][ T3685] [ 74.302361][ T3896] loop4: detected capacity change from 0 to 256 [ 74.355907][ T3896] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 74.482044][ T25] audit: type=1800 audit(1726823926.462:7): pid=3896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.59" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 74.730714][ T3897] attempt to access beyond end of device [ 74.730714][ T3897] loop4: rw=0, want=304, limit=256 [ 75.048236][ T3899] loop3: detected capacity change from 0 to 2048 [ 75.247198][ T3899] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.672027][ T3911] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.687288][ T3911] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 75.699700][ T3911] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.699700][ T3911] [ 75.709447][ T3911] EXT4-fs (loop3): Total free blocks count 0 [ 75.715537][ T3911] EXT4-fs (loop3): Free/Dirty block details [ 75.721531][ T3911] EXT4-fs (loop3): free_blocks=2415919104 [ 75.727301][ T3911] EXT4-fs (loop3): dirty_blocks=64 [ 75.732482][ T3911] EXT4-fs (loop3): Block reservation details [ 75.738939][ T3911] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 76.106072][ T3672] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.229229][ T3672] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.229229][ T3672] [ 76.287396][ T3916] loop2: detected capacity change from 0 to 512 [ 76.386621][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 76.411642][ T3916] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.440337][ T3919] device bridge_slave_1 left promiscuous mode [ 76.463453][ T3919] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.479956][ T3921] loop3: detected capacity change from 0 to 256 [ 76.483793][ T3916] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.508466][ T3919] device bridge_slave_0 left promiscuous mode [ 76.532279][ T3916] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.64: Allocating blocks 41-42 which overlap fs metadata [ 76.544939][ T3921] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 76.547412][ T3919] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.566764][ T3916] EXT4-fs (loop2): Remounting filesystem read-only [ 76.581542][ T3916] Quota error (device loop2): write_blk: dquota write failed [ 76.592474][ T3916] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.605580][ T3916] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.64: Failed to acquire dquot type 0 [ 76.625443][ T3916] EXT4-fs (loop2): 1 truncate cleaned up [ 76.649481][ T3916] EXT4-fs (loop2): pa ffff888061388d20: logic 1, phys. 41, len 23 [ 76.657335][ T3916] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 76.680362][ T3916] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 76.707033][ T25] audit: type=1800 audit(1726823928.662:8): pid=3921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 77.229893][ T3928] attempt to access beyond end of device [ 77.229893][ T3928] loop3: rw=0, want=304, limit=256 [ 78.031932][ T3934] loop0: detected capacity change from 0 to 512 [ 78.084154][ T3934] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.329009][ T3934] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.343753][ T3934] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3879: comm syz.0.70: Allocating blocks 41-42 which overlap fs metadata [ 78.428117][ T3934] EXT4-fs (loop0): Remounting filesystem read-only [ 78.455676][ T3934] Quota error (device loop0): write_blk: dquota write failed [ 78.499519][ T3934] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 78.560359][ T3934] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.70: Failed to acquire dquot type 0 [ 78.658166][ T3934] EXT4-fs (loop0): 1 truncate cleaned up [ 78.684080][ T3934] EXT4-fs (loop0): pa ffff8880613881c0: logic 1, phys. 41, len 23 [ 78.692161][ T3934] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 78.716011][ T3934] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 79.153158][ T3948] loop4: detected capacity change from 0 to 512 [ 79.599892][ T3948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.913794][ T3948] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 82.015457][ T3970] loop3: detected capacity change from 0 to 2048 [ 82.863207][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 82.874249][ T3970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.256410][ T3984] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.287845][ T25] audit: type=1804 audit(1726823935.262:9): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.78" name="/newroot/16/file1/bus" dev="loop3" ino=1368 res=1 errno=0 [ 83.899606][ T3983] sched: RT throttling activated [ 86.122494][ T3993] loop0: detected capacity change from 0 to 128 [ 86.386001][ T3993] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.440097][ T3993] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 86.598113][ T4002] loop2: detected capacity change from 0 to 2048 [ 86.667510][ T4004] loop3: detected capacity change from 0 to 2048 [ 86.701243][ T4002] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.759510][ T4004] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 86.853881][ T4004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.277154][ T4014] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.293108][ T4014] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 87.305762][ T4014] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.305762][ T4014] [ 87.315562][ T4014] EXT4-fs (loop2): Total free blocks count 0 [ 87.321655][ T4014] EXT4-fs (loop2): Free/Dirty block details [ 87.327627][ T4014] EXT4-fs (loop2): free_blocks=2415919104 [ 87.333463][ T4014] EXT4-fs (loop2): dirty_blocks=64 [ 87.338650][ T4014] EXT4-fs (loop2): Block reservation details [ 87.344748][ T4014] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 87.849927][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 87.891260][ T4019] loop0: detected capacity change from 0 to 512 [ 87.913494][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.913494][ T9] [ 87.971107][ T4004] loop_set_status: loop3 () has still dirty pages (nrpages=4) [ 88.009323][ T4019] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.079740][ T4019] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.165857][ T4019] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3879: comm syz.0.88: Allocating blocks 41-42 which overlap fs metadata [ 88.252475][ T4025] loop4: detected capacity change from 0 to 256 [ 88.332900][ T4019] EXT4-fs (loop0): Remounting filesystem read-only [ 88.339970][ T4019] Quota error (device loop0): write_blk: dquota write failed [ 88.348151][ T4019] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 88.358433][ T4019] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.88: Failed to acquire dquot type 0 [ 88.379261][ T4019] EXT4-fs (loop0): 1 truncate cleaned up [ 88.385342][ T4019] EXT4-fs (loop0): pa ffff888061388e00: logic 1, phys. 41, len 23 [ 88.393242][ T4019] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 88.649014][ T4025] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 88.691037][ T4019] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 88.814064][ T4030] loop3: detected capacity change from 0 to 128 [ 88.847640][ T25] audit: type=1800 audit(1726823940.822:10): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.91" name="file1" dev="loop4" ino=1048600 res=0 errno=0 [ 89.124363][ T25] audit: type=1800 audit(1726823941.102:11): pid=4030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name="bus" dev="loop3" ino=1048602 res=0 errno=0 [ 89.198841][ T4018] loop1: detected capacity change from 0 to 40427 [ 89.357658][ T4018] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 89.389204][ T4018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 89.877889][ T4034] loop2: detected capacity change from 0 to 512 [ 89.911947][ T4018] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 90.134948][ T4034] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.139128][ T4018] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 90.171787][ T4018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.295156][ T4047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'. [ 90.326578][ T4034] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.355818][ T4045] loop3: detected capacity change from 0 to 2048 [ 90.411332][ T4034] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.93: Allocating blocks 41-42 which overlap fs metadata [ 90.490087][ T4034] EXT4-fs (loop2): Remounting filesystem read-only [ 90.494811][ T4045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.536954][ T4034] Quota error (device loop2): write_blk: dquota write failed [ 90.623228][ T4034] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 90.675063][ T4034] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.93: Failed to acquire dquot type 0 [ 90.739762][ T4034] EXT4-fs (loop2): 1 truncate cleaned up [ 90.807062][ T4034] EXT4-fs (loop2): pa ffff888061388ee0: logic 1, phys. 41, len 23 [ 90.826307][ T4034] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 91.289435][ T25] audit: type=1804 audit(1726823942.882:12): pid=4050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.94" name="/newroot/20/file1/bus" dev="loop3" ino=1368 res=1 errno=0 [ 91.363744][ T4034] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 92.003377][ T4060] loop0: detected capacity change from 0 to 512 [ 92.092515][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.167141][ T4060] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.269548][ T4060] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.371477][ T4060] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3879: comm syz.0.98: Allocating blocks 41-42 which overlap fs metadata [ 92.421977][ T4060] EXT4-fs (loop0): Remounting filesystem read-only [ 92.441581][ T4060] Quota error (device loop0): write_blk: dquota write failed [ 92.464462][ T4060] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 92.483077][ T4060] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.98: Failed to acquire dquot type 0 [ 92.503082][ T4060] EXT4-fs (loop0): 1 truncate cleaned up [ 92.515269][ T4060] EXT4-fs (loop0): pa ffff888061388a80: logic 1, phys. 41, len 23 [ 92.523281][ T4060] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 92.565478][ T4060] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 92.616462][ T4069] loop3: detected capacity change from 0 to 512 [ 93.259575][ T4069] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.578395][ T4069] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 95.891684][ T4100] loop4: detected capacity change from 0 to 2048 [ 95.892835][ T4101] loop0: detected capacity change from 0 to 512 [ 95.978964][ T4100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.120941][ T4107] loop1: detected capacity change from 0 to 256 [ 96.137541][ T4101] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.139299][ T4111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.460739][ T4101] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.494566][ T4101] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3879: comm syz.0.106: Allocating blocks 41-42 which overlap fs metadata [ 97.511240][ T4101] EXT4-fs (loop0): Remounting filesystem read-only [ 97.517888][ T4101] Quota error (device loop0): write_blk: dquota write failed [ 97.544488][ T4101] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 97.557920][ T4101] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.106: Failed to acquire dquot type 0 [ 97.597969][ T4107] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 97.723923][ T4101] EXT4-fs (loop0): 1 truncate cleaned up [ 97.749262][ T4101] EXT4-fs (loop0): pa ffff888061388d20: logic 1, phys. 41, len 23 [ 97.757104][ T4101] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 97.762080][ T4121] loop2: detected capacity change from 0 to 128 [ 97.773916][ T25] audit: type=1800 audit(1726823949.752:13): pid=4107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.110" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 98.288927][ T4101] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 98.333669][ T4124] attempt to access beyond end of device [ 98.333669][ T4124] loop1: rw=0, want=304, limit=256 [ 98.455873][ T4121] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.467615][ T4121] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 98.792499][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 98.927555][ T4140] loop3: detected capacity change from 0 to 512 [ 99.049443][ T4140] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.110444][ T4144] loop2: detected capacity change from 0 to 128 [ 99.140159][ T4140] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.179848][ T4140] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.117: Allocating blocks 41-42 which overlap fs metadata [ 99.249616][ T4140] EXT4-fs (loop3): Remounting filesystem read-only [ 99.269900][ T4140] Quota error (device loop3): write_blk: dquota write failed [ 99.295465][ T4144] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.295863][ T4140] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.362023][ T4144] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 99.413459][ T4140] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.117: Failed to acquire dquot type 0 [ 99.440166][ T4140] EXT4-fs (loop3): 1 truncate cleaned up [ 99.469682][ T4140] EXT4-fs (loop3): pa ffff888020a76e00: logic 1, phys. 41, len 23 [ 99.478144][ T4140] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 99.490005][ T4140] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 99.802336][ T4151] loop0: detected capacity change from 0 to 512 [ 99.937729][ T4155] loop4: detected capacity change from 0 to 2048 [ 99.949389][ T4151] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.042272][ T4151] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.061799][ T4155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.277201][ T4151] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3879: comm syz.0.119: Allocating blocks 41-42 which overlap fs metadata [ 100.314879][ T4151] EXT4-fs (loop0): Remounting filesystem read-only [ 101.634392][ T25] audit: type=1804 audit(1726823952.522:14): pid=4164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.121" name="/newroot/19/file1/bus" dev="loop4" ino=1368 res=1 errno=0 [ 102.086071][ T4151] Quota error (device loop0): write_blk: dquota write failed [ 102.225323][ T4151] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 102.248843][ T4151] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.119: Failed to acquire dquot type 0 [ 102.280162][ T4151] EXT4-fs (loop0): 1 truncate cleaned up [ 102.296957][ T4151] EXT4-fs (loop0): pa ffff888061388c40: logic 1, phys. 41, len 23 [ 102.304939][ T4151] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 102.532337][ T4151] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 102.763596][ T4169] loop1: detected capacity change from 0 to 512 [ 102.899272][ T4169] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.018103][ T4169] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.097456][ T4169] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3879: comm syz.1.125: Allocating blocks 41-42 which overlap fs metadata [ 103.172617][ T4169] EXT4-fs (loop1): Remounting filesystem read-only [ 103.182180][ T4169] Quota error (device loop1): write_blk: dquota write failed [ 103.190390][ T4169] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 103.221104][ T4169] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.125: Failed to acquire dquot type 0 [ 103.252735][ T4180] loop3: detected capacity change from 0 to 512 [ 103.298940][ T4169] EXT4-fs (loop1): 1 truncate cleaned up [ 103.308676][ T4169] EXT4-fs (loop1): pa ffff888061388000: logic 1, phys. 41, len 23 [ 103.316654][ T4169] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 103.337724][ T4169] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 103.411256][ T4183] loop2: detected capacity change from 0 to 128 [ 103.458935][ T4180] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.533393][ T25] audit: type=1800 audit(1726823955.512:15): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.129" name="bus" dev="loop2" ino=1048605 res=0 errno=0 [ 103.560640][ T4180] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 104.891157][ T4199] loop1: detected capacity change from 0 to 512 [ 104.982249][ T4199] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.047482][ T4199] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.053032][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 105.077320][ T4199] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3879: comm syz.1.132: Allocating blocks 41-42 which overlap fs metadata [ 105.175768][ T4199] EXT4-fs (loop1): Remounting filesystem read-only [ 105.220867][ T4199] Quota error (device loop1): write_blk: dquota write failed [ 105.268941][ T4199] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 105.289172][ T4199] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.132: Failed to acquire dquot type 0 [ 105.320963][ T4199] EXT4-fs (loop1): 1 truncate cleaned up [ 105.341529][ T4199] EXT4-fs (loop1): pa ffff888061388620: logic 1, phys. 41, len 23 [ 105.349864][ T4199] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 105.414838][ T4199] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 106.844416][ T4219] loop3: detected capacity change from 0 to 2048 [ 107.108655][ T4220] loop2: detected capacity change from 0 to 512 [ 107.143516][ T4219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.250136][ T4220] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.804292][ T25] audit: type=1804 audit(1726823959.612:16): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.135" name="/newroot/25/file1/bus" dev="loop3" ino=1368 res=1 errno=0 [ 109.086871][ T4220] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.089888][ T4220] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.137: Allocating blocks 41-42 which overlap fs metadata [ 110.136518][ T4220] EXT4-fs (loop2): Remounting filesystem read-only [ 110.170232][ T4220] Quota error (device loop2): write_blk: dquota write failed [ 110.368463][ T4220] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.627294][ T4220] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.137: Failed to acquire dquot type 0 [ 110.675709][ T4220] EXT4-fs (loop2): 1 truncate cleaned up [ 110.723990][ T4220] EXT4-fs (loop2): pa ffff888061388ee0: logic 1, phys. 41, len 23 [ 110.732054][ T4220] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 110.974088][ T4220] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 112.522883][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.357624][ T4296] loop3: detected capacity change from 0 to 512 [ 114.666190][ T4299] loop2: detected capacity change from 0 to 512 [ 114.693077][ T4296] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.751431][ T4299] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.784605][ T4296] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.857262][ T4299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.928090][ T4305] loop4: detected capacity change from 0 to 128 [ 114.947160][ T4296] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.154: Allocating blocks 41-42 which overlap fs metadata [ 114.998653][ T4299] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.155: Allocating blocks 41-42 which overlap fs metadata [ 115.075914][ T4296] EXT4-fs (loop3): Remounting filesystem read-only [ 115.130901][ T25] audit: type=1800 audit(1726823967.112:17): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.157" name="bus" dev="loop4" ino=1048607 res=0 errno=0 [ 115.158679][ T4296] Quota error (device loop3): write_blk: dquota write failed [ 115.166225][ T4299] EXT4-fs (loop2): Remounting filesystem read-only [ 115.216044][ T4299] Quota error (device loop2): write_blk: dquota write failed [ 115.229167][ T4296] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 115.279272][ T4299] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 115.299757][ T4296] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.154: Failed to acquire dquot type 0 [ 115.343920][ T4299] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.155: Failed to acquire dquot type 0 [ 115.365902][ T4296] EXT4-fs (loop3): 1 truncate cleaned up [ 115.443284][ T4299] EXT4-fs (loop2): 1 truncate cleaned up [ 115.454907][ T4299] EXT4-fs (loop2): pa ffff8880613887e0: logic 1, phys. 41, len 23 [ 115.455395][ T4296] EXT4-fs (loop3): pa ffff888061388a80: logic 1, phys. 41, len 23 [ 115.462800][ T4299] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 115.466211][ T4299] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 115.470969][ T4296] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 116.170277][ T4296] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 120.094358][ T4334] loop1: detected capacity change from 0 to 512 [ 120.271645][ T4334] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.521278][ T4334] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.614833][ T4334] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3879: comm syz.1.164: Allocating blocks 41-42 which overlap fs metadata [ 122.169721][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 122.176327][ T4334] Quota error (device loop1): write_blk: dquota write failed [ 123.331859][ T4334] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.900547][ T4334] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.164: Failed to acquire dquot type 0 [ 124.084469][ T4334] EXT4-fs (loop1): 1 truncate cleaned up [ 124.129303][ T4334] EXT4-fs (loop1): pa ffff888061388d20: logic 1, phys. 41, len 23 [ 124.137191][ T4334] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 124.252790][ T4334] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 124.366585][ T4376] loop4: detected capacity change from 0 to 128 [ 125.035443][ T4376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.097302][ T4376] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.783950][ T4406] loop3: detected capacity change from 0 to 512 [ 126.910992][ T4406] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.953368][ T4409] loop4: detected capacity change from 0 to 512 [ 127.018603][ T4388] loop1: detected capacity change from 0 to 40427 [ 127.019775][ T4406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.086341][ T4388] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 127.096227][ T4409] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.106679][ T4388] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.196835][ T4406] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.181: Allocating blocks 41-42 which overlap fs metadata [ 127.197466][ T4388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.255900][ T4409] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.270649][ T4406] EXT4-fs (loop3): Remounting filesystem read-only [ 127.301852][ T4409] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3879: comm syz.4.182: Allocating blocks 41-42 which overlap fs metadata [ 127.316607][ T4406] Quota error (device loop3): write_blk: dquota write failed [ 127.324989][ T4406] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.339099][ T4406] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.181: Failed to acquire dquot type 0 [ 127.354022][ T4406] EXT4-fs (loop3): 1 truncate cleaned up [ 127.359892][ T4409] EXT4-fs (loop4): Remounting filesystem read-only [ 127.368969][ T4409] Quota error (device loop4): write_blk: dquota write failed [ 127.377200][ T4409] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 127.387436][ T4406] EXT4-fs (loop3): pa ffff888061388000: logic 1, phys. 41, len 23 [ 127.395366][ T4406] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 127.405972][ T4409] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.182: Failed to acquire dquot type 0 [ 127.424994][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 127.459515][ T4409] EXT4-fs (loop4): 1 truncate cleaned up [ 127.492107][ T4409] EXT4-fs (loop4): pa ffff888061388c40: logic 1, phys. 41, len 23 [ 127.500122][ T4409] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 127.524541][ T4388] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.541449][ T4388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.566829][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 128.246957][ T4428] loop0: detected capacity change from 0 to 1024 [ 128.533838][ T4428] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.790755][ T4428] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.097124][ T4428] JBD2: no valid journal superblock found [ 129.118803][ T4428] EXT4-fs (loop0): error loading journal [ 129.385117][ T4432] loop3: detected capacity change from 0 to 512 [ 129.600962][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.633494][ T4432] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 130.728310][ T4452] loop4: detected capacity change from 0 to 128 [ 130.882299][ T4454] loop1: detected capacity change from 0 to 256 [ 131.148535][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.192020][ T4452] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 131.491950][ T4454] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 131.861111][ T25] audit: type=1800 audit(1726823983.632:18): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="file1" dev="loop1" ino=1048608 res=0 errno=0 [ 131.961781][ T4467] loop0: detected capacity change from 0 to 1024 [ 132.048658][ T4470] attempt to access beyond end of device [ 132.048658][ T4470] loop1: rw=0, want=304, limit=256 [ 132.083977][ T4467] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.133334][ T4467] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.209678][ T4467] JBD2: no valid journal superblock found [ 132.215479][ T4467] EXT4-fs (loop0): error loading journal [ 132.488338][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 132.606557][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.612949][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.582768][ T4496] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.954753][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 136.969591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 136.980226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 136.989729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 137.003630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 137.051207][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 137.069073][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 137.079069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 137.099073][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 137.119069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 137.936556][ T4528] loop0: detected capacity change from 0 to 512 [ 138.247879][ T4533] loop3: detected capacity change from 0 to 512 [ 138.923031][ T4533] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.125748][ T4533] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.303351][ T4533] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.211: Allocating blocks 41-42 which overlap fs metadata [ 143.468521][ T4533] EXT4-fs (loop3): Remounting filesystem read-only [ 143.506190][ T4533] Quota error (device loop3): write_blk: dquota write failed [ 143.514652][ T4533] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 143.525464][ T4533] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.211: Failed to acquire dquot type 0 [ 143.584488][ T4533] EXT4-fs (loop3): 1 truncate cleaned up [ 143.614293][ T4533] EXT4-fs (loop3): pa ffff888061388a80: logic 1, phys. 41, len 23 [ 143.622351][ T4533] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 143.653374][ T4533] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 144.102923][ T4548] kvm: emulating exchange as write [ 144.433250][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 144.482727][ T4559] device bridge_slave_1 left promiscuous mode [ 144.515501][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.614721][ T4559] device bridge_slave_0 left promiscuous mode [ 144.647591][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.257570][ T4613] loop3: detected capacity change from 0 to 512 [ 148.422474][ T4613] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.792189][ T4613] EXT4-fs (loop3): 1 orphan inode deleted [ 148.797951][ T4613] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.879234][ T4613] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 149.421057][ T4628] loop2: detected capacity change from 0 to 128 [ 149.921601][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.952365][ T4598] chnl_net:caif_netlink_parms(): no params data found [ 150.001431][ T4628] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 150.075678][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 150.564795][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.576836][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.761792][ T4598] device bridge_slave_0 entered promiscuous mode [ 150.825546][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.877837][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.913770][ T4598] device bridge_slave_1 entered promiscuous mode [ 151.721187][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 151.736322][ T4658] loop3: detected capacity change from 0 to 512 [ 151.802406][ T4598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.865314][ T4598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.916520][ T4658] EXT4-fs (loop3): 1 orphan inode deleted [ 151.929362][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.078798][ T4658] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 152.119234][ T1074] Bluetooth: hci5: command 0x041b tx timeout [ 153.074693][ T4598] team0: Port device team_slave_0 added [ 153.126186][ T4598] team0: Port device team_slave_1 added [ 153.478486][ T4676] loop2: detected capacity change from 0 to 512 [ 153.853447][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.869140][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.973744][ T4598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.048384][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.089182][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.204098][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 154.206243][ T4598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.286869][ T4676] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.244: corrupted inode contents [ 154.426411][ T4676] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.244: mark_inode_dirty error [ 154.672435][ T4676] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.244: corrupted inode contents [ 154.699505][ T4676] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.244: mark_inode_dirty error [ 154.701932][ T4598] device hsr_slave_0 entered promiscuous mode [ 154.730693][ T4676] Quota error (device loop2): write_blk: dquota write failed [ 154.738185][ T4676] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 154.761821][ T4676] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.244: Failed to acquire dquot type 0 [ 154.776890][ T4598] device hsr_slave_1 entered promiscuous mode [ 154.789623][ T4598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.797195][ T4598] Cannot create hsr debugfs directory [ 154.837599][ T4676] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.244: corrupted inode contents [ 154.873764][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 154.890572][ T4676] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.244: mark_inode_dirty error [ 154.921456][ T4676] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.244: corrupted inode contents [ 154.979184][ T4676] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.244: mark_inode_dirty error [ 155.024753][ T4676] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.244: corrupted inode contents [ 155.045645][ T4676] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 155.096668][ T4676] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.244: corrupted inode contents [ 155.178000][ T4676] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.244: mark_inode_dirty error [ 155.240543][ T4676] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 155.280775][ T4598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.312636][ T4676] EXT4-fs (loop2): 1 truncate cleaned up [ 155.338823][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.385160][ T4676] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038 (0x7fffffff) [ 156.473797][ T1074] Bluetooth: hci5: command 0x0419 tx timeout [ 156.499183][ T4676] syz.2.244 (4676) used greatest stack depth: 19704 bytes left [ 156.552470][ T4598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.731053][ T4598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.931243][ T4598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.512138][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 160.545386][ T4731] device bridge_slave_1 left promiscuous mode [ 160.580533][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.630637][ T4731] device bridge_slave_0 left promiscuous mode [ 160.636867][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.396236][ T4598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.519692][ T4598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.619891][ T4744] loop2: detected capacity change from 0 to 512 [ 161.627902][ T4598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.736837][ T4598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.840725][ T4744] EXT4-fs (loop2): 1 orphan inode deleted [ 161.859694][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.035646][ T4744] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038 (0x7fffffff) [ 162.513782][ T3663] Bluetooth: hci6: command 0x0409 tx timeout [ 163.244644][ T4715] chnl_net:caif_netlink_parms(): no params data found [ 163.582469][ T4765] loop1: detected capacity change from 0 to 512 [ 163.838297][ T4598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.850145][ T4765] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.262: corrupted inode contents [ 163.905360][ T4765] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.262: mark_inode_dirty error [ 163.958286][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.972405][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.001685][ T4765] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.262: corrupted inode contents [ 164.048512][ T4598] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.105256][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.115083][ T4765] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.262: mark_inode_dirty error [ 164.160924][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.171398][ T4765] Quota error (device loop1): write_blk: dquota write failed [ 164.178883][ T4765] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 164.199023][ T4777] loop2: detected capacity change from 0 to 1024 [ 164.208374][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.215474][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.219208][ T4765] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.262: Failed to acquire dquot type 0 [ 164.250988][ T4765] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.262: corrupted inode contents [ 164.279618][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.287802][ T4765] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #16: comm syz.1.262: mark_inode_dirty error [ 164.303757][ T4777] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 164.303757][ T4777] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 164.303757][ T4777] [ 164.330514][ T4765] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.262: corrupted inode contents [ 164.359260][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.366338][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.393501][ T4777] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 164.407172][ T4765] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.262: mark_inode_dirty error [ 164.440152][ T4777] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 164.440152][ T4777] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 164.440152][ T4777] [ 164.451972][ T4765] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.262: corrupted inode contents [ 164.461650][ T4715] device bridge_slave_0 entered promiscuous mode [ 164.479427][ T4765] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 164.488456][ T4765] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.262: corrupted inode contents [ 164.514879][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.523718][ T4777] EXT4-fs (loop2): Unrecognized mount option "fsuuid=810d86c5-982b-5247-2e28-3a68c693" or missing value [ 164.529666][ T4765] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.262: mark_inode_dirty error [ 164.535103][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.563093][ T4715] device bridge_slave_1 entered promiscuous mode [ 164.578309][ T4765] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 164.601038][ T3607] Bluetooth: hci6: command 0x041b tx timeout [ 164.609841][ T4765] EXT4-fs (loop1): 1 truncate cleaned up [ 164.615622][ T4765] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.628460][ T4765] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff) [ 164.687413][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.704060][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.734651][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.741807][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.928154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.671544][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.725660][ T4789] loop2: detected capacity change from 0 to 1024 [ 165.811292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.391020][ T4789] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.422328][ T4789] EXT4-fs (loop2): Ignoring removed orlov option [ 166.458033][ T4789] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 166.554972][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.797292][ T4802] loop3: detected capacity change from 0 to 1024 [ 166.826962][ T3607] Bluetooth: hci6: command 0x040f tx timeout [ 166.834242][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.855503][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.864336][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.873469][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.882234][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.905094][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.124045][ T4804] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 167.139314][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.173027][ T4802] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 167.173027][ T4802] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 167.173027][ T4802] [ 167.261150][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.358181][ T4802] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 167.377871][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.429416][ T4802] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 167.429416][ T4802] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 167.429416][ T4802] [ 167.452068][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.485910][ T4802] EXT4-fs (loop3): Unrecognized mount option "fsuuid=810d86c5-982b-5247-2e28-3a68c693" or missing value [ 167.503388][ T4715] team0: Port device team_slave_0 added [ 167.559904][ T4715] team0: Port device team_slave_1 added [ 167.613631][ T4813] loop2: detected capacity change from 0 to 512 [ 167.654125][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.691157][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.769086][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.831757][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.861152][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.005857][ T4813] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.270: corrupted inode contents [ 168.060415][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.376888][ T4813] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.270: mark_inode_dirty error [ 168.480020][ T4813] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.270: corrupted inode contents [ 168.557868][ T4598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.619524][ T4813] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.270: mark_inode_dirty error [ 168.652864][ T4822] loop3: detected capacity change from 0 to 1024 [ 168.671948][ T4813] Quota error (device loop2): write_blk: dquota write failed [ 168.691801][ T4813] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 168.705832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.713143][ T4813] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.270: Failed to acquire dquot type 0 [ 168.714481][ T4813] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.270: corrupted inode contents [ 168.758402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.766646][ T4813] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.270: mark_inode_dirty error [ 168.793605][ T4813] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.270: corrupted inode contents [ 168.814492][ T4824] loop1: detected capacity change from 0 to 512 [ 168.819660][ T4822] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.864060][ T4822] EXT4-fs (loop3): Ignoring removed orlov option [ 168.864981][ T4715] device hsr_slave_0 entered promiscuous mode [ 168.891827][ T4715] device hsr_slave_1 entered promiscuous mode [ 168.897311][ T4813] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.270: mark_inode_dirty error [ 168.920060][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 168.921738][ T4813] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.270: corrupted inode contents [ 168.952784][ T4822] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 168.985085][ T4715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.008214][ T4715] Cannot create hsr debugfs directory [ 169.025308][ T4824] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.272: corrupted inode contents [ 169.041199][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.050096][ T4813] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 169.050103][ T4824] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.272: mark_inode_dirty error [ 169.090233][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.118631][ T4813] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.270: corrupted inode contents [ 169.179358][ T4824] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.272: corrupted inode contents [ 169.199683][ T4813] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.270: mark_inode_dirty error [ 169.230511][ T4824] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.272: mark_inode_dirty error [ 169.252693][ T4813] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 169.283094][ T4824] Quota error (device loop1): write_blk: dquota write failed [ 169.291467][ T4813] EXT4-fs (loop2): 1 truncate cleaned up [ 169.298814][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.300039][ T4824] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 169.319280][ T4813] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038 (0x7fffffff) [ 169.347274][ T4824] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.272: Failed to acquire dquot type 0 [ 169.586028][ T4824] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.272: corrupted inode contents [ 169.834176][ T4824] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #16: comm syz.1.272: mark_inode_dirty error [ 170.095475][ T4824] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.272: corrupted inode contents [ 170.383263][ T4824] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.272: mark_inode_dirty error [ 170.423312][ T4824] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.272: corrupted inode contents [ 170.456680][ T4824] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 170.488925][ T4824] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.272: corrupted inode contents [ 170.519542][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 170.534516][ T4824] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.272: mark_inode_dirty error [ 170.539497][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 170.548895][ T4824] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 170.590130][ T4824] EXT4-fs (loop1): 1 truncate cleaned up [ 170.595793][ T4824] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.618191][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 170.641988][ T4824] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038 (0x7fffffff) [ 170.688513][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.735561][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.767438][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.784055][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.875583][ T4838] loop2: detected capacity change from 0 to 1024 [ 170.891247][ T4598] device veth0_vlan entered promiscuous mode [ 170.936451][ T3567] syz-executor (3567) used greatest stack depth: 19384 bytes left [ 171.026277][ T4598] device veth1_vlan entered promiscuous mode [ 171.141313][ T4838] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.302188][ T4838] EXT4-fs (loop2): Ignoring removed orlov option [ 171.712789][ T4838] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 171.932475][ T4598] device veth0_macvtap entered promiscuous mode [ 171.965311][ T4598] device veth1_macvtap entered promiscuous mode [ 172.139339][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.151318][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.170508][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.505276][ T4853] loop1: detected capacity change from 0 to 512 [ 172.627284][ T4853] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 172.658249][ T4853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 172.677358][ T4853] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.747054][ T4853] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 172.764752][ T4853] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.277: bg 0: block 40: padding at end of block bitmap is not set [ 172.812386][ T4853] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 172.823458][ T4715] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.834877][ T4853] EXT4-fs (loop1): 1 truncate cleaned up [ 172.843035][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.853790][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.861954][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.883257][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.895145][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.919394][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.941579][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.959669][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.970768][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.983423][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.995172][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.007461][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.029604][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.033413][ T4855] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 173.047425][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.097334][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.110998][ T4863] loop1: detected capacity change from 0 to 512 [ 173.285385][ T4715] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.314177][ T4867] loop3: detected capacity change from 0 to 512 [ 173.319017][ T4863] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.279: corrupted inode contents [ 173.336203][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.341666][ T4863] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.279: mark_inode_dirty error [ 173.366385][ T4863] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.279: corrupted inode contents [ 173.380897][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.398321][ T4863] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.279: mark_inode_dirty error [ 173.418890][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.429874][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.440149][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.447463][ T4863] Quota error (device loop1): write_blk: dquota write failed [ 173.451605][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.468814][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.480099][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.488645][ T4863] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 173.490308][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.511704][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.519803][ T4863] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.279: Failed to acquire dquot type 0 [ 173.523302][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.552135][ T4598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.602545][ T4867] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.280: corrupted inode contents [ 173.604016][ T4863] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.279: corrupted inode contents [ 173.630865][ T4598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.639729][ T4863] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #16: comm syz.1.279: mark_inode_dirty error [ 173.651098][ T4598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.660049][ T4598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.668871][ T4863] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.279: corrupted inode contents [ 173.682132][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.691897][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.695589][ T4867] EXT4-fs error (device loop3): ext4_dirty_inode:6007: inode #3: comm syz.3.280: mark_inode_dirty error [ 173.716480][ T4863] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.279: mark_inode_dirty error [ 173.744462][ T4715] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.767377][ T4863] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.279: corrupted inode contents [ 173.788475][ T4867] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.280: corrupted inode contents [ 173.819944][ T4863] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 173.829893][ T4867] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.280: mark_inode_dirty error [ 173.834420][ T4863] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.279: corrupted inode contents [ 173.864260][ T4715] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.868521][ T4867] Quota error (device loop3): write_blk: dquota write failed [ 173.894282][ T4867] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 173.905376][ T4867] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.280: Failed to acquire dquot type 0 [ 173.919629][ T4863] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.279: mark_inode_dirty error [ 173.941353][ T4867] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.280: corrupted inode contents [ 173.979906][ T4867] EXT4-fs error (device loop3): ext4_dirty_inode:6007: inode #16: comm syz.3.280: mark_inode_dirty error [ 173.995360][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.008324][ T4867] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.280: corrupted inode contents [ 174.023133][ T4863] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 174.041092][ T4867] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.280: mark_inode_dirty error [ 174.049196][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.065169][ T4863] EXT4-fs (loop1): 1 truncate cleaned up [ 174.086836][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.090682][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.094732][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.119573][ T4867] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.280: corrupted inode contents [ 174.149607][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.157216][ T4867] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 174.169910][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.178348][ T4867] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.280: corrupted inode contents [ 174.184297][ T4863] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038 (0x7fffffff) [ 174.202112][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.224171][ T4867] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.280: mark_inode_dirty error [ 174.236041][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.277239][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.277942][ T4867] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 174.348583][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.374407][ T4867] EXT4-fs (loop3): 1 truncate cleaned up [ 174.404475][ T4873] loop2: detected capacity change from 0 to 512 [ 174.419876][ T4867] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.433646][ T4867] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038 (0x7fffffff) [ 175.132382][ T4873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.281: corrupted inode contents [ 175.243337][ T4873] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.281: mark_inode_dirty error [ 175.301937][ T4873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.281: corrupted inode contents [ 175.330514][ T4873] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.281: mark_inode_dirty error [ 175.361947][ T4873] Quota error (device loop2): write_blk: dquota write failed [ 175.379907][ T4873] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 175.406104][ T4873] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.281: Failed to acquire dquot type 0 [ 175.411417][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.437790][ T4873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.281: corrupted inode contents [ 175.458707][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.470466][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.480747][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.498967][ T4873] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.281: mark_inode_dirty error [ 175.511400][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.542143][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.570548][ T4873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.281: corrupted inode contents [ 175.585747][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.592869][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.610471][ T4873] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.281: mark_inode_dirty error [ 175.630130][ T4873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.281: corrupted inode contents [ 175.671224][ T4873] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 175.682809][ T4873] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.281: corrupted inode contents [ 175.923593][ T4873] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.281: mark_inode_dirty error [ 176.346690][ T4873] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 176.419909][ T4873] EXT4-fs (loop2): 1 truncate cleaned up [ 176.432041][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.446207][ T4873] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.472375][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.483197][ T4873] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 176.494040][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.501144][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.632000][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.665932][ T4898] loop3: detected capacity change from 0 to 512 [ 176.716207][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.191697][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.285: corrupted inode contents [ 177.247403][ T4906] loop1: detected capacity change from 0 to 512 [ 177.259884][ T4898] EXT4-fs error (device loop3): ext4_dirty_inode:6007: inode #3: comm syz.3.285: mark_inode_dirty error [ 177.318505][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.285: corrupted inode contents [ 177.366998][ T4898] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.285: mark_inode_dirty error [ 177.386417][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.395054][ T4906] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 177.408623][ T4898] Quota error (device loop3): write_blk: dquota write failed [ 177.414849][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.428238][ T4898] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 177.442665][ T4898] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.285: Failed to acquire dquot type 0 [ 177.449415][ T4906] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.455502][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.471604][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.481690][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.285: corrupted inode contents [ 177.496717][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.500938][ T4906] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 177.506313][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.527170][ T4898] EXT4-fs error (device loop3): ext4_dirty_inode:6007: inode #16: comm syz.3.285: mark_inode_dirty error [ 177.540792][ T4906] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 177.541325][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.547702][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.285: corrupted inode contents [ 177.569401][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.577237][ T4898] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.285: mark_inode_dirty error [ 177.588942][ T4906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.287: bg 0: block 40: padding at end of block bitmap is not set [ 177.596991][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.626212][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.285: corrupted inode contents [ 177.664476][ T4906] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 177.670092][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.673549][ T4898] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 177.688957][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.707773][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.719818][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.285: corrupted inode contents [ 177.724740][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.731906][ T4906] EXT4-fs (loop1): 1 truncate cleaned up [ 177.748393][ T4906] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.842169][ T4917] loop2: detected capacity change from 0 to 16 [ 177.852107][ T4898] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.285: mark_inode_dirty error [ 177.996796][ T4898] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 178.243826][ T4898] EXT4-fs (loop3): 1 truncate cleaned up [ 178.363274][ T4898] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.477445][ T4898] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038 (0x7fffffff) [ 178.564153][ T4917] erofs: (device loop2): mounted with root inode @ nid 36. [ 179.415465][ T4924] loop2: detected capacity change from 0 to 512 [ 179.566455][ T4927] loop1: detected capacity change from 0 to 16 [ 179.770102][ T4927] erofs: (device loop1): mounted with root inode @ nid 36. [ 180.016911][ T4924] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.291: corrupted inode contents [ 180.070976][ T4924] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.291: mark_inode_dirty error [ 180.099204][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.101083][ T4924] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.291: corrupted inode contents [ 180.116185][ T4935] loop3: detected capacity change from 0 to 512 [ 180.127346][ T4924] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.291: mark_inode_dirty error [ 180.139598][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.154255][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.166167][ T4924] Quota error (device loop2): write_blk: dquota write failed [ 180.174552][ T4924] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 180.185290][ T4924] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.291: Failed to acquire dquot type 0 [ 180.199206][ T4924] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.291: corrupted inode contents [ 180.212707][ T4924] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.291: mark_inode_dirty error [ 180.225168][ T4924] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.291: corrupted inode contents [ 180.254698][ T4924] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.291: mark_inode_dirty error [ 180.269788][ T4924] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.291: corrupted inode contents [ 180.281227][ T4940] loop0: detected capacity change from 0 to 512 [ 180.286309][ T4935] EXT4-fs (loop3): 1 orphan inode deleted [ 180.341812][ T4935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.343564][ T4924] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 180.369931][ T4924] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.291: corrupted inode contents [ 180.377670][ T4935] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038 (0x7fffffff) [ 180.403990][ T4943] loop1: detected capacity change from 0 to 1024 [ 180.422782][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.295: corrupted inode contents [ 180.449406][ T4924] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.291: mark_inode_dirty error [ 180.469402][ T4940] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #3: comm syz.0.295: mark_inode_dirty error [ 180.481474][ T4943] EXT4-fs (loop1): Test dummy encryption mode enabled [ 180.483365][ T4924] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 180.488324][ T4943] EXT4-fs (loop1): Ignoring removed orlov option [ 180.559424][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.295: corrupted inode contents [ 180.597168][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.618076][ T4924] EXT4-fs (loop2): 1 truncate cleaned up [ 180.660737][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.671365][ T4924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.682592][ T4943] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 180.701062][ T4940] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.295: mark_inode_dirty error [ 180.718460][ T4924] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038 (0x7fffffff) [ 180.743483][ T4715] device veth0_vlan entered promiscuous mode [ 180.796046][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.827733][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.854188][ T4940] Quota error (device loop0): write_blk: dquota write failed [ 180.923036][ T4940] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 180.977264][ T4940] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.295: Failed to acquire dquot type 0 [ 181.029994][ T4715] device veth1_vlan entered promiscuous mode [ 181.037850][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.295: corrupted inode contents [ 181.071658][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.081889][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.102129][ T4940] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #16: comm syz.0.295: mark_inode_dirty error [ 181.124829][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.163682][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.221341][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.295: corrupted inode contents [ 181.275260][ T4715] device veth0_macvtap entered promiscuous mode [ 181.295369][ T4940] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.295: mark_inode_dirty error [ 181.316084][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.330036][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.357914][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.380142][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.295: corrupted inode contents [ 181.435775][ T4940] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 181.464120][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.295: corrupted inode contents [ 181.507266][ T4940] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.295: mark_inode_dirty error [ 181.539562][ T4940] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 181.575535][ T4940] EXT4-fs (loop0): 1 truncate cleaned up [ 181.594045][ T4940] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.614312][ T4940] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 181.716525][ T4715] device veth1_macvtap entered promiscuous mode [ 181.861985][ T4943] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 182.137864][ T4967] loop3: detected capacity change from 0 to 16 [ 182.577179][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.602518][ T4967] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.615440][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.636477][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.657021][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.677700][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.689740][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.707859][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.719334][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.739417][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.760633][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.778416][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.823791][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.836165][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.848765][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.879454][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.090907][ T4972] loop0: detected capacity change from 0 to 512 [ 183.114169][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.406523][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.422460][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.471803][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.516562][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.527631][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.538536][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.557961][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.589194][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.606878][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.622956][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.633364][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.645723][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.657046][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.667715][ T4715] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.677346][ T4715] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.712016][ T4715] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.724956][ T4715] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.779647][ T4981] loop3: detected capacity change from 0 to 512 [ 183.880194][ T4972] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 183.906106][ T4972] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.944200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.973369][ T4972] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 184.020298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.088141][ T4972] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 184.128562][ T4972] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.299: bg 0: block 40: padding at end of block bitmap is not set [ 184.144861][ T4972] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 184.156814][ T4972] EXT4-fs (loop0): 1 truncate cleaned up [ 184.162686][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.040628][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.048687][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.063133][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 185.142314][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.223378][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.275503][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.520779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.751014][ T5009] loop4: detected capacity change from 0 to 512 [ 186.965538][ T5013] loop3: detected capacity change from 0 to 512 [ 187.248391][ T5009] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.769802][ T5009] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 188.470014][ T3680] device hsr_slave_0 left promiscuous mode [ 188.491332][ T5024] loop3: detected capacity change from 0 to 128 [ 188.529353][ T3680] device hsr_slave_1 left promiscuous mode [ 188.562866][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.589585][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.598237][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.628307][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.720394][ T3680] device hsr_slave_0 left promiscuous mode [ 188.733992][ T3680] device hsr_slave_1 left promiscuous mode [ 188.825729][ T5024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.839362][ T5024] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 188.905211][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.953153][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.989984][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.997416][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.101143][ T3680] device veth1_macvtap left promiscuous mode [ 189.136868][ T3680] device veth0_macvtap left promiscuous mode [ 189.186995][ T3680] device veth1_vlan left promiscuous mode [ 189.214115][ T3680] device veth0_vlan left promiscuous mode [ 189.255087][ T3680] device veth1_macvtap left promiscuous mode [ 189.280746][ T3680] device veth0_macvtap left promiscuous mode [ 189.303959][ T3680] device veth1_vlan left promiscuous mode [ 189.324318][ T3680] device veth0_vlan left promiscuous mode [ 189.515245][ T5039] loop3: detected capacity change from 0 to 512 [ 189.599675][ T5039] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 189.660246][ T5039] EXT4-fs (loop3): orphan cleanup on readonly fs [ 189.677384][ T5039] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 189.816279][ T5039] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 189.832556][ T5039] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.315: bg 0: block 40: padding at end of block bitmap is not set [ 189.881614][ T5039] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 189.915944][ T5039] EXT4-fs (loop3): 1 truncate cleaned up [ 189.933788][ T5039] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.195770][ T5060] loop1: detected capacity change from 0 to 16 [ 192.853562][ T5060] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.158234][ T3680] team0 (unregistering): Port device team_slave_1 removed [ 193.216537][ T3680] team0 (unregistering): Port device team_slave_0 removed [ 193.264815][ T3680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.327942][ T3680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.536283][ T3680] bond0 (unregistering): Released all slaves [ 193.863790][ T3680] team0 (unregistering): Port device team_slave_1 removed [ 193.878521][ T3680] team0 (unregistering): Port device team_slave_0 removed [ 193.896321][ T3680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.938879][ T5071] loop2: detected capacity change from 0 to 128 [ 193.952987][ T3680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.993781][ T5071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.040609][ T5071] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 194.049366][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.078350][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.318298][ T3680] bond0 (unregistering): Released all slaves [ 194.403989][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 194.787349][ T5085] loop0: detected capacity change from 0 to 512 [ 194.900545][ T5085] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 194.961091][ T5085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.986022][ T5085] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 195.035743][ T5085] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 195.063297][ T5085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.329: bg 0: block 40: padding at end of block bitmap is not set [ 195.139622][ T5085] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 195.200268][ T5085] EXT4-fs (loop0): 1 truncate cleaned up [ 195.206067][ T5085] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.057429][ T5103] loop0: detected capacity change from 0 to 512 [ 196.214297][ T5103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.249296][ T5103] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 197.558218][ T5127] loop3: detected capacity change from 0 to 128 [ 197.716380][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.737409][ T5130] loop4: detected capacity change from 0 to 512 [ 197.769301][ T5127] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 197.850318][ T5130] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 197.861521][ T5130] EXT4-fs (loop4): orphan cleanup on readonly fs [ 197.871578][ T5130] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 197.887667][ T5130] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 197.899798][ T5130] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.341: bg 0: block 40: padding at end of block bitmap is not set [ 197.946676][ T5133] loop1: detected capacity change from 0 to 512 [ 197.990229][ T5130] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 198.037372][ T5130] EXT4-fs (loop4): 1 truncate cleaned up [ 198.092083][ T5130] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.209931][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 199.218858][ T5144] device bridge_slave_1 left promiscuous mode [ 199.246780][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.530311][ T5144] device bridge_slave_0 left promiscuous mode [ 199.536582][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.675476][ T5167] loop3: detected capacity change from 0 to 128 [ 200.757415][ T5169] loop1: detected capacity change from 0 to 1024 [ 200.791344][ T5167] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.820634][ T5167] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 200.839454][ T5169] EXT4-fs (loop1): Test dummy encryption mode enabled [ 200.950971][ T5169] EXT4-fs (loop1): Ignoring removed orlov option [ 201.004746][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 202.046589][ T5189] loop0: detected capacity change from 0 to 512 [ 202.229650][ T5189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.249353][ T5189] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 203.678838][ T5210] loop1: detected capacity change from 0 to 1024 [ 203.739357][ T5210] EXT4-fs (loop1): Test dummy encryption mode enabled [ 203.768562][ T5210] EXT4-fs (loop1): Ignoring removed orlov option [ 203.810539][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 204.245265][ T5217] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 209.040205][ T5252] loop2: detected capacity change from 0 to 16 [ 209.496461][ T5256] loop1: detected capacity change from 0 to 128 [ 209.514463][ T5252] erofs: (device loop2): mounted with root inode @ nid 36. [ 209.544847][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 209.566709][ T5254] device bridge_slave_1 left promiscuous mode [ 209.584581][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.807069][ T5254] device bridge_slave_0 left promiscuous mode [ 209.827172][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.648975][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 211.694255][ T5280] loop3: detected capacity change from 0 to 512 [ 212.128957][ T5280] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.149311][ T5280] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 216.112147][ T5317] loop0: detected capacity change from 0 to 128 [ 216.270406][ T5317] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.294147][ T5317] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 220.808473][ T5346] loop4: detected capacity change from 0 to 2048 [ 221.136327][ T5346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.000469][ T5356] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.400: Invalid block bitmap block 1869049708 in block_group 0 [ 222.066472][ T5362] loop3: detected capacity change from 0 to 512 [ 222.275034][ T5356] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 65536 with max blocks 1 with error 28 [ 222.350412][ T5356] EXT4-fs (loop4): This should not happen!! Data will be lost [ 222.350412][ T5356] [ 222.417229][ T5356] EXT4-fs (loop4): Total free blocks count 0 [ 222.454206][ T5356] EXT4-fs (loop4): Free/Dirty block details [ 222.489150][ T5356] EXT4-fs (loop4): free_blocks=0 [ 222.514989][ T5356] EXT4-fs (loop4): dirty_blocks=16 [ 222.547455][ T5356] EXT4-fs (loop4): Block reservation details [ 222.586384][ T5356] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 222.744621][ T4715] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz-executor: bit already cleared for inode 11 [ 222.831247][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 222.884044][ T5362] EXT4-fs (loop3): 1 orphan inode deleted [ 222.895031][ T5362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.896400][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 222.907621][ T5362] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038 (0x7fffffff) [ 222.935230][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 223.032100][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 223.129546][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 223.863341][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 223.882452][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 224.002605][ T4715] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 224.150375][ T5382] loop3: detected capacity change from 0 to 128 [ 224.311447][ T5382] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.334843][ T5382] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 224.874185][ T5398] loop0: detected capacity change from 0 to 1024 [ 224.996467][ T5398] EXT4-fs (loop0): Test dummy encryption mode enabled [ 225.033702][ T5398] EXT4-fs (loop0): Ignoring removed orlov option [ 225.120686][ T5400] loop3: detected capacity change from 0 to 512 [ 225.141905][ T5398] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 225.236498][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.249379][ T5400] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff) [ 226.472052][ T5410] loop0: detected capacity change from 0 to 128 [ 226.548453][ T5410] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.572770][ T5410] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 231.072184][ T5467] loop3: detected capacity change from 0 to 512 [ 232.833464][ T5492] loop1: detected capacity change from 0 to 512 [ 233.680441][ T5492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.783315][ T5492] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038 (0x7fffffff) [ 235.744349][ T5527] loop1: detected capacity change from 0 to 512 [ 235.890143][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 238.333513][ T5556] loop1: detected capacity change from 0 to 512 [ 238.525210][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.649543][ T5556] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038 (0x7fffffff) [ 238.951709][ T5553] input: syz0 as /devices/virtual/input/input5 [ 240.305322][ T5588] loop2: detected capacity change from 0 to 512 [ 241.846441][ T5606] loop2: detected capacity change from 0 to 512 [ 242.084597][ T5606] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.188393][ T5606] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 243.647722][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 244.945166][ T5641] loop4: detected capacity change from 0 to 512 [ 245.247459][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 246.127140][ T5654] loop4: detected capacity change from 0 to 128 [ 246.403124][ T5654] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.421813][ T5654] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 248.418825][ T5693] loop1: detected capacity change from 0 to 512 [ 248.570222][ T5693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.589385][ T5693] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038 (0x7fffffff) [ 248.945990][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 249.543045][ T5705] [ 249.545402][ T5705] ====================================================== [ 249.552413][ T5705] WARNING: possible circular locking dependency detected [ 249.559428][ T5705] 5.15.167-syzkaller #0 Not tainted [ 249.564619][ T5705] ------------------------------------------------------ [ 249.571627][ T5705] syz.1.497/5705 is trying to acquire lock: [ 249.577513][ T5705] ffff888061058c70 (&ei->i_data_sem/1){+.+.}-{3:3}, at: ext4_ioctl+0x3dec/0x5b80 [ 249.586672][ T5705] [ 249.586672][ T5705] but task is already holding lock: [ 249.594035][ T5705] ffff888061058278 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 249.604666][ T5705] [ 249.604666][ T5705] which lock already depends on the new lock. [ 249.604666][ T5705] [ 249.615062][ T5705] [ 249.615062][ T5705] the existing dependency chain (in reverse order) is: [ 249.624068][ T5705] [ 249.624068][ T5705] -> #3 (&ei->i_data_sem/2){++++}-{3:3}: [ 249.631872][ T5705] lock_acquire+0x1db/0x4f0 [ 249.636882][ T5705] down_read+0x45/0x2e0 [ 249.641541][ T5705] ext4_map_blocks+0x391/0x1c70 [ 249.646896][ T5705] ext4_getblk+0x19f/0x710 [ 249.651815][ T5705] ext4_bread+0x2a/0x170 [ 249.656563][ T5705] ext4_quota_read+0x1a1/0x2c0 [ 249.661829][ T5705] find_tree_dqentry+0x192/0xb60 [ 249.667269][ T5705] find_tree_dqentry+0x41a/0xb60 [ 249.672707][ T5705] qtree_read_dquot+0x13f/0x650 [ 249.678063][ T5705] v2_read_dquot+0xbe/0x100 [ 249.683066][ T5705] dquot_acquire+0x188/0x680 [ 249.688155][ T5705] ext4_acquire_dquot+0x2eb/0x4a0 [ 249.693686][ T5705] dqget+0x762/0xe90 [ 249.698083][ T5705] __dquot_initialize+0x2d9/0xea0 [ 249.703613][ T5705] ext4_process_orphan+0x57/0x2d0 [ 249.709152][ T5705] ext4_orphan_cleanup+0x9d9/0x1240 [ 249.714855][ T5705] ext4_fill_super+0x98de/0xa110 [ 249.720298][ T5705] mount_bdev+0x2c9/0x3f0 [ 249.725130][ T5705] legacy_get_tree+0xeb/0x180 [ 249.730307][ T5705] vfs_get_tree+0x88/0x270 [ 249.735224][ T5705] do_new_mount+0x2ba/0xb40 [ 249.740224][ T5705] __se_sys_mount+0x2d5/0x3c0 [ 249.745406][ T5705] do_syscall_64+0x3b/0xb0 [ 249.750325][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.756722][ T5705] [ 249.756722][ T5705] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 249.764778][ T5705] lock_acquire+0x1db/0x4f0 [ 249.769781][ T5705] down_read+0x45/0x2e0 [ 249.774445][ T5705] v2_read_dquot+0x4a/0x100 [ 249.779455][ T5705] dquot_acquire+0x188/0x680 [ 249.784547][ T5705] ext4_acquire_dquot+0x2eb/0x4a0 [ 249.790072][ T5705] dqget+0x762/0xe90 [ 249.794470][ T5705] __dquot_initialize+0x2d9/0xea0 [ 249.799992][ T5705] ext4_process_orphan+0x57/0x2d0 [ 249.805518][ T5705] ext4_orphan_cleanup+0x9d9/0x1240 [ 249.811218][ T5705] ext4_fill_super+0x98de/0xa110 [ 249.816657][ T5705] mount_bdev+0x2c9/0x3f0 [ 249.821485][ T5705] legacy_get_tree+0xeb/0x180 [ 249.826666][ T5705] vfs_get_tree+0x88/0x270 [ 249.831580][ T5705] do_new_mount+0x2ba/0xb40 [ 249.836586][ T5705] __se_sys_mount+0x2d5/0x3c0 [ 249.841763][ T5705] do_syscall_64+0x3b/0xb0 [ 249.846679][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.853075][ T5705] [ 249.853075][ T5705] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 249.860695][ T5705] lock_acquire+0x1db/0x4f0 [ 249.865701][ T5705] __mutex_lock_common+0x1da/0x25a0 [ 249.871399][ T5705] mutex_lock_nested+0x17/0x20 [ 249.876666][ T5705] dquot_commit+0x57/0x510 [ 249.881580][ T5705] ext4_write_dquot+0x1fd/0x360 [ 249.886934][ T5705] mark_all_dquot_dirty+0xf7/0x400 [ 249.892553][ T5705] __dquot_alloc_space+0xdd8/0x1090 [ 249.898251][ T5705] ext4_ioctl+0x4d2f/0x5b80 [ 249.903253][ T5705] __se_sys_ioctl+0xf1/0x160 [ 249.908347][ T5705] do_syscall_64+0x3b/0xb0 [ 249.913264][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.919661][ T5705] [ 249.919661][ T5705] -> #0 (&ei->i_data_sem/1){+.+.}-{3:3}: [ 249.927462][ T5705] validate_chain+0x1649/0x5930 [ 249.932813][ T5705] __lock_acquire+0x1295/0x1ff0 [ 249.938166][ T5705] lock_acquire+0x1db/0x4f0 [ 249.943169][ T5705] down_write_nested+0x3b/0x60 [ 249.948435][ T5705] ext4_ioctl+0x3dec/0x5b80 [ 249.953444][ T5705] __se_sys_ioctl+0xf1/0x160 [ 249.958536][ T5705] do_syscall_64+0x3b/0xb0 [ 249.963480][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.969874][ T5705] [ 249.969874][ T5705] other info that might help us debug this: [ 249.969874][ T5705] [ 249.980078][ T5705] Chain exists of: [ 249.980078][ T5705] &ei->i_data_sem/1 --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 249.980078][ T5705] [ 249.993877][ T5705] Possible unsafe locking scenario: [ 249.993877][ T5705] [ 250.001305][ T5705] CPU0 CPU1 [ 250.006647][ T5705] ---- ---- [ 250.011985][ T5705] lock(&ei->i_data_sem/2); [ 250.016557][ T5705] lock(&s->s_dquot.dqio_sem); [ 250.023905][ T5705] lock(&ei->i_data_sem/2); [ 250.031003][ T5705] lock(&ei->i_data_sem/1); [ 250.035575][ T5705] [ 250.035575][ T5705] *** DEADLOCK *** [ 250.035575][ T5705] [ 250.043693][ T5705] 5 locks held by syz.1.497/5705: [ 250.048691][ T5705] #0: ffff88807e592460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 250.058335][ T5705] #1: ffff8880610583f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: lock_two_nondirectories+0xde/0x130 [ 250.069537][ T5705] #2: ffff888061058de8 (&sb->s_type->i_mutex_key#9/4){+.+.}-{3:3}, at: ext4_ioctl+0x1fb2/0x5b80 [ 250.080050][ T5705] #3: ffff888061058f88 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_ioctl+0x3965/0x5b80 [ 250.090120][ T5705] #4: ffff888061058278 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 250.101151][ T5705] [ 250.101151][ T5705] stack backtrace: [ 250.107018][ T5705] CPU: 0 PID: 5705 Comm: syz.1.497 Not tainted 5.15.167-syzkaller #0 [ 250.115059][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 250.125092][ T5705] Call Trace: [ 250.128355][ T5705] [ 250.131266][ T5705] dump_stack_lvl+0x1e3/0x2d0 [ 250.135932][ T5705] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 250.141548][ T5705] ? print_circular_bug+0x12b/0x1a0 [ 250.146729][ T5705] check_noncircular+0x2f8/0x3b0 [ 250.151649][ T5705] ? add_chain_block+0x850/0x850 [ 250.156565][ T5705] ? lockdep_lock+0x11f/0x2a0 [ 250.161227][ T5705] validate_chain+0x1649/0x5930 [ 250.166066][ T5705] ? reacquire_held_locks+0x660/0x660 [ 250.171421][ T5705] ? reacquire_held_locks+0x660/0x660 [ 250.176776][ T5705] ? look_up_lock_class+0x77/0x120 [ 250.181872][ T5705] ? register_lock_class+0x100/0x9a0 [ 250.187141][ T5705] ? is_dynamic_key+0x1f0/0x1f0 [ 250.191973][ T5705] ? is_dynamic_key+0x1f0/0x1f0 [ 250.196809][ T5705] ? mark_lock+0x98/0x340 [ 250.201122][ T5705] __lock_acquire+0x1295/0x1ff0 [ 250.205959][ T5705] lock_acquire+0x1db/0x4f0 [ 250.210445][ T5705] ? ext4_ioctl+0x3dec/0x5b80 [ 250.215106][ T5705] ? read_lock_is_recursive+0x10/0x10 [ 250.220460][ T5705] ? __might_sleep+0xc0/0xc0 [ 250.225033][ T5705] ? rwsem_write_trylock+0x166/0x210 [ 250.230307][ T5705] ? clear_nonspinnable+0x60/0x60 [ 250.235319][ T5705] down_write_nested+0x3b/0x60 [ 250.240065][ T5705] ? ext4_ioctl+0x3dec/0x5b80 [ 250.244725][ T5705] ext4_ioctl+0x3dec/0x5b80 [ 250.249213][ T5705] ? do_vfs_ioctl+0x1b66/0x2b70 [ 250.254050][ T5705] ? ext4_fileattr_set+0x1750/0x1750 [ 250.259316][ T5705] ? __x64_compat_sys_ioctl+0x80/0x80 [ 250.264671][ T5705] ? __lock_acquire+0x1ff0/0x1ff0 [ 250.269679][ T5705] ? slab_free_freelist_hook+0xdd/0x160 [ 250.275214][ T5705] ? tomoyo_path_number_perm+0x648/0x810 [ 250.280841][ T5705] ? kfree+0xf1/0x270 [ 250.284806][ T5705] ? tomoyo_path_number_perm+0x6ab/0x810 [ 250.290432][ T5705] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 250.295886][ T5705] ? __fget_files+0x413/0x480 [ 250.300555][ T5705] ? bpf_lsm_file_ioctl+0x5/0x10 [ 250.305478][ T5705] ? security_file_ioctl+0x7d/0xa0 [ 250.310576][ T5705] ? ext4_fileattr_set+0x1750/0x1750 [ 250.315846][ T5705] __se_sys_ioctl+0xf1/0x160 [ 250.320422][ T5705] do_syscall_64+0x3b/0xb0 [ 250.324822][ T5705] ? clear_bhb_loop+0x15/0x70 [ 250.329479][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.335357][ T5705] RIP: 0033:0x7f2ccf9b8ef9 [ 250.339755][ T5705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.359342][ T5705] RSP: 002b:00007f2ccddef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.367738][ T5705] RAX: ffffffffffffffda RBX: 00007f2ccfb71130 RCX: 00007f2ccf9b8ef9 [ 250.375691][ T5705] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000008 [ 250.383642][ T5705] RBP: 00007f2ccfa2bb76 R08: 0000000000000000 R09: 0000000000000000 [ 250.391598][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.399552][ T5705] R13: 0000000000000000 R14: 00007f2ccfb71130 R15: 00007ffdfaceb8d8 [ 250.407515][ T5705] [ 255.482775][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.489142][ T1386] ieee802154 phy1 wpan1: encryption failed: -22