last executing test programs: 9.04841719s ago: executing program 0 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 7.656261309s ago: executing program 1 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xffffff71}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) 7.504837255s ago: executing program 3 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r2, r2, 0x0, 0x2) 7.37655156s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x80080, 0x1b0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 6.731271298s ago: executing program 1 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4800) 6.634332262s ago: executing program 1 (id=252): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 6.581956324s ago: executing program 0 (id=253): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.557932195s ago: executing program 2 (id=254): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r0, 0x400, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000012}, 0x40000) 6.44079894s ago: executing program 1 (id=255): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.905889803s ago: executing program 0 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @multicast}, 0x35) 4.624352786s ago: executing program 1 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f000009f000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x70) acct(&(0x7f0000000040)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40), 0x3b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@delqdisc={0xc8, 0x25, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xffe0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xb, 0x13aa, 0x300, 0x3, 0x3, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xc, 0x5, 0x7, 0x1, 0x1}, 0x7, 0x0, 0x8, 0x8, 0x6, 0x5, 0x7, 0x1a, 0x2, 0xb23e, {0x4, 0x7, 0x5, 0x8, 0x5, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff00000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = dup(0xffffffffffffffff) openat$incfs(r8, &(0x7f0000000240)='.pending_reads\x00', 0x680000, 0x22) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x0, 0x280, 0x8, 0x4d2005e, r7}) 4.603397377s ago: executing program 2 (id=258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000004140), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, 0x0, 0x4040000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) socket$kcm(0x10, 0x2, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x4, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 4.251826822s ago: executing program 0 (id=259): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.153919266s ago: executing program 2 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='system.advise\x00', &(0x7f0000000240)='*-\x00', 0x3, 0x2) keyctl$get_security(0x11, 0x0, &(0x7f00000003c0)=""/74, 0x4a) 3.149164378s ago: executing program 2 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 2.832923932s ago: executing program 3 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.609988851s ago: executing program 3 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.479562566s ago: executing program 0 (id=264): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) io_setup(0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x700, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.39545951s ago: executing program 3 (id=265): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x6c, 0x0) 1.166044082s ago: executing program 0 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0) 1.005989548s ago: executing program 2 (id=267): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000012}, 0x40000) 873.179243ms ago: executing program 3 (id=268): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 67.367107ms ago: executing program 1 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 0s ago: executing program 2 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 57.337317][ T5773] cgroup: Unknown subsys name 'net' [ 57.473483][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.832742][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.261973][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.277473][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.285508][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.293750][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.301822][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.309236][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.357564][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.368005][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.377931][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.387785][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.407874][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.427448][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.437154][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.437404][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.445397][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.459726][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.464161][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.467922][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.483111][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.491525][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.499841][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.508586][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.516544][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.532373][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.784340][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 60.934265][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.941571][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.949313][ T5783] bridge_slave_0: entered allmulticast mode [ 60.956148][ T5783] bridge_slave_0: entered promiscuous mode [ 61.008679][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.015854][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.023877][ T5783] bridge_slave_1: entered allmulticast mode [ 61.031135][ T5783] bridge_slave_1: entered promiscuous mode [ 61.067347][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 61.129495][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.154486][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.205841][ T5783] team0: Port device team_slave_0 added [ 61.212499][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 61.241865][ T5783] team0: Port device team_slave_1 added [ 61.248040][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 61.268489][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.275682][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.283905][ T5788] bridge_slave_0: entered allmulticast mode [ 61.290860][ T5788] bridge_slave_0: entered promiscuous mode [ 61.299746][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.307017][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.314178][ T5788] bridge_slave_1: entered allmulticast mode [ 61.321686][ T5788] bridge_slave_1: entered promiscuous mode [ 61.357410][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.364395][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.390426][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.432576][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.440334][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.466510][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.506416][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.519065][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.622504][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.630009][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.638376][ T5786] bridge_slave_0: entered allmulticast mode [ 61.645016][ T5786] bridge_slave_0: entered promiscuous mode [ 61.652592][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.659888][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.667232][ T5787] bridge_slave_0: entered allmulticast mode [ 61.673847][ T5787] bridge_slave_0: entered promiscuous mode [ 61.683624][ T5788] team0: Port device team_slave_0 added [ 61.692408][ T5788] team0: Port device team_slave_1 added [ 61.701586][ T5783] hsr_slave_0: entered promiscuous mode [ 61.708387][ T5783] hsr_slave_1: entered promiscuous mode [ 61.715177][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.722636][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.729888][ T5786] bridge_slave_1: entered allmulticast mode [ 61.736498][ T5786] bridge_slave_1: entered promiscuous mode [ 61.743208][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.750336][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.757916][ T5787] bridge_slave_1: entered allmulticast mode [ 61.764581][ T5787] bridge_slave_1: entered promiscuous mode [ 61.833138][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.841463][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.867417][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.880078][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.887360][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.913410][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.928347][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.940157][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.961364][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.973367][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.057999][ T5787] team0: Port device team_slave_0 added [ 62.066426][ T5786] team0: Port device team_slave_0 added [ 62.074975][ T5786] team0: Port device team_slave_1 added [ 62.104520][ T5787] team0: Port device team_slave_1 added [ 62.142301][ T5788] hsr_slave_0: entered promiscuous mode [ 62.149918][ T5788] hsr_slave_1: entered promiscuous mode [ 62.156034][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.164589][ T5788] Cannot create hsr debugfs directory [ 62.184547][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.191616][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.217761][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.229979][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.237009][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.263446][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.275219][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.282277][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.308208][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.324203][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.331470][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.357975][ T51] Bluetooth: hci0: command tx timeout [ 62.359074][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.517281][ T5787] hsr_slave_0: entered promiscuous mode [ 62.517693][ T51] Bluetooth: hci1: command tx timeout [ 62.529487][ T5787] hsr_slave_1: entered promiscuous mode [ 62.535578][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.543299][ T5787] Cannot create hsr debugfs directory [ 62.553741][ T5786] hsr_slave_0: entered promiscuous mode [ 62.560383][ T5786] hsr_slave_1: entered promiscuous mode [ 62.566428][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.574241][ T5786] Cannot create hsr debugfs directory [ 62.599134][ T51] Bluetooth: hci2: command tx timeout [ 62.599150][ T5792] Bluetooth: hci3: command tx timeout [ 62.746206][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.801201][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.811308][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.822088][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.919284][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.932166][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.947600][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.973251][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.029425][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.050438][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.060482][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.071435][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.147525][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.162904][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.176312][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.186638][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.195991][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.273566][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.307432][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.314722][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.325855][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.333174][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.426300][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.439498][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.495000][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.515647][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.530536][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.552813][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.590122][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.597299][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.608633][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.615780][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.625833][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.632995][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.643572][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.650770][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.661684][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.668931][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.695566][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.702745][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.810578][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.930371][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.013653][ T5783] veth0_vlan: entered promiscuous mode [ 64.029446][ T5783] veth1_vlan: entered promiscuous mode [ 64.074953][ T5783] veth0_macvtap: entered promiscuous mode [ 64.086246][ T5783] veth1_macvtap: entered promiscuous mode [ 64.139535][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.159896][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.183284][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198993][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.214011][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.223703][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.332710][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.353067][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.430979][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.437801][ T51] Bluetooth: hci0: command tx timeout [ 64.447115][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.496290][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.535413][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.541518][ T5787] veth0_vlan: entered promiscuous mode [ 64.556826][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.571537][ T5788] veth0_vlan: entered promiscuous mode [ 64.597243][ T51] Bluetooth: hci1: command tx timeout [ 64.606391][ T5788] veth1_vlan: entered promiscuous mode [ 64.633473][ T5787] veth1_vlan: entered promiscuous mode [ 64.691394][ T51] Bluetooth: hci3: command tx timeout [ 64.696994][ T5792] Bluetooth: hci2: command tx timeout [ 64.725656][ T5788] veth0_macvtap: entered promiscuous mode [ 64.871034][ T5788] veth1_macvtap: entered promiscuous mode [ 64.880813][ T5786] veth0_vlan: entered promiscuous mode [ 64.899999][ T5787] veth0_macvtap: entered promiscuous mode [ 65.070086][ T5786] veth1_vlan: entered promiscuous mode [ 65.164631][ T5787] veth1_macvtap: entered promiscuous mode [ 65.278351][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.304112][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.341600][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.470095][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.496658][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.544917][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.641449][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.660449][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.674935][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.691408][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.704571][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.723868][ T5786] veth0_macvtap: entered promiscuous mode [ 65.742496][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.756430][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.765693][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.779922][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.805771][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.845077][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.855114][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.865818][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.878957][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.891548][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.900313][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.916735][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.943479][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980431][ T5786] veth1_macvtap: entered promiscuous mode [ 66.011708][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.022236][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.033746][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.044712][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.055190][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.065877][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.078481][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.089609][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.101031][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.117481][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.128359][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.153347][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.164043][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.175710][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.261997][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.297509][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.306276][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.315952][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.373656][ T5880] syz.1.9[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.396371][ T5880] loop1: detected capacity change from 0 to 512 [ 66.445338][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.466623][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.489963][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.505141][ T5880] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.512917][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.528325][ T51] Bluetooth: hci0: command tx timeout [ 66.549123][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.601565][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.609581][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.639304][ T5880] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 66.677011][ T51] Bluetooth: hci1: command tx timeout [ 66.677789][ T5880] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 66.701819][ T5880] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.701819][ T5880] [ 66.712695][ T5880] EXT4-fs (loop1): Total free blocks count 0 [ 66.721046][ T5880] EXT4-fs (loop1): Free/Dirty block details [ 66.724482][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.728769][ T5880] EXT4-fs (loop1): free_blocks=65285 [ 66.744823][ T5880] EXT4-fs (loop1): dirty_blocks=1 [ 66.750143][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.761070][ T51] Bluetooth: hci3: command tx timeout [ 66.767528][ T51] Bluetooth: hci2: command tx timeout [ 66.774494][ T5880] EXT4-fs (loop1): Block reservation details [ 66.788064][ T5880] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 66.898725][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.933967][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.979144][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.110965][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.376290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.467174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.475570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.485068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.581235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.683566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.683848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.767287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.786217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.786264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.754576][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.834678][ T5792] Bluetooth: hci1: command tx timeout [ 68.840250][ T5792] Bluetooth: hci2: command tx timeout [ 68.845676][ T5785] Bluetooth: hci3: command tx timeout [ 68.851648][ T51] Bluetooth: hci0: command tx timeout [ 70.242678][ T5905] loop0: detected capacity change from 0 to 512 [ 70.392519][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.446115][ T5911] loop2: detected capacity change from 0 to 8192 [ 70.459151][ T5905] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.668597][ T5911] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 2068) [ 70.721220][ T5911] FAT-fs (loop2): Filesystem has been set read-only [ 72.035311][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.047437][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.248895][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.728583][ T5937] sched: RT throttling activated [ 77.178082][ T5950] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 77.307195][ T5952] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 77.870085][ T5957] loop0: detected capacity change from 0 to 128 [ 77.893763][ T5957] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 78.000410][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.608908][ T5971] loop2: detected capacity change from 0 to 512 [ 79.629750][ T5973] loop1: detected capacity change from 0 to 2048 [ 79.653506][ T5973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.771191][ T5971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.906919][ T5971] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.968632][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.204891][ T8] cfg80211: failed to load regulatory.db [ 83.659690][ T6004] loop3: detected capacity change from 0 to 8 [ 83.871589][ T6004] SQUASHFS error: zlib decompression failed, data probably corrupt [ 83.879812][ T6004] SQUASHFS error: Failed to read block 0x9b: -5 [ 83.886165][ T6004] SQUASHFS error: Unable to read metadata cache entry [99] [ 83.893548][ T6004] SQUASHFS error: Unable to read inode 0x127 [ 87.937354][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.827494][ T6035] devpts: called with bogus options [ 90.702351][ T6037] loop1: detected capacity change from 0 to 8 [ 90.718346][ T6037] SQUASHFS error: zlib decompression failed, data probably corrupt [ 90.726790][ T6037] SQUASHFS error: Failed to read block 0x9b: -5 [ 90.733024][ T6037] SQUASHFS error: Unable to read metadata cache entry [99] [ 90.740413][ T6037] SQUASHFS error: Unable to read inode 0x127 [ 90.999370][ T6044] loop3: detected capacity change from 0 to 512 [ 91.063538][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.082207][ T6044] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.281407][ T6049] loop0: detected capacity change from 0 to 2048 [ 91.332058][ T6049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.738433][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.660970][ T6079] devpts: called with bogus options [ 99.225794][ T6091] loop2: detected capacity change from 0 to 2048 [ 99.366536][ T6091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.762486][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.507241][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 101.541755][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.571104][ T8] usb 2-1: config 179 has no interface number 0 [ 101.608116][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.671879][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.726798][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.787407][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.821025][ T8] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.850980][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.866755][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.904262][ T6093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.667686][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.667862][ T23] usb 2-1: USB disconnect, device number 2 [ 103.676248][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.637671][ T6123] devpts: called with bogus options [ 107.479657][ T5924] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 108.867470][ T5924] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 108.876440][ T6135] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 108.896117][ T5924] usb 4-1: config 0 has no interface number 0 [ 108.926630][ T5924] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 108.976742][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.017458][ T5924] usb 4-1: config 0 descriptor?? [ 110.360024][ T5924] usb 4-1: string descriptor 0 read error: -71 [ 110.407636][ T5924] usb-storage 4-1:0.168: USB Mass Storage device detected [ 110.464386][ T5924] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 110.626837][ T5924] usb 4-1: USB disconnect, device number 2 [ 112.475139][ T6158] devpts: called with bogus options [ 113.653876][ T6164] loop0: detected capacity change from 0 to 512 [ 113.670272][ T6164] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.732524][ T6164] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 113.748846][ T6164] Quota error (device loop0): write_blk: dquota write failed [ 113.756658][ T6164] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 113.767606][ T6164] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.81: Failed to acquire dquot type 0 [ 113.786063][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 113.793045][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.959506][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.989857][ T6180] loop1: detected capacity change from 0 to 512 [ 118.147323][ T6180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.186879][ T6180] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.397280][ T6168] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 118.775290][ T6180] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 118.789214][ T6180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.789214][ T6180] [ 118.831108][ T6180] EXT4-fs (loop1): Total free blocks count 0 [ 118.876994][ T6180] EXT4-fs (loop1): Free/Dirty block details [ 119.023246][ T6180] EXT4-fs (loop1): free_blocks=65280 [ 119.151857][ T6180] EXT4-fs (loop1): dirty_blocks=1 [ 119.185474][ T6180] EXT4-fs (loop1): Block reservation details [ 119.210338][ T6180] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 119.317813][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.859315][ T6200] devpts: called with bogus options [ 122.175537][ T6211] loop1: detected capacity change from 0 to 512 [ 122.188052][ T6211] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.250396][ T6211] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 122.265138][ T6211] Quota error (device loop1): write_blk: dquota write failed [ 122.272600][ T6211] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 122.282604][ T6211] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.92: Failed to acquire dquot type 0 [ 122.294510][ T6211] EXT4-fs (loop1): 1 truncate cleaned up [ 122.301187][ T6211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.639043][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.826414][ T6241] devpts: called with bogus options [ 128.021254][ T6251] loop2: detected capacity change from 0 to 512 [ 128.490018][ T6251] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.547902][ T6251] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 128.562284][ T6251] Quota error (device loop2): write_blk: dquota write failed [ 128.569820][ T6251] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 128.579821][ T6251] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.104: Failed to acquire dquot type 0 [ 128.599588][ T6251] EXT4-fs (loop2): 1 truncate cleaned up [ 128.646372][ T6251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.851597][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.917907][ T6257] syzkaller0: entered promiscuous mode [ 128.927682][ T6257] syzkaller0: entered allmulticast mode [ 130.790549][ T6274] loop3: detected capacity change from 0 to 2048 [ 130.801883][ T6274] ======================================================= [ 130.801883][ T6274] WARNING: The mand mount option has been deprecated and [ 130.801883][ T6274] and is ignored by this kernel. Remove the mand [ 130.801883][ T6274] option from the mount to silence this warning. [ 130.801883][ T6274] ======================================================= [ 131.378085][ T6274] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 131.388831][ T6274] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 131.447579][ T6274] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 131.459408][ T6274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.398167][ T6281] devpts: called with bogus options [ 133.113223][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.120200][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.868949][ T6311] loop2: detected capacity change from 0 to 512 [ 137.885467][ T6311] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.938109][ T6311] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 137.952466][ T6311] Quota error (device loop2): write_blk: dquota write failed [ 137.960041][ T6311] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 137.969918][ T6311] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.115: Failed to acquire dquot type 0 [ 137.982631][ T6311] EXT4-fs (loop2): 1 truncate cleaned up [ 137.989084][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.580287][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.395681][ T6328] loop0: detected capacity change from 0 to 512 [ 140.419521][ T6328] EXT4-fs: Ignoring removed i_version option [ 140.699813][ T6328] EXT4-fs: Mount option(s) incompatible with ext2 [ 140.723888][ T6323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.256630][ T6323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.551351][ T6323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.382592][ T6323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.218049][ T6341] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 144.375795][ T6323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.421074][ T6323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.486537][ T6323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.514859][ T6323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.774016][ T6356] loop3: detected capacity change from 0 to 512 [ 144.843350][ T6356] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.885921][ T6356] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 144.901698][ T6356] Quota error (device loop3): write_blk: dquota write failed [ 144.909257][ T6356] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 144.919195][ T6356] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.131: Failed to acquire dquot type 0 [ 144.943045][ T6356] EXT4-fs (loop3): 1 truncate cleaned up [ 144.950015][ T6356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.265591][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.505139][ T6379] syz.3.140[6379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.505267][ T6379] syz.3.140[6379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.939629][ T6382] loop3: detected capacity change from 0 to 1024 [ 150.068174][ T6382] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.215191][ T6382] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 150.271051][ T6382] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 150.348151][ T6382] EXT4-fs (loop3): mount failed [ 150.732415][ T6397] loop2: detected capacity change from 0 to 512 [ 150.742387][ T6397] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.785301][ T6397] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 150.799842][ T6397] Quota error (device loop2): write_blk: dquota write failed [ 150.807393][ T6397] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 150.817269][ T6397] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.145: Failed to acquire dquot type 0 [ 150.840246][ T6397] EXT4-fs (loop2): 1 truncate cleaned up [ 150.847266][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.247622][ T6405] loop3: detected capacity change from 0 to 256 [ 151.284213][ T6405] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.295312][ T6405] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 151.359180][ T6405] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 154.049329][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.078731][ T6409] loop0: detected capacity change from 0 to 128 [ 154.254451][ T6412] netlink: 188 bytes leftover after parsing attributes in process `syz.2.149'. [ 154.266531][ T6409] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 154.294999][ T6409] FAT-fs (loop0): Filesystem has been set read-only [ 154.752983][ T6417] tipc: Started in network mode [ 154.868573][ T6417] tipc: Node identity 9299e8f61e3d, cluster identity 4711 [ 154.876265][ T6417] tipc: Enabled bearer , priority 0 [ 154.950590][ T6413] tipc: Resetting bearer [ 154.976618][ T6425] loop2: detected capacity change from 0 to 1024 [ 154.991731][ T6425] EXT4-fs: Ignoring removed oldalloc option [ 155.016389][ T6425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.079416][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.494217][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.820188][ T6438] loop1: detected capacity change from 0 to 256 [ 155.837239][ T6438] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.847983][ T6438] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 156.708720][ T6438] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 158.725709][ T6444] loop0: detected capacity change from 0 to 512 [ 158.914821][ T6444] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.030060][ T6444] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 159.030637][ T27] audit: type=1326 audit(1764650612.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8326d8f749 code=0x7ffc0000 [ 159.044589][ T6444] Quota error (device loop0): write_blk: dquota write failed [ 159.073942][ T6444] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 159.083956][ T6444] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.159: Failed to acquire dquot type 0 [ 159.096022][ T6444] EXT4-fs (loop0): 1 truncate cleaned up [ 159.102956][ T6444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.155426][ T27] audit: type=1326 audit(1764650612.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8326d8f749 code=0x7ffc0000 [ 159.177903][ T27] audit: type=1326 audit(1764650612.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8326d8f749 code=0x7ffc0000 [ 159.206518][ T27] audit: type=1326 audit(1764650612.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8326d8f749 code=0x7ffc0000 [ 159.229738][ T27] audit: type=1326 audit(1764650612.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8326d8f749 code=0x7ffc0000 [ 159.397833][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.193602][ T6413] tipc: Disabling bearer [ 166.213829][ T23] tipc: Node number set to 2359617782 [ 166.547447][ T6487] loop1: detected capacity change from 0 to 512 [ 166.562263][ T6487] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.611753][ T6487] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 166.626256][ T6487] Quota error (device loop1): write_blk: dquota write failed [ 166.633820][ T6487] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 166.643734][ T6487] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.170: Failed to acquire dquot type 0 [ 167.439159][ T6487] EXT4-fs (loop1): 1 truncate cleaned up [ 167.445483][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.746421][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.809521][ T6501] loop3: detected capacity change from 0 to 512 [ 167.897048][ T6501] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.959005][ T6501] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 169.020201][ T6501] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.174: inode #15: comm syz.3.174: iget: illegal inode # [ 169.077695][ T6501] EXT4-fs (loop3): Remounting filesystem read-only [ 169.085762][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.382793][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.934007][ T6517] loop0: detected capacity change from 0 to 512 [ 170.061898][ T6517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.106503][ T6517] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.537841][ T6516] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 170.583442][ T6516] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 170.619811][ T6516] EXT4-fs (loop0): This should not happen!! Data will be lost [ 170.619811][ T6516] [ 170.646827][ T6516] EXT4-fs (loop0): Total free blocks count 0 [ 170.667194][ T6516] EXT4-fs (loop0): Free/Dirty block details [ 170.686801][ T6516] EXT4-fs (loop0): free_blocks=65285 [ 170.692149][ T6516] EXT4-fs (loop0): dirty_blocks=1 [ 170.723614][ T6516] EXT4-fs (loop0): Block reservation details [ 170.755757][ T6516] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 171.226606][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.384875][ T6544] loop0: detected capacity change from 0 to 512 [ 172.405373][ T6544] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 172.437541][ T6544] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 172.567608][ T6544] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.574816][ T6544] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 172.624020][ T6546] loop1: detected capacity change from 0 to 512 [ 172.634017][ T6546] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.672705][ T6544] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #11: comm syz.0.185: corrupted inode contents [ 172.689360][ T6546] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 172.704378][ T6546] Quota error (device loop1): write_blk: dquota write failed [ 172.711968][ T6546] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 172.721907][ T6546] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.183: Failed to acquire dquot type 0 [ 172.748037][ T6546] EXT4-fs (loop1): 1 truncate cleaned up [ 172.754933][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.771847][ T6544] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #11: comm syz.0.185: mark_inode_dirty error [ 172.806023][ T6544] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.185: invalid indirect mapped block 327680 (level 0) [ 172.840607][ T6544] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #11: comm syz.0.185: corrupted inode contents [ 172.880265][ T6544] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 172.899613][ T6544] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #11: comm syz.0.185: corrupted inode contents [ 173.009251][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.033674][ T6544] EXT4-fs error (device loop0): ext4_truncate:4294: inode #11: comm syz.0.185: mark_inode_dirty error [ 173.074187][ T6544] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 173.112488][ T6544] EXT4-fs (loop0): 1 truncate cleaned up [ 173.129325][ T6544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.170115][ T6556] netlink: 'syz.3.190': attribute type 3 has an invalid length. [ 174.553661][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.758083][ T6577] syzkaller0: entered promiscuous mode [ 176.765875][ T6577] syzkaller0: entered allmulticast mode [ 176.952637][ T6578] loop3: detected capacity change from 0 to 512 [ 176.969792][ T6578] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.201051][ T27] audit: type=1326 audit(1764650631.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 177.235749][ T6582] loop1: detected capacity change from 0 to 512 [ 177.257595][ T6578] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 177.272665][ T6578] Quota error (device loop3): write_blk: dquota write failed [ 177.280318][ T6578] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 177.290234][ T6578] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.197: Failed to acquire dquot type 0 [ 177.309631][ T6578] EXT4-fs (loop3): 1 truncate cleaned up [ 177.316541][ T6578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.342860][ T27] audit: type=1326 audit(1764650631.140:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 177.367359][ T27] audit: type=1326 audit(1764650631.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 177.393956][ T27] audit: type=1326 audit(1764650631.140:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 177.439452][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.460298][ T6582] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.473065][ T27] audit: type=1326 audit(1764650631.140:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.550440][ T27] audit: type=1326 audit(1764650631.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.608862][ T27] audit: type=1326 audit(1764650631.140:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.696856][ T27] audit: type=1326 audit(1764650631.140:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.725067][ T6580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 178.736838][ T27] audit: type=1326 audit(1764650631.140:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.747238][ T6580] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 178.776887][ T6580] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.776887][ T6580] [ 178.787937][ T6580] EXT4-fs (loop1): Total free blocks count 0 [ 178.796322][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.823698][ T27] audit: type=1326 audit(1764650631.140:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.892398][ T6580] EXT4-fs (loop1): Free/Dirty block details [ 178.899059][ T27] audit: type=1326 audit(1764650631.140:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbb8f749 code=0x7ffc0000 [ 178.944404][ T6580] EXT4-fs (loop1): free_blocks=65285 [ 178.972165][ T6580] EXT4-fs (loop1): dirty_blocks=1 [ 179.007333][ T27] audit: type=1326 audit(1764650631.150:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdbbb91667 code=0x7ffc0000 [ 179.017270][ T6580] EXT4-fs (loop1): Block reservation details [ 179.069255][ T6580] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 179.092102][ T27] audit: type=1326 audit(1764650631.150:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbdbbb915dc code=0x7ffc0000 [ 179.155739][ T27] audit: type=1326 audit(1764650631.150:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbdbbb91514 code=0x7ffc0000 [ 179.216623][ T27] audit: type=1326 audit(1764650631.150:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbdbbb91514 code=0x7ffc0000 [ 179.231912][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.375486][ T6603] loop3: detected capacity change from 0 to 512 [ 179.464205][ T6603] EXT4-fs (loop3): 1 truncate cleaned up [ 179.514078][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.578196][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.738287][ T6612] syzkaller0: entered promiscuous mode [ 180.744134][ T6612] syzkaller0: entered allmulticast mode [ 180.966410][ T6614] loop3: detected capacity change from 0 to 128 [ 181.019896][ T6614] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.168867][ T6617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.860970][ T6614] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.715535][ T6622] mmap: syz.1.205 (6622) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.145675][ T6626] loop0: detected capacity change from 0 to 8 [ 183.184599][ T6626] SQUASHFS error: zlib decompression failed, data probably corrupt [ 183.193217][ T6626] SQUASHFS error: Failed to read block 0x9b: -5 [ 183.199509][ T6626] SQUASHFS error: Unable to read metadata cache entry [99] [ 183.206778][ T6626] SQUASHFS error: Unable to read inode 0x127 [ 183.793741][ T6628] loop1: detected capacity change from 0 to 128 [ 183.995743][ T6628] syz.1.209: attempt to access beyond end of device [ 183.995743][ T6628] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 184.109846][ T6631] loop2: detected capacity change from 0 to 512 [ 184.120442][ T6631] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.230710][ T6631] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 184.247205][ T6631] __quota_error: 17 callbacks suppressed [ 184.247219][ T6631] Quota error (device loop2): write_blk: dquota write failed [ 184.262713][ T6631] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 184.272816][ T6631] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.210: Failed to acquire dquot type 0 [ 184.327098][ T6631] EXT4-fs (loop2): 1 truncate cleaned up [ 184.333990][ T6631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.195618][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.196528][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.535663][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 186.535680][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 186.535794][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 186.697323][ T6641] syzkaller0: entered promiscuous mode [ 187.555982][ T6641] syzkaller0: entered allmulticast mode [ 190.431470][ T6667] loop1: detected capacity change from 0 to 512 [ 190.514946][ T6667] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.556910][ T6667] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 190.572876][ T6667] Quota error (device loop1): write_blk: dquota write failed [ 190.582231][ T6667] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 190.593643][ T6667] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.221: Failed to acquire dquot type 0 [ 190.676743][ T6667] EXT4-fs (loop1): 1 truncate cleaned up [ 190.697994][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.347409][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.669776][ T6689] syzkaller0: entered promiscuous mode [ 191.675669][ T6689] syzkaller0: entered allmulticast mode [ 191.816804][ T6691] loop2: detected capacity change from 0 to 8 [ 191.898860][ T6691] SQUASHFS error: zlib decompression failed, data probably corrupt [ 191.906972][ T6691] SQUASHFS error: Failed to read block 0x9b: -5 [ 191.913226][ T6691] SQUASHFS error: Unable to read metadata cache entry [99] [ 191.920528][ T6691] SQUASHFS error: Unable to read inode 0x127 [ 192.453362][ T6693] Illegal XDP return value 4292177648 on prog (id 74) dev syz_tun, expect packet loss! [ 192.593581][ T6697] loop2: detected capacity change from 0 to 764 [ 192.686819][ T27] audit: type=1800 audit(1764650646.580:39): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.229" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 192.717490][ T6697] Symlink component flag not implemented [ 192.964390][ T6704] loop3: detected capacity change from 0 to 2048 [ 192.988935][ T6705] loop1: detected capacity change from 0 to 512 [ 193.013229][ T6704] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 193.024985][ T6704] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 193.039794][ T6704] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 193.051987][ T6704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.070556][ T6705] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.080662][ T6697] Symlink component flag not implemented (129) [ 193.135963][ T6705] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 193.151472][ T6705] Quota error (device loop1): write_blk: dquota write failed [ 193.159215][ T6705] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 193.169304][ T6705] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.232: Failed to acquire dquot type 0 [ 193.184444][ T6705] EXT4-fs (loop1): 1 truncate cleaned up [ 193.190928][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.245267][ T6697] rock: directory entry would overflow storage [ 193.261782][ T6697] rock: sig=0x4f50, size=4, remaining=3 [ 193.268080][ T6697] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 193.605954][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.997544][ T6722] syzkaller0: entered promiscuous mode [ 194.009822][ T6722] syzkaller0: entered allmulticast mode [ 194.149516][ T6728] loop0: detected capacity change from 0 to 1024 [ 194.219927][ T6734] loop2: detected capacity change from 0 to 512 [ 194.238807][ T6734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.252250][ T6728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 194.275105][ T6728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.353599][ T6728] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.241: bg 0: block 88: padding at end of block bitmap is not set [ 194.390215][ T6734] EXT4-fs error (device loop2): __ext4_iget:5067: inode #11: block 524312: comm syz.2.243: invalid block [ 194.391362][ T6728] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 194.502115][ T6734] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.243: couldn't read orphan inode 11 (err -117) [ 194.553829][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.585631][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.789472][ T6734] EXT4-fs (loop2): 1 truncate cleaned up [ 195.038767][ T6734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.160540][ T6734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.243: bg 0: block 5: invalid block bitmap [ 195.193738][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 195.207962][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.227888][ T6734] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.245295][ T6734] EXT4-fs (loop2): This should not happen!! Data will be lost [ 195.245295][ T6734] [ 195.785724][ T6742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.540063][ T6734] EXT4-fs (loop2): Total free blocks count 0 [ 196.561062][ T6734] EXT4-fs (loop2): Free/Dirty block details [ 196.577918][ T6734] EXT4-fs (loop2): free_blocks=0 [ 196.593373][ T6734] EXT4-fs (loop2): dirty_blocks=66 [ 196.614970][ T6734] EXT4-fs (loop2): Block reservation details [ 196.622095][ T6734] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 196.694833][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 197.171291][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.249'. [ 197.274440][ T6755] loop9: detected capacity change from 0 to 7 [ 197.324200][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.333663][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.382024][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.391482][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.413911][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.423179][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.467254][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.476835][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.494819][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.504062][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.521545][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.531067][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.540397][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.549631][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.560923][ T6755] ldm_validate_partition_table(): Disk read failed. [ 197.569191][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.578433][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.587272][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.596585][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.617054][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.626250][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.636777][ T6755] Dev loop9: unable to read RDB block 0 [ 197.647635][ T6761] IPv6: Can't replace route, no match found [ 197.660012][ T6755] loop9: unable to read partition table [ 197.665916][ T6755] loop9: partition table beyond EOD, truncated [ 197.688938][ T6755] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 197.688938][ T6755] ) failed (rc=-5) [ 197.756394][ T27] audit: type=1326 audit(1764650651.660:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 197.821138][ T27] audit: type=1326 audit(1764650651.660:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 197.912951][ T27] audit: type=1326 audit(1764650651.660:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 197.935713][ T27] audit: type=1326 audit(1764650651.660:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 198.305927][ T27] audit: type=1326 audit(1764650651.660:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 199.588645][ T27] audit: type=1326 audit(1764650651.700:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 199.596139][ T6773] batadv_slave_1: entered promiscuous mode [ 199.736906][ T27] audit: type=1326 audit(1764650651.700:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 199.789256][ T27] audit: type=1326 audit(1764650651.700:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 199.804801][ T6772] batadv_slave_1: left promiscuous mode [ 199.837087][ T27] audit: type=1326 audit(1764650651.700:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 199.859347][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 199.916478][ T27] audit: type=1326 audit(1764650651.700:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe740b8f749 code=0x7ffc0000 [ 201.450530][ T6789] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.098560][ T6791] Zero length message leads to an empty skb [ 203.106393][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 203.106404][ T27] audit: type=1326 audit(1764650657.010:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 203.150132][ T27] audit: type=1326 audit(1764650657.050:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 203.436925][ T27] audit: type=1326 audit(1764650657.060:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 203.741152][ T27] audit: type=1326 audit(1764650657.060:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.076905][ T27] audit: type=1326 audit(1764650657.060:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.168823][ T27] audit: type=1326 audit(1764650657.060:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.192505][ T27] audit: type=1326 audit(1764650657.100:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.220270][ T27] audit: type=1326 audit(1764650657.110:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.242434][ T27] audit: type=1326 audit(1764650657.120:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.264745][ T27] audit: type=1326 audit(1764650657.120:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3898f8f749 code=0x7ffc0000 [ 204.416146][ T6810] loop1: detected capacity change from 0 to 512 [ 204.453117][ T6810] [ 204.455493][ T6810] ====================================================== [ 204.462518][ T6810] WARNING: possible circular locking dependency detected [ 204.469553][ T6810] syzkaller #0 Not tainted [ 204.473976][ T6810] ------------------------------------------------------ [ 204.480995][ T6810] syz.1.269/6810 is trying to acquire lock: [ 204.486890][ T6810] ffff8880549a4bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 204.496941][ T6810] [ 204.496941][ T6810] but task is already holding lock: [ 204.504305][ T6810] ffff8880513814c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 204.514158][ T6810] [ 204.514158][ T6810] which lock already depends on the new lock. [ 204.514158][ T6810] [ 204.524562][ T6810] [ 204.524562][ T6810] the existing dependency chain (in reverse order) is: [ 204.533594][ T6810] [ 204.533594][ T6810] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 204.541159][ T6810] down_write+0x97/0x1f0 [ 204.545911][ T6810] ext4_destroy_inline_data+0x28/0xe0 [ 204.551792][ T6810] ext4_do_writepages+0x4c2/0x38d0 [ 204.557413][ T6810] ext4_writepages+0x1a8/0x2f0 [ 204.562685][ T6810] do_writepages+0x3a2/0x600 [ 204.567789][ T6810] filemap_fdatawrite_wbc+0x122/0x180 [ 204.573675][ T6810] file_write_and_wait_range+0x171/0x240 [ 204.579817][ T6810] generic_buffers_fsync_noflush+0x6f/0x160 [ 204.586344][ T6810] ext4_sync_file+0x454/0xc10 [ 204.591534][ T6810] ext4_buffered_write_iter+0x2c0/0x350 [ 204.597615][ T6810] ext4_file_write_iter+0x1d9/0x1870 [ 204.603501][ T6810] vfs_write+0x43b/0x940 [ 204.608258][ T6810] __x64_sys_pwrite64+0x195/0x220 [ 204.613791][ T6810] do_syscall_64+0x55/0xb0 [ 204.618716][ T6810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.625114][ T6810] [ 204.625114][ T6810] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 204.633543][ T6810] __lock_acquire+0x2ddb/0x7c80 [ 204.638909][ T6810] lock_acquire+0x197/0x410 [ 204.643918][ T6810] percpu_down_read+0x44/0x1a0 [ 204.649195][ T6810] ext4_writepages+0x170/0x2f0 [ 204.654472][ T6810] do_writepages+0x3a2/0x600 [ 204.659594][ T6810] __writeback_single_inode+0x153/0xee0 [ 204.665658][ T6810] writeback_single_inode+0x211/0x720 [ 204.671550][ T6810] write_inode_now+0x161/0x1e0 [ 204.676837][ T6810] iput+0x5b2/0x920 [ 204.681153][ T6810] ext4_xattr_block_set+0x273a/0x32a0 [ 204.687039][ T6810] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 204.693443][ T6810] __ext4_expand_extra_isize+0x306/0x400 [ 204.699589][ T6810] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 204.705558][ T6810] ext4_evict_inode+0x7ed/0xea0 [ 204.710922][ T6810] evict+0x486/0x870 [ 204.715323][ T6810] ext4_orphan_cleanup+0xbd4/0x1400 [ 204.721031][ T6810] ext4_fill_super+0x5de4/0x66c0 [ 204.726482][ T6810] get_tree_bdev+0x3e4/0x510 [ 204.731579][ T6810] vfs_get_tree+0x8c/0x280 [ 204.736500][ T6810] do_new_mount+0x24b/0xa40 [ 204.741512][ T6810] __se_sys_mount+0x2da/0x3c0 [ 204.746698][ T6810] do_syscall_64+0x55/0xb0 [ 204.751627][ T6810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.758033][ T6810] [ 204.758033][ T6810] other info that might help us debug this: [ 204.758033][ T6810] [ 204.768256][ T6810] Possible unsafe locking scenario: [ 204.768256][ T6810] [ 204.775695][ T6810] CPU0 CPU1 [ 204.781055][ T6810] ---- ---- [ 204.786401][ T6810] lock(&ei->xattr_sem); [ 204.790732][ T6810] lock(&sbi->s_writepages_rwsem); [ 204.798434][ T6810] lock(&ei->xattr_sem); [ 204.805268][ T6810] rlock(&sbi->s_writepages_rwsem); [ 204.810538][ T6810] [ 204.810538][ T6810] *** DEADLOCK *** [ 204.810538][ T6810] [ 204.818674][ T6810] 3 locks held by syz.1.269/6810: [ 204.823682][ T6810] #0: ffff8880549a20e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 204.833767][ T6810] #1: ffff8880549a2608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 204.843153][ T6810] #2: ffff8880513814c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 204.853409][ T6810] [ 204.853409][ T6810] stack backtrace: [ 204.859294][ T6810] CPU: 0 PID: 6810 Comm: syz.1.269 Not tainted syzkaller #0 [ 204.866567][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.876790][ T6810] Call Trace: [ 204.880056][ T6810] [ 204.882980][ T6810] dump_stack_lvl+0x16c/0x230 [ 204.887652][ T6810] ? load_image+0x3b0/0x3b0 [ 204.892142][ T6810] ? show_regs_print_info+0x20/0x20 [ 204.897328][ T6810] ? print_circular_bug+0x12b/0x1a0 [ 204.902516][ T6810] check_noncircular+0x2bd/0x3c0 [ 204.907446][ T6810] ? look_up_lock_class+0x75/0x140 [ 204.912542][ T6810] ? print_deadlock_bug+0x5d0/0x5d0 [ 204.917731][ T6810] ? lockdep_lock+0xe0/0x220 [ 204.922307][ T6810] ? _find_first_zero_bit+0xd3/0x100 [ 204.927584][ T6810] __lock_acquire+0x2ddb/0x7c80 [ 204.932429][ T6810] ? mark_lock+0x94/0x320 [ 204.936769][ T6810] ? verify_lock_unused+0x140/0x140 [ 204.941951][ T6810] ? __lock_acquire+0x1334/0x7c80 [ 204.946963][ T6810] ? verify_lock_unused+0x140/0x140 [ 204.952154][ T6810] lock_acquire+0x197/0x410 [ 204.956647][ T6810] ? ext4_writepages+0x170/0x2f0 [ 204.961584][ T6810] ? __might_sleep+0xe0/0xe0 [ 204.966163][ T6810] ? mark_lock+0x94/0x320 [ 204.970479][ T6810] ? read_lock_is_recursive+0x20/0x20 [ 204.975839][ T6810] ? __lock_acquire+0x1334/0x7c80 [ 204.980853][ T6810] percpu_down_read+0x44/0x1a0 [ 204.985608][ T6810] ? ext4_writepages+0x170/0x2f0 [ 204.990560][ T6810] ext4_writepages+0x170/0x2f0 [ 204.995314][ T6810] ? ext4_read_folio+0x2f0/0x2f0 [ 205.000278][ T6810] ? __rwlock_init+0x150/0x150 [ 205.005293][ T6810] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 205.011182][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 205.016369][ T6810] ? ext4_read_folio+0x2f0/0x2f0 [ 205.021302][ T6810] do_writepages+0x3a2/0x600 [ 205.025895][ T6810] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 205.031606][ T6810] ? writeback_single_inode+0x206/0x720 [ 205.037165][ T6810] ? __lock_acquire+0x7c80/0x7c80 [ 205.042176][ T6810] ? do_raw_spin_lock+0x121/0x2c0 [ 205.047194][ T6810] ? get_tree_bdev+0x3e4/0x510 [ 205.051945][ T6810] __writeback_single_inode+0x153/0xee0 [ 205.057485][ T6810] writeback_single_inode+0x211/0x720 [ 205.062847][ T6810] ? write_inode_now+0x1e0/0x1e0 [ 205.067783][ T6810] write_inode_now+0x161/0x1e0 [ 205.072543][ T6810] ? bdi_split_work_to_wbs+0x890/0x890 [ 205.077997][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 205.083184][ T6810] iput+0x5b2/0x920 [ 205.086981][ T6810] ext4_xattr_block_set+0x273a/0x32a0 [ 205.092343][ T6810] ? __might_sleep+0xe0/0xe0 [ 205.096927][ T6810] ? xattr_find_entry+0x12b/0x2f0 [ 205.101943][ T6810] ? ext4_xattr_block_find+0x350/0x350 [ 205.107396][ T6810] ? ext4_xattr_block_find+0x2d4/0x350 [ 205.112848][ T6810] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 205.118773][ T6810] __ext4_expand_extra_isize+0x306/0x400 [ 205.124402][ T6810] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 205.129857][ T6810] ext4_evict_inode+0x7ed/0xea0 [ 205.134695][ T6810] ? _raw_spin_unlock+0x28/0x40 [ 205.139542][ T6810] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 205.145428][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 205.150614][ T6810] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 205.156525][ T6810] evict+0x486/0x870 [ 205.160410][ T6810] ? __lock_acquire+0x7c80/0x7c80 [ 205.165509][ T6810] ? proc_nr_inodes+0x230/0x230 [ 205.170353][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 205.175547][ T6810] ? _raw_spin_unlock+0x28/0x40 [ 205.180387][ T6810] ? iput+0x70a/0x920 [ 205.184366][ T6810] ext4_orphan_cleanup+0xbd4/0x1400 [ 205.189564][ T6810] ? ext4_orphan_del+0xba0/0xba0 [ 205.194494][ T6810] ? ext4_register_li_request+0x183/0x940 [ 205.200207][ T6810] ? errseq_check_and_advance+0x66/0x120 [ 205.205826][ T6810] ext4_fill_super+0x5de4/0x66c0 [ 205.210764][ T6810] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 205.216998][ T6810] ? __might_sleep+0xe0/0xe0 [ 205.221577][ T6810] ? read_lock_is_recursive+0x20/0x20 [ 205.226938][ T6810] ? snprintf+0xdb/0x120 [ 205.231172][ T6810] ? vscnprintf+0x80/0x80 [ 205.235492][ T6810] ? down_write+0x162/0x1f0 [ 205.240075][ T6810] ? down_read_killable+0x340/0x340 [ 205.245258][ T6810] ? setup_bdev_super+0x56b/0x660 [ 205.250268][ T6810] get_tree_bdev+0x3e4/0x510 [ 205.254841][ T6810] ? vfs_parse_fs_string+0x160/0x160 [ 205.260113][ T6810] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 205.266346][ T6810] ? setup_bdev_super+0x660/0x660 [ 205.271356][ T6810] ? apparmor_capable+0x137/0x1a0 [ 205.276366][ T6810] ? bpf_lsm_capable+0x9/0x10 [ 205.281031][ T6810] ? security_capable+0x89/0xb0 [ 205.285872][ T6810] vfs_get_tree+0x8c/0x280 [ 205.290273][ T6810] do_new_mount+0x24b/0xa40 [ 205.294774][ T6810] __se_sys_mount+0x2da/0x3c0 [ 205.299437][ T6810] ? __x64_sys_mount+0xc0/0xc0 [ 205.304291][ T6810] ? lockdep_hardirqs_on+0x98/0x150 [ 205.309566][ T6810] ? __x64_sys_mount+0x20/0xc0 [ 205.314322][ T6810] do_syscall_64+0x55/0xb0 [ 205.318736][ T6810] ? clear_bhb_loop+0x40/0x90 [ 205.323406][ T6810] ? clear_bhb_loop+0x40/0x90 [ 205.328072][ T6810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.333962][ T6810] RIP: 0033:0x7f8326d90eea [ 205.338383][ T6810] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.358081][ T6810] RSP: 002b:00007f8327bc6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.366506][ T6810] RAX: ffffffffffffffda RBX: 00007f8327bc6ef0 RCX: 00007f8326d90eea [ 205.374653][ T6810] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8327bc6eb0 [ 205.382622][ T6810] RBP: 0000200000000180 R08: 00007f8327bc6ef0 R09: 0000000000800700 [ 205.390599][ T6810] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 205.398657][ T6810] R13: 00007f8327bc6eb0 R14: 000000000000046f R15: 000000000000002c [ 205.406722][ T6810] [ 205.441041][ T6810] ------------[ cut here ]------------ [ 205.446545][ T6810] EA inode 11 i_nlink=2 [ 205.447085][ T6810] WARNING: CPU: 1 PID: 6810 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 205.462291][ T6810] Modules linked in: [ 205.466209][ T6810] CPU: 1 PID: 6810 Comm: syz.1.269 Not tainted syzkaller #0 [ 205.474037][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.484464][ T6810] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 205.491416][ T6810] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 ff 49 2c 08 [ 205.511423][ T6810] RSP: 0018:ffffc900033071c0 EFLAGS: 00010246 [ 205.518700][ T6810] RAX: 088a2b263dde3a00 RBX: 0000000000000002 RCX: 0000000000080000 [ 205.527315][ T6810] RDX: ffffc9000d59a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 205.535404][ T6810] RBP: ffffc900033072b8 R08: ffffc90003306dc7 R09: 1ffff92000660db8 [ 205.543703][ T6810] R10: dffffc0000000000 R11: fffff52000660db9 R12: dffffc0000000000 [ 205.552024][ T6810] R13: ffff888051090ea8 R14: ffff888051090cb0 R15: ffff888051090d00 [ 205.560387][ T6810] FS: 00007f8327bc76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 205.570032][ T6810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.576633][ T6810] CR2: 00007f5c2bc10000 CR3: 000000005e582000 CR4: 00000000003506e0 [ 205.584998][ T6810] Call Trace: [ 205.588363][ T6810] [ 205.591315][ T6810] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 205.597193][ T6810] ? ext4_xattr_inode_iget+0x3df/0x600 [ 205.602677][ T6810] ext4_xattr_set_entry+0xcda/0x1e90 [ 205.608053][ T6810] ext4_xattr_ibody_set+0x254/0x6a0 [ 205.613274][ T6810] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 205.620175][ T6810] __ext4_expand_extra_isize+0x306/0x400 [ 205.625838][ T6810] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 205.631480][ T6810] ext4_evict_inode+0x7ed/0xea0 [ 205.636346][ T6810] ? _raw_spin_unlock+0x28/0x40 [ 205.641247][ T6810] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 205.647212][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 205.652422][ T6810] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 205.658390][ T6810] evict+0x486/0x870 [ 205.662301][ T6810] ? __lock_acquire+0x7c80/0x7c80 [ 205.667400][ T6810] ? proc_nr_inodes+0x230/0x230 [ 205.672271][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 205.677533][ T6810] ? _raw_spin_unlock+0x28/0x40 [ 205.682392][ T6810] ? iput+0x70a/0x920 [ 205.686447][ T6810] ext4_orphan_cleanup+0xbd4/0x1400 [ 205.691722][ T6810] ? ext4_orphan_del+0xba0/0xba0 [ 205.696704][ T6810] ? ext4_register_li_request+0x183/0x940 [ 205.702441][ T6810] ? errseq_check_and_advance+0x66/0x120 [ 205.708156][ T6810] ext4_fill_super+0x5de4/0x66c0 [ 205.713122][ T6810] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 205.720680][ T6810] ? __might_sleep+0xe0/0xe0 [ 205.725306][ T6810] ? read_lock_is_recursive+0x20/0x20 [ 205.731011][ T6810] ? snprintf+0xdb/0x120 [ 205.735284][ T6810] ? vscnprintf+0x80/0x80 [ 205.739691][ T6810] ? down_write+0x162/0x1f0 [ 205.744214][ T6810] ? down_read_killable+0x340/0x340 [ 205.749479][ T6810] ? setup_bdev_super+0x56b/0x660 [ 205.754519][ T6810] get_tree_bdev+0x3e4/0x510 [ 205.759175][ T6810] ? vfs_parse_fs_string+0x160/0x160 [ 205.764477][ T6810] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 205.770810][ T6810] ? setup_bdev_super+0x660/0x660 [ 205.775849][ T6810] ? apparmor_capable+0x137/0x1a0 [ 205.780984][ T6810] ? bpf_lsm_capable+0x9/0x10 [ 205.785681][ T6810] ? security_capable+0x89/0xb0 [ 205.790610][ T6810] vfs_get_tree+0x8c/0x280 [ 205.795043][ T6810] do_new_mount+0x24b/0xa40 [ 205.799641][ T6810] __se_sys_mount+0x2da/0x3c0 [ 205.804348][ T6810] ? __x64_sys_mount+0xc0/0xc0 [ 205.809199][ T6810] ? lockdep_hardirqs_on+0x98/0x150 [ 205.814417][ T6810] ? __x64_sys_mount+0x20/0xc0 [ 205.819262][ T6810] do_syscall_64+0x55/0xb0 [ 205.824590][ T6810] ? clear_bhb_loop+0x40/0x90 [ 205.829488][ T6810] ? clear_bhb_loop+0x40/0x90 [ 205.834228][ T6810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.840183][ T6810] RIP: 0033:0x7f8326d90eea [ 205.844651][ T6810] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.864368][ T6810] RSP: 002b:00007f8327bc6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.872844][ T6810] RAX: ffffffffffffffda RBX: 00007f8327bc6ef0 RCX: 00007f8326d90eea [ 205.880898][ T6810] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8327bc6eb0 [ 205.888932][ T6810] RBP: 0000200000000180 R08: 00007f8327bc6ef0 R09: 0000000000800700 [ 205.896963][ T6810] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 205.904942][ T6810] R13: 00007f8327bc6eb0 R14: 000000000000046f R15: 000000000000002c [ 205.912977][ T6810] [ 205.915998][ T6810] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.923277][ T6810] CPU: 1 PID: 6810 Comm: syz.1.269 Not tainted syzkaller #0 [ 205.930563][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.940618][ T6810] Call Trace: [ 205.943895][ T6810] [ 205.946833][ T6810] dump_stack_lvl+0x16c/0x230 [ 205.951525][ T6810] ? show_regs_print_info+0x20/0x20 [ 205.956729][ T6810] ? load_image+0x3b0/0x3b0 [ 205.961244][ T6810] panic+0x2c0/0x710 [ 205.965147][ T6810] ? bpf_jit_dump+0xd0/0xd0 [ 205.969654][ T6810] __warn+0x2e0/0x470 [ 205.973632][ T6810] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 205.979604][ T6810] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 205.985580][ T6810] report_bug+0x2be/0x4f0 [ 205.989901][ T6810] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 205.995871][ T6810] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 206.001841][ T6810] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 206.007808][ T6810] handle_bug+0xcf/0x120 [ 206.012040][ T6810] exc_invalid_op+0x1a/0x50 [ 206.016533][ T6810] asm_exc_invalid_op+0x1a/0x20 [ 206.021371][ T6810] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 206.027963][ T6810] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 ff 49 2c 08 [ 206.047557][ T6810] RSP: 0018:ffffc900033071c0 EFLAGS: 00010246 [ 206.053611][ T6810] RAX: 088a2b263dde3a00 RBX: 0000000000000002 RCX: 0000000000080000 [ 206.061573][ T6810] RDX: ffffc9000d59a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 206.069546][ T6810] RBP: ffffc900033072b8 R08: ffffc90003306dc7 R09: 1ffff92000660db8 [ 206.077521][ T6810] R10: dffffc0000000000 R11: fffff52000660db9 R12: dffffc0000000000 [ 206.085517][ T6810] R13: ffff888051090ea8 R14: ffff888051090cb0 R15: ffff888051090d00 [ 206.093493][ T6810] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 206.099127][ T6810] ? ext4_xattr_inode_iget+0x3df/0x600 [ 206.104580][ T6810] ext4_xattr_set_entry+0xcda/0x1e90 [ 206.109868][ T6810] ext4_xattr_ibody_set+0x254/0x6a0 [ 206.115059][ T6810] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 206.120955][ T6810] __ext4_expand_extra_isize+0x306/0x400 [ 206.126596][ T6810] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 206.132070][ T6810] ext4_evict_inode+0x7ed/0xea0 [ 206.136928][ T6810] ? _raw_spin_unlock+0x28/0x40 [ 206.141779][ T6810] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 206.147667][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 206.152856][ T6810] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 206.158739][ T6810] evict+0x486/0x870 [ 206.162624][ T6810] ? __lock_acquire+0x7c80/0x7c80 [ 206.167649][ T6810] ? proc_nr_inodes+0x230/0x230 [ 206.172495][ T6810] ? do_raw_spin_unlock+0x121/0x230 [ 206.177683][ T6810] ? _raw_spin_unlock+0x28/0x40 [ 206.182531][ T6810] ? iput+0x70a/0x920 [ 206.186500][ T6810] ext4_orphan_cleanup+0xbd4/0x1400 [ 206.191700][ T6810] ? ext4_orphan_del+0xba0/0xba0 [ 206.196641][ T6810] ? ext4_register_li_request+0x183/0x940 [ 206.202356][ T6810] ? errseq_check_and_advance+0x66/0x120 [ 206.207981][ T6810] ext4_fill_super+0x5de4/0x66c0 [ 206.212915][ T6810] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 206.219146][ T6810] ? __might_sleep+0xe0/0xe0 [ 206.223733][ T6810] ? read_lock_is_recursive+0x20/0x20 [ 206.229093][ T6810] ? snprintf+0xdb/0x120 [ 206.233327][ T6810] ? vscnprintf+0x80/0x80 [ 206.237652][ T6810] ? down_write+0x162/0x1f0 [ 206.242144][ T6810] ? down_read_killable+0x340/0x340 [ 206.247353][ T6810] ? setup_bdev_super+0x56b/0x660 [ 206.252366][ T6810] get_tree_bdev+0x3e4/0x510 [ 206.256986][ T6810] ? vfs_parse_fs_string+0x160/0x160 [ 206.262285][ T6810] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 206.268529][ T6810] ? setup_bdev_super+0x660/0x660 [ 206.273548][ T6810] ? apparmor_capable+0x137/0x1a0 [ 206.278560][ T6810] ? bpf_lsm_capable+0x9/0x10 [ 206.283228][ T6810] ? security_capable+0x89/0xb0 [ 206.288068][ T6810] vfs_get_tree+0x8c/0x280 [ 206.292472][ T6810] do_new_mount+0x24b/0xa40 [ 206.296963][ T6810] __se_sys_mount+0x2da/0x3c0 [ 206.301629][ T6810] ? __x64_sys_mount+0xc0/0xc0 [ 206.306420][ T6810] ? lockdep_hardirqs_on+0x98/0x150 [ 206.311610][ T6810] ? __x64_sys_mount+0x20/0xc0 [ 206.316363][ T6810] do_syscall_64+0x55/0xb0 [ 206.320791][ T6810] ? clear_bhb_loop+0x40/0x90 [ 206.325486][ T6810] ? clear_bhb_loop+0x40/0x90 [ 206.330173][ T6810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.336065][ T6810] RIP: 0033:0x7f8326d90eea [ 206.340488][ T6810] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.360095][ T6810] RSP: 002b:00007f8327bc6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.368505][ T6810] RAX: ffffffffffffffda RBX: 00007f8327bc6ef0 RCX: 00007f8326d90eea [ 206.376468][ T6810] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8327bc6eb0 [ 206.384430][ T6810] RBP: 0000200000000180 R08: 00007f8327bc6ef0 R09: 0000000000800700 [ 206.392394][ T6810] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 206.400373][ T6810] R13: 00007f8327bc6eb0 R14: 000000000000046f R15: 000000000000002c [ 206.408347][ T6810] [ 206.411664][ T6810] Kernel Offset: disabled [ 206.415971][ T6810] Rebooting in 86400 seconds..