last executing test programs: 27.573054648s ago: executing program 4 (id=399): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0xa00010, &(0x7f0000000700)=ANY=[], 0x6, 0x641, &(0x7f00000001c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="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"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) 23.724193142s ago: executing program 1 (id=409): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000240), 0x4) 18.381565979s ago: executing program 1 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 10.107961334s ago: executing program 4 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x84}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4f23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000002000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="355ca0428771a9f93af87c70fe4b48c0c9dd4f6a75814f43a7d6ba758fbe1a09be09057ae6b253ba7f8808ba2976523e42938ac36cbf5b0af26c4a223ddbd9557d536ebd3f827f34625d6ccbc16fa3ad2479fa8bf9b20d6be0f9246a18a07dceb742cab05405c80a691f2b1551063ec07f842b467b18b26dfcffd7767d3ccad20b9d8fdb68de7f683dd880e2d9601b300f778e85bb8a52bc81c5a85b8cb1a1f1672824d94a5dc596069d6bde15f1d4e442d953a9da57525e9af870941eb4fc0c"], 0x28, 0x7ffffff7}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 10.094120675s ago: executing program 1 (id=438): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getown(0xffffffffffffffff, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 10.084956436s ago: executing program 3 (id=440): r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)={[{@block_validity}, {@nobh}]}, 0x0, 0x55a, &(0x7f00000002c0)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1b, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x1020060c) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00060900004039fa0500"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 7.869465577s ago: executing program 4 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) unshare(0x2a020400) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40}}}, 0x7) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 7.868980897s ago: executing program 1 (id=429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETLINK(r2, 0x400454cd, 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r1, 0x165, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0x2b76d11d, 0x5}, 0x10, 0x19f0e, r0, 0x2, 0x0, &(0x7f0000000780)=[{0x0, 0x4, 0xe}, {}]}, 0x90) socketpair(0x8, 0x6, 0x7ff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 7.022006296s ago: executing program 4 (id=432): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x2c55a652b313f0aa) bind$vsock_stream(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x50}}, 0x0) 6.901115876s ago: executing program 3 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 6.687435184s ago: executing program 4 (id=435): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000140)='./file1\x00', 0x1000000, &(0x7f00000000c0)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@pquota}, {@pqnoenforce}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x3a) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 6.685598534s ago: executing program 0 (id=449): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x2c55a652b313f0aa) bind$vsock_stream(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x50}}, 0x0) 6.565123454s ago: executing program 1 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 6.564798933s ago: executing program 0 (id=441): socket$kcm(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="fbe286ec23fb1bd83b27c8d2cd648f56920e1359", 0x14}, {&(0x7f00000003c0)}, {0x0}, {0x0}], 0x5}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0x1, @private2, 0xa}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000001f80)="213545c725238afe66f9ed09f1f95181521c906f577f329256012a6e4a5ce60e82dc00e29f3c48b9dffaf26087d36b94", 0x30}], 0x1, &(0x7f0000002100)=[@dstopts={{0x18, 0x29, 0x37, {0x1d}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1fe}}], 0x30}}, {{0x0, 0x0, &(0x7f00000025c0)}}], 0x3, 0x40000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x68}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x526ec91b50c65d55) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x2c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.342465242s ago: executing program 0 (id=442): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@typedef={0x7, 0x0, 0x0, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x6, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x51}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_delete(0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x200, 0x8}}}}}, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x6a1d63bef531ea9b}, 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000080)={'custom1\x00'}) 6.112537391s ago: executing program 0 (id=443): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x5, 0x61fd, &(0x7f000000c700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x49, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f00000001c0)={0x34914eae78f2de5}, 0xffca) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f000000ac40)={0x2020}, 0x2020) mount$9p_xen(&(0x7f0000000000), 0x0, 0x0, 0x40, &(0x7f0000000340)={'trans=xen,', {[], [{@smackfshat}]}}) 5.973038142s ago: executing program 3 (id=444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x4b48, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = getpgid(0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 5.883692959s ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000180)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000240)) 4.88905539s ago: executing program 2 (id=446): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x1a, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x270, 0xf8, 0x19, 0x0, 0x0, 0x0, 0x1d8, 0x1f0, 0x1f0, 0x1d8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@ecn={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 3.226972007s ago: executing program 2 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) unshare(0x2a020400) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40}}}, 0x7) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 2.963037918s ago: executing program 4 (id=448): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0xa0, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x0, 0xff13, 0x9, 0xffff8000, 0xfffffffb, 0x10f}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x100, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x510e, 0x41f9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_DELAY_DIST={0x16, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd"}]}}}]}, 0xa0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x3f7, 0x400, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14008001}, 0x10) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 2.92894262s ago: executing program 0 (id=450): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff8, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2.128146396s ago: executing program 2 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETLINK(r2, 0x400454cd, 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r1, 0x165, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0x2b76d11d, 0x5}, 0x10, 0x19f0e, r0, 0x2, 0x0, &(0x7f0000000780)=[{0x0, 0x4, 0xe}, {}]}, 0x90) socketpair(0x8, 0x6, 0x7ff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.005134676s ago: executing program 3 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r8}) 1.059532833s ago: executing program 0 (id=453): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.056938504s ago: executing program 3 (id=454): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x2c55a652b313f0aa) bind$vsock_stream(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x50}}, 0x0) 1.018340157s ago: executing program 2 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 849.70762ms ago: executing program 1 (id=456): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 827.656602ms ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x4c7d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) 0s ago: executing program 2 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/4096, 0x26, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000300)={'veth1_to_team\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r4) kernel console output (not intermixed with test programs): promiscuous mode [ 46.002417][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.005076][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.007653][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.010373][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.014523][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.017007][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.019870][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.024240][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.026947][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.029501][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.032969][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.038324][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.040992][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.044236][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.053789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.056003][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.067045][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.074971][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.078111][ T4302] device veth1_vlan entered promiscuous mode [ 46.083749][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.090368][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.095791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.098505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.104660][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.109648][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.118787][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.121257][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.125392][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.135630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.138248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.140904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.192179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.194871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.197591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.200200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.205652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.208314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.211059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.214512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.220077][ T4300] device veth0_vlan entered promiscuous mode [ 46.233106][ T4300] device veth1_vlan entered promiscuous mode [ 46.237929][ T4302] device veth0_macvtap entered promiscuous mode [ 46.245671][ T4302] device veth1_macvtap entered promiscuous mode [ 46.306339][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.309324][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.327503][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.336631][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.339370][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.347831][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.350559][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.354125][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.356882][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.359564][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.363239][ T4297] Bluetooth: hci0: command tx timeout [ 46.365506][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.369627][ T4300] device veth0_macvtap entered promiscuous mode [ 46.376860][ T4300] device veth1_macvtap entered promiscuous mode [ 46.391225][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.394660][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.402016][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.419293][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.425613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.428227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.430657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.435218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.438091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.440248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.442293][ T4297] Bluetooth: hci2: command tx timeout [ 46.442384][ T4297] Bluetooth: hci1: command tx timeout [ 46.454197][ T4302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.456616][ T4302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.458841][ T4302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.461065][ T4302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.467802][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.470519][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.474318][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.477319][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.481233][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.489263][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.506721][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.520456][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.523615][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.526253][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.528771][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.531819][ T4299] Bluetooth: hci3: command tx timeout [ 46.531841][ T4297] Bluetooth: hci4: command tx timeout [ 46.534750][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.538898][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.542676][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.545294][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.548082][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.552723][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.585383][ T4304] device veth0_vlan entered promiscuous mode [ 46.599904][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.604409][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.607199][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.609786][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.619752][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.623672][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.626433][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.628831][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.632801][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.635162][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.637501][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.639904][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.649005][ T3169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.665973][ T3169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.670180][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.697896][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.700146][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.710353][ T4304] device veth1_vlan entered promiscuous mode [ 46.719674][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.723750][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.727951][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.730689][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.746485][ T4301] device veth0_vlan entered promiscuous mode [ 46.782415][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.785063][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.817572][ T4301] device veth1_vlan entered promiscuous mode [ 46.835434][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.837667][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.868104][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.870292][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.880292][ T4304] device veth0_macvtap entered promiscuous mode [ 46.883509][ T3169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.891807][ T3169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.909612][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.912611][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.916073][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.925165][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.932938][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.938823][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.945619][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.949641][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.984239][ T4304] device veth1_macvtap entered promiscuous mode [ 46.987739][ T4301] device veth0_macvtap entered promiscuous mode [ 47.004251][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.006851][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.009294][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.015678][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.018365][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.023123][ T4301] device veth1_macvtap entered promiscuous mode [ 47.030978][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.382438][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.436085][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.548790][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.725053][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.727834][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.749917][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.800872][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.804545][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.807099][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.809824][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.812888][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.815652][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.818186][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.820762][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.824981][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.856915][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.885657][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.888379][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.891195][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.908734][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.924149][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.926846][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.931074][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.939210][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.944465][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.947252][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.951373][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.970808][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.978403][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.984489][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.986866][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.004090][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.007096][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.009826][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.012812][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.015358][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.018077][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.020724][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.025114][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.029110][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.032521][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.035431][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.038306][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.047493][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.461841][ T4313] Bluetooth: hci0: command tx timeout [ 48.522328][ T4313] Bluetooth: hci2: command tx timeout [ 48.522376][ T4297] Bluetooth: hci1: command tx timeout [ 48.602657][ T4313] Bluetooth: hci4: command tx timeout [ 48.603320][ T4297] Bluetooth: hci3: command tx timeout [ 49.058689][ T4387] loop0: detected capacity change from 0 to 65536 [ 49.073637][ T4398] mmap: syz.1.9 (4398) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.705033][ T4301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.712989][ T4301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.717779][ T4301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.725052][ T4301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.774053][ T4404] loop2: detected capacity change from 0 to 1024 [ 49.776793][ T4387] XFS (loop0): Mounting V5 Filesystem [ 49.825368][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.828243][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.833420][ T4404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.841862][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.868562][ T4404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.888856][ T4404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.961380][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.964835][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.970592][ T4404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 49.979504][ T3169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.984615][ T4387] XFS (loop0): Ending clean mount [ 49.989137][ T3169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.992040][ T4404] System zones: 0-1, 3-36 [ 50.000148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.008979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.013581][ T4387] XFS (loop0): Quotacheck needed: Please wait. [ 50.087279][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.089795][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.092872][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.100454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.167198][ T4387] XFS (loop0): Quotacheck: Done. [ 50.207749][ T4418] loop1: detected capacity change from 0 to 512 [ 50.272722][ T4418] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.284738][ T4418] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 50.296733][ T4418] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 50.305058][ T4422] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.307624][ T4422] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.310087][ T4422] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.312683][ T4422] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.338881][ T4418] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.11: Failed to acquire dquot type 1 [ 50.346160][ T4422] Zero length message leads to an empty skb [ 50.363770][ T4418] EXT4-fs (loop1): 1 truncate cleaned up [ 50.370587][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 51.087863][ T4313] Bluetooth: hci0: command tx timeout [ 51.091745][ T4297] Bluetooth: hci2: command tx timeout [ 51.093331][ T4299] Bluetooth: hci1: command tx timeout [ 51.094793][ T4306] Bluetooth: hci4: command tx timeout [ 51.096347][ T4309] Bluetooth: hci3: command tx timeout [ 51.114594][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.233518][ T4430] binder: 4429:4430 tried to acquire reference to desc 0, got 1 instead [ 51.287668][ T4430] binder: 4429:4430 tried to acquire reference to desc 0, got 1 instead [ 51.333369][ T4343] binder: release 4429:4430 transaction 8 out, still active [ 51.335539][ T4343] binder: undelivered TRANSACTION_COMPLETE [ 51.337178][ T4343] binder: undelivered TRANSACTION_COMPLETE [ 51.339553][ T4343] binder: release 4429:4430 transaction 10 out, still active [ 51.346306][ T4343] binder: undelivered TRANSACTION_COMPLETE [ 51.371173][ T3876] binder: undelivered transaction 7, process died. [ 51.373191][ T3876] binder: send failed reply for transaction 8, target dead [ 51.375216][ T3876] binder: send failed reply for transaction 10, target dead [ 51.595092][ T4438] loop4: detected capacity change from 0 to 164 [ 51.615802][ T4438] ======================================================= [ 51.615802][ T4438] WARNING: The mand mount option has been deprecated and [ 51.615802][ T4438] and is ignored by this kernel. Remove the mand [ 51.615802][ T4438] option from the mount to silence this warning. [ 51.615802][ T4438] ======================================================= [ 51.642384][ T4438] Unable to read rock-ridge attributes [ 51.668673][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 51.707890][ T4438] Unable to read rock-ridge attributes [ 51.732668][ T4438] Unable to read rock-ridge attributes [ 51.734237][ T4438] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.738107][ T4438] Unable to read rock-ridge attributes [ 51.755355][ T4438] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.873335][ T4440] loop1: detected capacity change from 0 to 4096 [ 51.875348][ T4440] EXT4-fs: Ignoring removed nobh option [ 51.941691][ T4440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.105198][ T4300] XFS (loop0): Unmounting Filesystem [ 52.128399][ T4440] fs-verity: sha512 using implementation "sha512-arm64" [ 52.223531][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 52.392211][ T4456] binder: 4455:4456 tried to acquire reference to desc 0, got 1 instead [ 52.412681][ T4456] binder: 4455:4456 tried to acquire reference to desc 0, got 1 instead [ 52.420806][ T4456] binder_alloc: 4455: binder_alloc_buf size 12312 failed, no address space [ 52.436151][ T4456] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 52.439039][ T4456] binder: cannot allocate buffer: no space left [ 52.439081][ T4456] binder: 4455:4456 transaction call to 4455:0 failed 19/29201/-28, size 12288-24 line 3239 [ 53.615483][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.618212][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.630432][ T4471] device bridge0 entered promiscuous mode [ 54.416983][ T4478] tap0: tun_chr_ioctl cmd 1074025677 [ 54.418668][ T4478] tap0: linktype set to 512 [ 54.615581][ T4472] loop2: detected capacity change from 0 to 40427 [ 54.648343][ T4472] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 54.655836][ T4472] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.676766][ T4472] F2FS-fs (loop2): invalid crc value [ 54.681509][ T4485] device wg2 entered promiscuous mode [ 56.231167][ T4472] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.298407][ T4472] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 56.300789][ T4472] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.377214][ T4500] loop3: detected capacity change from 0 to 4096 [ 56.400841][ T4500] EXT4-fs: Ignoring removed nobh option [ 56.444910][ T4503] loop1: detected capacity change from 0 to 1024 [ 56.454991][ T4503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.460182][ T4503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.467141][ T4503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.483939][ T4503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 56.487444][ T4503] System zones: 0-1, 3-36 [ 56.532695][ T4503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.568400][ T4500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.569148][ T4511] delete_channel: no stack [ 57.375834][ T4516] can0: slcan on pts0. [ 57.412759][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 57.467834][ T4483] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 57.479245][ T4483] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 57.491040][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 57.512375][ T4510] loop0: detected capacity change from 0 to 2048 [ 57.522026][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 57.558696][ T4510] UDF-fs: bad mount option "uid=j" or missing value [ 57.562166][ T4511] can0 (unregistered): slcan off pts0. [ 57.594431][ T4507] delete_channel: no stack [ 57.601646][ T4507] delete_channel: no stack [ 57.625503][ T4521] loop3: detected capacity change from 0 to 512 [ 57.627715][ T4521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.637193][ T4521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.678558][ T4521] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.680723][ T4521] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 57.683683][ T4521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.685472][ T4521] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 57.688263][ T4521] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.692176][ T4521] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 57.701086][ T4521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.37: bg 0: block 40: padding at end of block bitmap is not set [ 57.718090][ T4521] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 57.722464][ T4521] EXT4-fs (loop3): 1 truncate cleaned up [ 57.724077][ T4521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.763855][ T4510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.34'. [ 58.142498][ T4528] loop4: detected capacity change from 0 to 40427 [ 58.825979][ T4535] loop0: detected capacity change from 0 to 256 [ 58.851726][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 60.347731][ T4546] loop2: detected capacity change from 0 to 4096 [ 60.357609][ T4546] ntfs: (device loop2): parse_options(): The dmask option requires an argument. [ 60.721200][ T4542] loop1: detected capacity change from 0 to 4096 [ 60.895976][ T4542] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 61.511113][ T4542] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 63.899855][ T4567] loop2: detected capacity change from 0 to 4096 [ 63.904213][ T4567] EXT4-fs: Ignoring removed nobh option [ 64.028034][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.672625][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.675286][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.744899][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.751726][ T9] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 64.771944][ T4296] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 64.801716][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.823950][ T4312] Bluetooth: hci1: adv larger than maximum supported [ 64.824015][ T4312] Bluetooth: hci1: Malformed LE Event: 0x0d [ 64.998824][ T4565] loop4: detected capacity change from 0 to 40427 [ 66.187252][ T4565] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.189333][ T4565] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.193208][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 66.227702][ T4565] F2FS-fs (loop4): invalid crc value [ 66.255403][ T4565] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.344438][ T4565] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.346550][ T4565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.364293][ T4588] loop0: detected capacity change from 0 to 16 [ 66.385893][ T4588] erofs: (device loop0): mounted with root inode @ nid 36. [ 68.777347][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.780594][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.921313][ T27] audit: type=1400 audit(68.860:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=4592 comm="syz.1.55" [ 69.801403][ C0] sched: RT throttling activated [ 69.807220][ T111] cfg80211: failed to load regulatory.db [ 70.055276][ T4612] loop1: detected capacity change from 0 to 512 [ 70.095278][ T4615] loop3: detected capacity change from 0 to 1024 [ 70.653733][ T4615] hfsplus: failed to load root directory [ 70.827684][ T4619] device wireguard0 entered promiscuous mode [ 70.898091][ T4612] EXT4-fs (loop1): 1 orphan inode deleted [ 70.899853][ T4612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.106296][ T4636] loop3: detected capacity change from 0 to 16 [ 72.133524][ T4296] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 72.144935][ T4296] EXT4-fs (loop1): Remounting filesystem read-only [ 72.147135][ T4296] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 72.147144][ T4636] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.151151][ T27] audit: type=1400 audit(73.450:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=4652 comm="syz.3.70" [ 74.256890][ T4660] loop3: detected capacity change from 0 to 16 [ 74.301599][ T4660] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.338794][ T4649] loop0: detected capacity change from 0 to 4096 [ 74.340887][ T4649] EXT4-fs: Ignoring removed nobh option [ 74.693030][ T4649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.694920][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 74.815324][ T4669] loop2: detected capacity change from 0 to 256 [ 77.113885][ T4672] loop4: detected capacity change from 0 to 4096 [ 77.116662][ T4672] ntfs: (device loop4): parse_options(): The dmask option requires an argument. [ 78.164035][ T4669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 78.423944][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 78.483997][ T536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.672481][ T4680] loop3: detected capacity change from 0 to 764 [ 78.685437][ T4680] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 80.368901][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 80.393149][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.401902][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.405799][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.425907][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.429170][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.431382][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.457436][ T4701] loop0: detected capacity change from 0 to 256 [ 80.481776][ T4701] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 80.495267][ T4701] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 81.258488][ T536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.295636][ T4701] input: syz0 as /devices/virtual/input/input2 [ 81.367096][ T4701] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 81.367096][ T4701] [ 81.370520][ T4701] exFAT-fs (loop0): Filesystem has been set read-only [ 81.526301][ T4299] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 81.529145][ T4299] CPU: 0 PID: 4299 Comm: kworker/u5:2 Not tainted 6.1.106-syzkaller #0 [ 81.531493][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 81.534275][ T4299] Workqueue: hci3 hci_rx_work [ 81.535563][ T4299] Call trace: [ 81.536417][ T4299] dump_backtrace+0x1c8/0x1f4 [ 81.537766][ T4299] show_stack+0x2c/0x3c [ 81.538848][ T4299] dump_stack_lvl+0x108/0x170 [ 81.540151][ T4299] dump_stack+0x1c/0x58 [ 81.541278][ T4299] sysfs_create_dir_ns+0x278/0x318 [ 81.542653][ T4299] kobject_add_internal+0x598/0xb14 [ 81.544081][ T4299] kobject_add+0x14c/0x21c [ 81.545329][ T4299] device_add+0x400/0xef4 [ 81.546554][ T4299] hci_conn_add_sysfs+0xc4/0x1cc [ 81.547948][ T4299] le_conn_complete_evt+0xa0c/0xfe0 [ 81.549355][ T4299] hci_le_enh_conn_complete_evt+0x114/0x414 [ 81.550980][ T4299] hci_le_meta_evt+0x2b8/0x47c [ 81.552348][ T4299] hci_event_packet+0x6f8/0x109c [ 81.553786][ T4299] hci_rx_work+0x318/0xa68 [ 81.555022][ T4299] process_one_work+0x7ac/0x1404 [ 81.556420][ T4299] worker_thread+0x8e4/0xfec [ 81.557760][ T4299] kthread+0x250/0x2d8 [ 81.558883][ T4299] ret_from_fork+0x10/0x20 [ 81.638754][ T4299] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 81.643021][ T4299] Bluetooth: hci3: failed to register connection device [ 82.851758][ T4312] Bluetooth: hci0: command tx timeout [ 83.000887][ T4720] loop3: detected capacity change from 0 to 1024 [ 83.221260][ T4720] hfsplus: request for non-existent node 768 in B*Tree [ 83.238557][ T4720] hfsplus: request for non-existent node 768 in B*Tree [ 83.246136][ T536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.250812][ T4720] hfsplus: xattr searching failed [ 83.721871][ T4299] Bluetooth: hci3: command tx timeout [ 84.018183][ T4727] hfsplus: request for non-existent node 768 in B*Tree [ 84.039023][ T4727] hfsplus: request for non-existent node 768 in B*Tree [ 84.041118][ T4727] hfsplus: xattr searching failed [ 84.045715][ T536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.184867][ T4729] netlink: 'syz.2.97': attribute type 11 has an invalid length. [ 84.229350][ T4693] chnl_net:caif_netlink_parms(): no params data found [ 84.301311][ T4742] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.713669][ T4299] Bluetooth: hci1: unexpected cc 0x1408 length: 57 > 4 [ 84.765766][ T4735] loop4: detected capacity change from 0 to 4096 [ 84.768112][ T4735] EXT4-fs: Ignoring removed nobh option [ 84.798462][ T4735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.925205][ T4299] Bluetooth: hci0: command tx timeout [ 85.054053][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 85.160922][ T4761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.680393][ T4771] loop3: detected capacity change from 0 to 4096 [ 85.687343][ T4771] ntfs: (device loop3): parse_options(): The dmask option requires an argument. [ 85.981562][ T4764] netlink: 'syz.4.93': attribute type 2 has an invalid length. [ 86.011739][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.013743][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.017409][ T4693] device bridge_slave_0 entered promiscuous mode [ 86.050740][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.057935][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.074199][ T4693] device bridge_slave_1 entered promiscuous mode [ 86.098205][ T4777] loop2: detected capacity change from 0 to 256 [ 86.138401][ T27] audit: type=1326 audit(86.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 86.154413][ T27] audit: type=1326 audit(86.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 86.180942][ T4780] loop3: detected capacity change from 0 to 512 [ 86.188102][ T27] audit: type=1326 audit(86.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 86.203127][ T27] audit: type=1326 audit(86.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 86.237239][ T4779] loop4: detected capacity change from 0 to 4096 [ 86.247873][ T4779] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 86.292171][ T4780] ext4: Unknown parameter 'nouser_xattr' [ 86.340438][ T4693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.345180][ T4693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.378050][ T27] audit: type=1326 audit(86.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 86.389596][ T27] audit: type=1326 audit(86.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 86.474242][ T4676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.100124][ T4299] Bluetooth: hci0: command tx timeout [ 87.182281][ T27] audit: type=1326 audit(86.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 87.187828][ T27] audit: type=1326 audit(86.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 87.241675][ T27] audit: type=1326 audit(86.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95545e68 code=0x7ffc0000 [ 87.325754][ T4790] loop3: detected capacity change from 0 to 512 [ 87.339787][ T4790] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.344551][ T4790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.355507][ T4790] EXT4-fs (loop3): 1 truncate cleaned up [ 87.357088][ T4790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.425071][ T4769] loop0: detected capacity change from 0 to 40427 [ 87.506767][ T4769] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.508852][ T4769] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.542060][ T4769] F2FS-fs (loop0): invalid crc value [ 87.564039][ T4693] team0: Port device team_slave_0 added [ 87.567845][ T4769] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.169188][ T4795] overlayfs: conflicting lowerdir path [ 88.265997][ T4693] team0: Port device team_slave_1 added [ 88.333057][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 88.558088][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.559993][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.581698][ T4693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.764876][ T4312] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 88.767891][ T4312] Bluetooth: hci1: Injecting HCI hardware error event [ 88.773220][ T4312] Bluetooth: hci1: hardware error 0x00 [ 89.161643][ T4299] Bluetooth: hci0: command tx timeout [ 89.405835][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.407726][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.417615][ T4825] loop3: detected capacity change from 0 to 1024 [ 89.419850][ T4825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.430295][ T4693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.446220][ T4825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.460708][ T4825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.483950][ T4825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 89.486236][ T4825] System zones: 0-1, 3-36 [ 89.489888][ T4825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.643836][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 89.659891][ T4827] loop2: detected capacity change from 0 to 4096 [ 89.677991][ T4827] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 89.725456][ T4827] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 89.744180][ T4693] device hsr_slave_0 entered promiscuous mode [ 89.782242][ T4693] device hsr_slave_1 entered promiscuous mode [ 89.785219][ T4823] loop4: detected capacity change from 0 to 32768 [ 89.821943][ T4693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.824124][ T4693] Cannot create hsr debugfs directory [ 90.918455][ T4855] loop0: detected capacity change from 0 to 4096 [ 90.926337][ T4855] __ntfs_error: 7 callbacks suppressed [ 90.926382][ T4855] ntfs: (device loop0): parse_options(): The dmask option requires an argument. [ 91.211795][ T4312] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 91.529630][ T4845] loop3: detected capacity change from 0 to 32768 [ 92.709855][ T4773] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 92.811757][ T4865] loop4: detected capacity change from 0 to 2048 [ 93.646940][ T4880] loop4: detected capacity change from 0 to 2048 [ 93.698426][ T536] device hsr_slave_0 left promiscuous mode [ 93.738394][ T4885] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.752956][ T536] device hsr_slave_1 left promiscuous mode [ 93.902929][ T536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.905043][ T536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.908618][ T536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.926102][ T536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.932082][ T536] device bridge_slave_1 left promiscuous mode [ 93.935287][ T536] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.108835][ T536] device bridge_slave_0 left promiscuous mode [ 94.128886][ T536] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.708792][ T4896] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=15564440312192434187, rec_len=11150, name_len=126 [ 94.718226][ T4896] Remounting filesystem read-only [ 94.787435][ T4304] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 94.789535][ T4304] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 94.800725][ T4304] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 94.811445][ T4304] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 94.815899][ T4304] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 94.818243][ T4304] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 94.827588][ T4902] loop0: detected capacity change from 0 to 1024 [ 94.829802][ T4902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.832002][ T4302] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 94.834705][ T4304] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 94.841873][ T4902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.844860][ T4902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.847356][ T4304] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.849706][ T4304] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.862558][ T4304] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.888414][ T4902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 94.890682][ T4902] System zones: 0-1, 3-36 [ 94.893759][ T536] device veth1_macvtap left promiscuous mode [ 94.895763][ T536] device veth0_macvtap left promiscuous mode [ 94.897507][ T536] device veth1_vlan left promiscuous mode [ 94.906238][ T536] device veth0_vlan left promiscuous mode [ 94.949813][ T4902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.975639][ T4910] binder: 4909:4910 tried to acquire reference to desc 0, got 1 instead [ 95.008970][ T4910] binder: 4909:4910 got transaction with invalid data ptr [ 95.011146][ T4910] binder_debug: 4 callbacks suppressed [ 95.011157][ T4910] binder: 4909:4910 transaction call to 4909:0 failed 26/29201/-14, size 52-0 line 3573 [ 95.040315][ T4910] binder: 4909:4910 tried to acquire reference to desc 0, got 1 instead [ 95.057111][ T4910] binder: 4909:4910 got transaction with invalid data ptr [ 95.066825][ T4910] binder: 4909:4910 transaction call to 4909:0 failed 28/29201/-14, size 0-12280 line 3341 [ 95.084227][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.086046][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.105811][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 95.357412][ T4919] loop0: detected capacity change from 0 to 32768 [ 95.359726][ T4919] XFS: noikeep mount option is deprecated. [ 95.367128][ T4919] XFS (loop0): Mounting V5 Filesystem [ 95.418246][ T4919] XFS (loop0): Ending clean mount [ 95.425422][ T4919] XFS (loop0): Quotacheck needed: Please wait. [ 95.467845][ T4919] XFS (loop0): Quotacheck: Done. [ 96.167010][ T4936] loop4: detected capacity change from 0 to 256 [ 96.277827][ T4300] XFS (loop0): Unmounting Filesystem [ 97.267729][ T4940] loop4: detected capacity change from 0 to 256 [ 97.281079][ T4940] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 97.423905][ T4945] loop0: detected capacity change from 0 to 8 [ 97.458201][ T4945] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.460812][ T4945] SQUASHFS error: Failed to read block 0x9b: -5 [ 97.463986][ T4945] SQUASHFS error: Unable to read metadata cache entry [99] [ 97.465901][ T4945] SQUASHFS error: Unable to read inode 0x127 [ 97.619561][ T4944] loop4: detected capacity change from 0 to 32768 [ 97.635302][ T4944] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.126 (4944) [ 97.666045][ T4944] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.669787][ T4944] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 97.672713][ T4944] BTRFS info (device loop4): force zlib compression, level 3 [ 97.675007][ T4944] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 97.677810][ T4944] BTRFS info (device loop4): use zstd compression, level 3 [ 97.679797][ T4944] BTRFS info (device loop4): enabling ssd optimizations [ 97.690665][ T4944] BTRFS info (device loop4): using free space tree [ 97.797040][ T4944] fuse: Bad value for 'fd' [ 98.036055][ T536] team0 (unregistering): Port device team_slave_1 removed [ 98.212620][ T536] team0 (unregistering): Port device team_slave_0 removed [ 98.383038][ T536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.594009][ T536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.014246][ T536] bond0 (unregistering): Released all slaves [ 101.268012][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 101.365261][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 101.460566][ T4944] smc: net device wlan0 applied user defined pnetid SYZ0 [ 101.555749][ T4304] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.372857][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 102.418551][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 102.680268][ T4993] loop3: detected capacity change from 0 to 1024 [ 102.688875][ T4993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.702210][ T4993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.719632][ T4993] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.732796][ T4993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 102.736291][ T4993] System zones: 0-1, 3-36 [ 102.765286][ T4993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.795005][ T4992] device wg2 entered promiscuous mode [ 102.846913][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 102.934700][ T5009] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.144' sets config #1 [ 102.993812][ T5017] tap0: tun_chr_ioctl cmd 1074025677 [ 102.995550][ T5017] tap0: linktype set to 512 [ 103.119822][ T27] audit: type=1326 audit(103.060:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 103.849011][ T5015] loop4: detected capacity change from 0 to 1024 [ 103.877464][ T5015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.879765][ T5015] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.882701][ T27] audit: type=1326 audit(103.820:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 103.900773][ T5015] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.924387][ T27] audit: type=1326 audit(103.820:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 103.930256][ T27] audit: type=1326 audit(103.820:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 103.936366][ T27] audit: type=1326 audit(103.820:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 103.947588][ T5015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 103.950010][ T5015] System zones: 0-1, 3-36 [ 103.960073][ T27] audit: type=1326 audit(103.820:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 103.960162][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.999316][ T27] audit: type=1326 audit(103.820:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 104.005536][ T27] audit: type=1326 audit(103.820:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x7ffc0000 [ 104.085117][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 104.116124][ T4693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.147031][ T4693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.177978][ T4693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.205207][ T4693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.348675][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.373693][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.376461][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.382970][ T4693] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.387829][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.390782][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.402152][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.404076][ T4645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.407764][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.429007][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.448789][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.451381][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.453406][ T4645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.457820][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.460697][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.469228][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.474724][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.477527][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.480472][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.494090][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.507733][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.511112][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.519301][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.526298][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.533273][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.743653][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.745742][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.760972][ T4693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.780542][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.783654][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.803845][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.806443][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.813065][ T4693] device veth0_vlan entered promiscuous mode [ 104.815392][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.818254][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.832621][ T4693] device veth1_vlan entered promiscuous mode [ 104.860466][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.869404][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.872606][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.875707][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.880777][ T4693] device veth0_macvtap entered promiscuous mode [ 104.892188][ T4693] device veth1_macvtap entered promiscuous mode [ 104.902669][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.905558][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.918966][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.922440][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.925110][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.927785][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.930401][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.933818][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.937660][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.951861][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.954508][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.956904][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.959561][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.970067][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.973927][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.976520][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.979233][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.988968][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.992645][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.995234][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.998037][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.012821][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.021559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.024280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.034236][ T4693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.036754][ T4693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.038985][ T4693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.041333][ T4693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.164876][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.167180][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.194608][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.198428][ T4645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.200764][ T4645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.216195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.395781][ T5073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 105.440058][ T5073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.503194][ T5073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.349849][ T5078] loop3: detected capacity change from 0 to 8192 [ 106.404245][ T5085] loop1: detected capacity change from 0 to 256 [ 106.441255][ T5078] loop3: p1 p2[DM] p4 [ 106.445011][ T5078] loop3: p1 size 196608 extends beyond EOD, truncated [ 106.461313][ T5078] loop3: p2 start 4292936063 is beyond EOD, truncated [ 106.487034][ T5078] loop3: p4 size 50331648 extends beyond EOD, truncated [ 106.493155][ T5084] device wg2 left promiscuous mode [ 107.732037][ T4299] Bluetooth: hci4: command tx timeout [ 108.558802][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 108.842665][ T4966] udevd[4966]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 108.869178][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.881632][ T3876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.673150][ T3876] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24 [ 109.676171][ T3876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.680200][ T3876] usb 1-1: Product: syz [ 109.682395][ T3876] usb 1-1: Manufacturer: syz [ 109.683805][ T3876] usb 1-1: SerialNumber: syz [ 109.831459][ T4299] Bluetooth: hci4: command tx timeout [ 109.851309][ T3876] usb 1-1: config 0 descriptor?? [ 110.393166][ T5145] loop1: detected capacity change from 0 to 4096 [ 110.399638][ T5145] ntfs: (device loop1): parse_options(): The dmask option requires an argument. [ 110.674894][ T5148] loop3: detected capacity change from 0 to 1024 [ 110.677131][ T5148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.681561][ T27] audit: type=1326 audit(110.620:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5146 comm="syz.4.159" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc745e68 code=0x0 [ 110.696347][ T5148] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.699361][ T5148] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.732232][ T3876] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 110.739205][ T5014] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.822413][ T5148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 110.824544][ T5148] System zones: 0-1, 3-36 [ 110.878317][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.937652][ T3876] usb 1-1: USB disconnect, device number 2 [ 111.165504][ T4967] udevd[4967]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.363630][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 111.538572][ T5131] loop2: detected capacity change from 0 to 40427 [ 111.559591][ T5131] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.562724][ T5131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.603977][ T5131] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.634588][ T5180] capability: warning: `syz.1.164' uses deprecated v2 capabilities in a way that may be insecure [ 111.648458][ T5131] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.650365][ T5131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.727505][ T5131] syz.2.155: attempt to access beyond end of device [ 111.727505][ T5131] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.763959][ T5131] syz.2.155: attempt to access beyond end of device [ 111.763959][ T5131] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 112.536363][ T4302] syz-executor: attempt to access beyond end of device [ 112.536363][ T4302] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 112.596413][ T5195] tap0: tun_chr_ioctl cmd 1074025677 [ 112.598260][ T5195] tap0: linktype set to 512 [ 114.216283][ T5204] loop4: detected capacity change from 0 to 1024 [ 114.218542][ T5204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.239691][ T5211] loop1: detected capacity change from 0 to 256 [ 114.561539][ T5204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.564776][ T5204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.604739][ T5204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 114.607132][ T5204] System zones: 0-1, 3-36 [ 114.624858][ T5204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.790702][ T5217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'. [ 115.407849][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 115.520852][ T27] audit: type=1326 audit(115.460:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.175" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab45e68 code=0x0 [ 115.668514][ T5235] loop3: detected capacity change from 0 to 1024 [ 115.668793][ T5233] tap0: tun_chr_ioctl cmd 1074025677 [ 115.679199][ T5233] tap0: linktype set to 512 [ 115.684808][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.180'. [ 115.804597][ T5243] syz.3.179: attempt to access beyond end of device [ 115.804597][ T5243] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 115.811123][ T5243] Buffer I/O error on dev loop3, logical block 2889, lost async page write [ 115.918851][ T27] audit: type=1326 audit(115.860:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz.2.185" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaeb45e68 code=0x0 [ 117.383492][ T5258] raw_sendmsg: syz.0.188 forgot to set AF_INET. Fix it! [ 117.526639][ T5265] loop3: detected capacity change from 0 to 1024 [ 117.528820][ T5265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.562758][ T5265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.565847][ T5265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.600600][ T5265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 117.610956][ T5265] System zones: 0-1, 3-36 [ 117.617401][ T5271] loop0: detected capacity change from 0 to 256 [ 117.639912][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.842086][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 117.947605][ T5275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.193'. [ 118.725842][ T5280] loop2: detected capacity change from 0 to 256 [ 118.807944][ T5014] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.825495][ T5282] tap0: tun_chr_ioctl cmd 1074025677 [ 118.827171][ T5282] tap0: linktype set to 512 [ 120.109939][ T5280] loop2: detected capacity change from 0 to 32768 [ 120.117515][ T5296] loop1: detected capacity change from 0 to 1024 [ 120.136519][ T5296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.144262][ T5280] [ 120.144262][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.144262][ T5280] [ 120.146211][ T5296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.151880][ T5296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.173585][ T5280] [ 120.173585][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.173585][ T5280] [ 120.176663][ T5296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 120.178905][ T5296] System zones: 0-1, 3-36 [ 120.179688][ T5280] [ 120.179688][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.179688][ T5280] [ 120.185278][ T5302] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'. [ 120.190287][ T5280] [ 120.190287][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.190287][ T5280] [ 120.193852][ T5280] [ 120.193852][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.193852][ T5280] [ 120.210033][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.239334][ T5306] loop3: detected capacity change from 0 to 1024 [ 120.247095][ T92] [ 120.247095][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.247095][ T92] [ 120.270296][ T5309] [ 120.270296][ T5309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.270296][ T5309] [ 120.275301][ T5309] [ 120.275301][ T5309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.275301][ T5309] [ 120.278557][ T5309] [ 120.278557][ T5309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.278557][ T5309] [ 120.286711][ T5309] [ 120.286711][ T5309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.286711][ T5309] [ 120.290441][ T5309] [ 120.290441][ T5309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.290441][ T5309] [ 120.294733][ T93] [ 120.294733][ T93] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.294733][ T93] [ 120.298793][ T5280] [ 120.298793][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.298793][ T5280] [ 120.312848][ T5280] [ 120.312848][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.312848][ T5280] [ 120.318296][ T5280] [ 120.318296][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.318296][ T5280] [ 120.321248][ T5280] [ 120.321248][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.321248][ T5280] [ 120.331498][ T5280] [ 120.331498][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.331498][ T5280] [ 120.334376][ T5280] [ 120.334376][ T5280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.334376][ T5280] [ 120.339147][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.794009][ T5312] loop4: detected capacity change from 0 to 4096 [ 120.800797][ T5312] ntfs: (device loop4): parse_options(): The dmask option requires an argument. [ 120.953590][ T92] [ 120.953590][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.953590][ T92] [ 121.037487][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.149112][ T5313] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.152178][ T5313] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.180980][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.234304][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.239506][ T4693] EXT4-fs (loop1): unmounting filesystem. [ 121.271601][ T4302] [ 121.271601][ T4302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.271601][ T4302] [ 121.278673][ T4302] [ 121.278673][ T4302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.278673][ T4302] [ 121.736368][ T5316] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.016153][ T5316] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.032163][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.087182][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.115211][ T5313] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.117378][ T5313] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.169400][ T5324] 9pnet_fd: Insufficient options for proto=fd [ 122.177310][ T5326] loop0: detected capacity change from 0 to 512 [ 122.180950][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.189955][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.201089][ T5326] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 122.203916][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.205885][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.228191][ T5328] tap0: tun_chr_ioctl cmd 1074025677 [ 122.229786][ T5328] tap0: linktype set to 512 [ 122.232957][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.241795][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.266325][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.268309][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.295579][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.304386][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.324751][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.335761][ T5306] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.393318][ T5328] device wg2 left promiscuous mode [ 122.787003][ T5321] loop4: detected capacity change from 0 to 131072 [ 122.790945][ T5321] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 122.797326][ T5321] F2FS-fs (loop4): invalid crc value [ 122.877895][ T5321] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 122.913090][ T5321] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 122.966000][ T5321] syz.4.211 (pid 5321) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 123.171303][ T5354] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.751531][ T4342] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.981897][ T5367] loop4: detected capacity change from 0 to 1024 [ 123.991523][ T4342] usb 1-1: Using ep0 maxpacket: 8 [ 123.993472][ T5367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.003035][ T5367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.011666][ T5367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.033588][ T5367] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 124.035829][ T5367] System zones: 0-1, 3-36 [ 124.059693][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.120898][ T4342] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.123358][ T4342] usb 1-1: config 179 has no interface number 0 [ 124.128352][ T4342] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 124.143334][ T4342] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 124.146385][ T4342] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.163021][ T4342] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.166664][ T4342] usb 1-1: config 179 interface 65 has no altsetting 0 [ 124.168495][ T4342] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 124.170927][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.211742][ T5363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.258630][ T4342] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 124.278958][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 125.492490][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 125.524180][ T5382] tap0: tun_chr_ioctl cmd 1074025677 [ 125.525896][ T5382] tap0: linktype set to 512 [ 125.733745][ T5386] loop2: detected capacity change from 0 to 1024 [ 125.757376][ T5363] loop0: detected capacity change from 0 to 1024 [ 125.847560][ T5391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.229'. [ 125.891064][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.892276][ T5394] loop4: detected capacity change from 0 to 512 [ 125.912079][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.914610][ T5394] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 125.950332][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.959093][ T5394] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.963682][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.965492][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.982953][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.986516][ T5400] loop3: detected capacity change from 0 to 1024 [ 125.992876][ T5400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.006706][ T5400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.010035][ T5400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.014686][ T5394] Quota error (device loop4): v2_read_file_info: Block with free entry too big (32513 >= 6). [ 126.018337][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.020398][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.027317][ T5394] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.031173][ T5394] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 126.058985][ T5401] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.060901][ T5401] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.065524][ T5394] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.230: casefold flag without casefold feature [ 126.075756][ T5400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 126.077950][ T5400] System zones: 0-1, 3-36 [ 126.081917][ T5394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.230: bg 0: block 40: padding at end of block bitmap is not set [ 126.096867][ T5394] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 126.105006][ T5394] EXT4-fs (loop4): 1 truncate cleaned up [ 126.114001][ T5394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.153775][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.155945][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.169111][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.171360][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.179053][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.181116][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.190408][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.193611][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.198520][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.200862][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.236606][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.238604][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.243583][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.245993][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.251818][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.253893][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.255081][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.264893][ T4342] usb 1-1: USB disconnect, device number 3 [ 126.266674][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.271478][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 126.272309][ T5386] hfsplus: request for non-existent node 33423360 in B*Tree [ 126.290199][ T4342] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 126.334957][ T5394] netlink: 'syz.4.230': attribute type 3 has an invalid length. [ 126.337382][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 126.382603][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 126.385490][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 126.454581][ T5412] netlink: 108 bytes leftover after parsing attributes in process `syz.2.234'. [ 126.469925][ T5416] loop4: detected capacity change from 0 to 64 [ 126.761578][ T5421] netlink: 'syz.3.235': attribute type 3 has an invalid length. [ 126.763592][ T5421] netlink: 'syz.3.235': attribute type 3 has an invalid length. [ 127.584905][ T5426] tap0: tun_chr_ioctl cmd 1074025677 [ 127.591920][ T5426] tap0: linktype set to 512 [ 127.794680][ T5431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.241'. [ 127.924038][ T5436] loop0: detected capacity change from 0 to 1024 [ 127.947363][ T5437] loop4: detected capacity change from 0 to 16 [ 127.949930][ T5437] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 127.987237][ T5436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.064059][ T5423] loop3: detected capacity change from 0 to 32768 [ 128.066407][ T5423] XFS: ikeep mount option is deprecated. [ 129.633434][ T5423] XFS (loop3): Mounting V5 Filesystem [ 129.687580][ T5450] loop4: detected capacity change from 0 to 1024 [ 129.689780][ T5450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.739247][ T5450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.768915][ T5423] XFS (loop3): Ending clean mount [ 129.777726][ T5450] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.786694][ T5423] XFS (loop3): Quotacheck needed: Please wait. [ 129.836263][ T5450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 129.838682][ T5450] System zones: 0-1, 3-36 [ 129.858048][ T5450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.910297][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 129.982230][ T5423] XFS (loop3): Quotacheck: Done. [ 130.134480][ T4301] XFS (loop3): Unmounting Filesystem [ 130.161712][ T5456] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 130.332608][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 130.342460][ T5461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'. [ 130.400364][ T5461] usb usb9: usbfs: process 5461 (syz.0.249) did not claim interface 0 before use [ 130.811086][ T5470] loop4: detected capacity change from 0 to 128 [ 131.217753][ T5470] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 131.315117][ T5470] syz.4.250: attempt to access beyond end of device [ 131.315117][ T5470] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 131.319559][ T5470] sysv_free_block: trying to free block not in datazone [ 132.209822][ T5475] tap0: tun_chr_ioctl cmd 1074025677 [ 132.230653][ T4304] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 132.234363][ T5475] tap0: linktype set to 512 [ 132.307180][ T5475] device wg2 entered promiscuous mode [ 132.318705][ T5478] netlink: 236 bytes leftover after parsing attributes in process `syz.2.254'. [ 132.347527][ T5484] process 'syz.2.254' launched './file1' with NULL argv: empty string added [ 132.413461][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 133.557929][ T5498] loop4: detected capacity change from 0 to 1024 [ 133.560771][ T5498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.571693][ T5498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.574728][ T5498] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.598371][ T27] audit: type=1326 audit(133.540:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.1.259" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d45e68 code=0x0 [ 133.626165][ T5498] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 133.680314][ T5498] System zones: 0-1, 3-36 [ 133.765741][ T5498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.870271][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 133.975505][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 134.288745][ T4312] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 134.291063][ T4312] Bluetooth: hci4: Injecting HCI hardware error event [ 134.294935][ T4299] Bluetooth: hci4: hardware error 0x00 [ 134.821741][ T5527] tap0: tun_chr_ioctl cmd 1074025677 [ 134.840117][ T5527] tap0: linktype set to 512 [ 134.923420][ T5527] device wg2 entered promiscuous mode [ 136.670369][ T4299] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 137.768830][ T5556] loop2: detected capacity change from 0 to 1024 [ 137.771008][ T5556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.778615][ T5556] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.799412][ T5556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.844242][ T5561] tap0: tun_chr_ioctl cmd 1074025677 [ 137.845875][ T5561] tap0: linktype set to 512 [ 137.854193][ T5561] device wg2 entered promiscuous mode [ 137.888678][ T5556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 137.890677][ T5556] System zones: 0-1, 3-36 [ 137.986417][ T5556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.884544][ T27] audit: type=1326 audit(138.830:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.4.278" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc745e68 code=0x0 [ 138.889519][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 138.961325][ T5569] loop1: detected capacity change from 0 to 1764 [ 139.006782][ T5574] tap0: tun_chr_ioctl cmd 1074025677 [ 139.008727][ T5574] tap0: linktype set to 512 [ 139.025675][ T4966] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.357809][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.400303][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.252057][ T5591] loop1: detected capacity change from 0 to 1024 [ 141.171038][ T5607] loop2: detected capacity change from 0 to 1024 [ 141.189473][ T5607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.281825][ T5607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.284982][ T5607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.310807][ T5607] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 141.313242][ T5607] System zones: 0-1, 3-36 [ 141.493516][ T5607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.510294][ T5616] tap0: tun_chr_ioctl cmd 1074025677 [ 141.512007][ T5616] tap0: linktype set to 512 [ 141.594090][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 141.721371][ T5622] loop2: detected capacity change from 0 to 1024 [ 141.727154][ T5622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.734348][ T5622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.744373][ T5622] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.769891][ T5622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 141.841826][ T5622] System zones: 0-1, 3-36 [ 141.905717][ T5622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.044999][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 142.205496][ T5630] device pim6reg1 entered promiscuous mode [ 142.316560][ T5632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.352378][ T5632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.550908][ T5653] tap0: tun_chr_ioctl cmd 1074025677 [ 144.557811][ T5653] tap0: linktype set to 512 [ 144.585577][ T5653] device wg2 entered promiscuous mode [ 144.599753][ T5655] loop4: detected capacity change from 0 to 256 [ 144.633309][ T5655] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 144.654751][ T5657] loop0: detected capacity change from 0 to 1024 [ 144.657424][ T5657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.719987][ T5661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.733743][ T5657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.736592][ T5657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.792421][ T5661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.229453][ T5657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 145.232803][ T5657] System zones: 0-1, 3-36 [ 145.477308][ T5657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.554547][ T5671] loop3: detected capacity change from 0 to 1024 [ 145.879200][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 145.940160][ T5684] loop2: detected capacity change from 0 to 1024 [ 146.044255][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.048546][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.065369][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.067500][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.077661][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.079646][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.097457][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.099515][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.115733][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.117796][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.134441][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.136385][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.150898][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.153117][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.169138][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.171132][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.185931][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.188068][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.195652][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.201253][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.215243][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.219590][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.229257][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.237017][ T5684] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.241518][ T111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.389420][ T5688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.314'. [ 146.431588][ T111] usb 1-1: device descriptor read/64, error -71 [ 146.711602][ T111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.901676][ T111] usb 1-1: device descriptor read/64, error -71 [ 147.022548][ T111] usb usb1-port1: attempt power cycle [ 147.461191][ T111] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.551659][ T111] usb 1-1: device descriptor read/8, error -71 [ 147.639128][ T5698] loop2: detected capacity change from 0 to 1024 [ 147.651989][ T5700] loop1: detected capacity change from 0 to 256 [ 147.809612][ T5693] loop3: detected capacity change from 0 to 32768 [ 147.842038][ T5693] XFS: noikeep mount option is deprecated. [ 147.864927][ T5702] syz.2.317: attempt to access beyond end of device [ 147.864927][ T5702] loop2: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 147.868400][ T5702] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 147.912099][ T111] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.162055][ T111] usb 1-1: device descriptor read/8, error -71 [ 148.282640][ T111] usb usb1-port1: unable to enumerate USB device [ 148.674197][ T5693] XFS (loop3): Mounting V5 Filesystem [ 148.827777][ T5693] XFS (loop3): Ending clean mount [ 148.858332][ T5693] XFS (loop3): Quotacheck needed: Please wait. [ 148.865333][ T5714] tap0: tun_chr_ioctl cmd 1074025677 [ 148.866851][ T5714] tap0: linktype set to 512 [ 148.894440][ T5718] loop4: detected capacity change from 0 to 256 [ 148.908697][ T5693] XFS (loop3): Quotacheck: Done. [ 149.090997][ T4967] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.892565][ T4301] XFS (loop3): Unmounting Filesystem [ 150.013481][ T5734] loop2: detected capacity change from 0 to 1024 [ 151.132304][ T5734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.150474][ T5734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.172242][ T5734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.219519][ T5734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 151.226905][ T5734] System zones: 0-1, 3-36 [ 151.230774][ T5734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.432852][ T5718] loop4: detected capacity change from 0 to 32768 [ 151.457947][ T5718] [ 151.457947][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.457947][ T5718] [ 151.470915][ T5718] [ 151.470915][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.470915][ T5718] [ 151.474700][ T5718] [ 151.474700][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.474700][ T5718] [ 151.477416][ T5718] [ 151.477416][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.477416][ T5718] [ 151.480110][ T5718] [ 151.480110][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.480110][ T5718] [ 151.495357][ T92] [ 151.495357][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.495357][ T92] [ 151.498546][ T5718] [ 151.498546][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.498546][ T5718] [ 151.505614][ T5718] [ 151.505614][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.505614][ T5718] [ 151.506673][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 151.514914][ T5718] [ 151.514914][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.514914][ T5718] [ 151.517805][ T5718] [ 151.517805][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.517805][ T5718] [ 151.520539][ T5718] [ 151.520539][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.520539][ T5718] [ 151.553685][ T92] [ 151.553685][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.553685][ T92] [ 151.565294][ T5718] [ 151.565294][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.565294][ T5718] [ 151.586844][ T5718] [ 151.586844][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.586844][ T5718] [ 151.596232][ T5744] loop0: detected capacity change from 0 to 1024 [ 151.599569][ T5718] [ 151.599569][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.599569][ T5718] [ 151.621150][ T5744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.629215][ T5718] [ 151.629215][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.629215][ T5718] [ 151.631051][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.641867][ T5718] [ 151.641867][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.641867][ T5718] [ 151.645349][ T5744] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.648430][ T5744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.651090][ T5718] [ 151.651090][ T5718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.651090][ T5718] [ 151.665844][ T93] [ 151.665844][ T93] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.665844][ T93] [ 151.677778][ T5744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 151.679917][ T5744] System zones: 0-1, 3-36 [ 151.683180][ T5744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.692278][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.727815][ T4304] [ 151.727815][ T4304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.727815][ T4304] [ 151.733422][ T4304] [ 151.733422][ T4304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.733422][ T4304] [ 151.802565][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 151.829183][ T5752] loop2: detected capacity change from 0 to 1024 [ 151.968881][ T5759] tap0: tun_chr_ioctl cmd 1074025677 [ 151.971004][ T5759] tap0: linktype set to 512 [ 151.997513][ T5759] device wg2 entered promiscuous mode [ 152.188229][ T5768] loop3: detected capacity change from 0 to 256 [ 155.076284][ T5787] binder: 5786:5787 tried to acquire reference to desc 0, got 1 instead [ 155.084611][ T5787] binder: 5786:5787 got transaction with invalid data ptr [ 155.090687][ T5787] binder: 5786:5787 transaction call to 5786:0 failed 36/29201/-14, size 52-0 line 3573 [ 155.098349][ T5787] binder: 5786:5787 tried to acquire reference to desc 0, got 1 instead [ 155.104713][ T5787] binder: 5786:5787 got transaction with invalid data ptr [ 155.110229][ T5787] binder: 5786:5787 transaction call to 5786:0 failed 38/29201/-14, size 0-12280 line 3341 [ 155.118130][ T4986] binder: undelivered TRANSACTION_ERROR: 29201 [ 155.120084][ T4986] binder: undelivered TRANSACTION_ERROR: 29201 [ 155.281042][ T5796] loop2: detected capacity change from 0 to 2048 [ 156.107845][ T5797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.176826][ T5799] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.987239][ T5808] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=15564440312192434187, rec_len=11150, name_len=126 [ 157.007651][ T5808] Remounting filesystem read-only [ 157.015988][ T5808] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=15564440312192434187, rec_len=11150, name_len=126 [ 157.360593][ T5803] loop3: detected capacity change from 0 to 1024 [ 157.402095][ T5803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.422413][ T5803] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.441554][ T5803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.473708][ T5810] tap0: tun_chr_ioctl cmd 1074025677 [ 157.475282][ T5810] tap0: linktype set to 512 [ 157.478297][ T5803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 157.480704][ T5803] System zones: 0-1, 3-36 [ 157.495731][ T5803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.579031][ T4302] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 157.580877][ T4302] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 157.583983][ T4302] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 157.588444][ T4302] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 157.590465][ T4302] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 157.599547][ T4302] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 157.601992][ T4302] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 157.604131][ T4302] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.606733][ T4302] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.609453][ T4302] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.662788][ T5810] device wg2 left promiscuous mode [ 157.663646][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 157.677302][ T5813] device wg2 entered promiscuous mode [ 158.633920][ T5821] loop3: detected capacity change from 0 to 256 [ 161.052034][ T5836] tap0: tun_chr_ioctl cmd 1074025677 [ 161.053618][ T5836] tap0: linktype set to 512 [ 162.046147][ T5840] tap0: tun_chr_ioctl cmd 1074025677 [ 162.075230][ T5840] tap0: linktype set to 512 [ 162.122999][ T5849] loop4: detected capacity change from 0 to 1024 [ 162.185144][ T5851] loop1: detected capacity change from 0 to 1024 [ 162.196772][ T5851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.220188][ T5851] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.251602][ T5849] hfsplus: request for non-existent node 768 in B*Tree [ 162.253854][ T5849] hfsplus: request for non-existent node 768 in B*Tree [ 162.255595][ T5849] hfsplus: xattr searching failed [ 162.259669][ T5851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.273991][ T5851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 162.276178][ T5851] System zones: 0-1, 3-36 [ 162.279087][ T5849] hfsplus: request for non-existent node 768 in B*Tree [ 162.280833][ T5849] hfsplus: request for non-existent node 768 in B*Tree [ 162.284326][ T5849] hfsplus: xattr searching failed [ 163.029151][ T5851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.072935][ T5858] loop3: detected capacity change from 0 to 2048 [ 163.129387][ T5862] tap0: tun_chr_ioctl cmd 1074025677 [ 163.139331][ T5862] tap0: linktype set to 512 [ 163.203081][ T5860] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.250627][ T4693] EXT4-fs (loop1): unmounting filesystem. [ 163.263461][ T5862] device wg2 left promiscuous mode [ 164.892408][ T5868] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=15564440312192434187, rec_len=11150, name_len=126 [ 164.924169][ T5868] Remounting filesystem read-only [ 164.930471][ T5868] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=15564440312192434187, rec_len=11150, name_len=126 [ 164.943111][ T5864] device wg2 entered promiscuous mode [ 165.013057][ T5873] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 165.411831][ T4301] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 165.414023][ T4301] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 165.416073][ T4301] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 165.417990][ T4301] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 165.419928][ T4301] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 165.609023][ T4301] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 165.610877][ T4301] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 165.618435][ T5879] tap0: tun_chr_ioctl cmd 1074025677 [ 165.620028][ T5879] tap0: linktype set to 512 [ 165.621953][ T4301] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 165.633035][ T4301] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 165.635401][ T4301] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.020115][ T5888] loop3: detected capacity change from 0 to 256 [ 168.786558][ T5899] tap0: tun_chr_ioctl cmd 1074025677 [ 168.791801][ T5899] tap0: linktype set to 512 [ 168.958753][ T5907] loop3: detected capacity change from 0 to 1024 [ 168.975880][ T5907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.989683][ T5907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.012579][ T5907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.035759][ T5907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 169.038121][ T5907] System zones: 0-1, 3-36 [ 169.051513][ T5907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.162964][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 169.231728][ T5896] device wg2 left promiscuous mode [ 169.240945][ T5899] device wg2 entered promiscuous mode [ 169.340502][ T5898] loop4: detected capacity change from 0 to 32768 [ 169.349296][ T5912] loop1: detected capacity change from 0 to 1024 [ 169.372327][ T5912] hfsplus: request for non-existent node 768 in B*Tree [ 169.374298][ T5912] hfsplus: request for non-existent node 768 in B*Tree [ 169.376098][ T5912] hfsplus: xattr searching failed [ 169.397243][ T5912] hfsplus: request for non-existent node 768 in B*Tree [ 169.399081][ T5912] hfsplus: request for non-existent node 768 in B*Tree [ 169.400966][ T5912] hfsplus: xattr searching failed [ 169.911617][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 169.913296][ T4299] Bluetooth: hci3: command 0x0406 tx timeout [ 169.920684][ T5919] loop2: detected capacity change from 0 to 64 [ 172.753165][ T5935] loop4: detected capacity change from 0 to 512 [ 172.764403][ T5930] device pim6reg1 entered promiscuous mode [ 172.766542][ T5935] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.018919][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.232498][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.246858][ T5935] EXT4-fs (loop4): 1 truncate cleaned up [ 174.248572][ T5935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.384405][ T5947] loop3: detected capacity change from 0 to 1024 [ 175.794522][ T5954] tap0: tun_chr_ioctl cmd 1074025677 [ 175.796092][ T5954] tap0: linktype set to 512 [ 176.632672][ T5952] device wg2 left promiscuous mode [ 177.276538][ T5953] device wg2 entered promiscuous mode [ 177.309858][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 179.971835][ T5986] loop2: detected capacity change from 0 to 256 [ 179.991884][ T5986] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 179.998363][ T5986] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 180.096848][ T5986] input: syz0 as /devices/virtual/input/input4 [ 180.178269][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.1.392'. [ 180.194261][ T5997] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 180.194261][ T5997] [ 180.207608][ T5997] exFAT-fs (loop2): Filesystem has been set read-only [ 180.224410][ T5992] tap0: tun_chr_ioctl cmd 1074025677 [ 180.225937][ T5992] tap0: linktype set to 512 [ 180.281710][ T5993] device wg2 left promiscuous mode [ 180.294485][ T5996] device wg2 entered promiscuous mode [ 180.373135][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 181.234140][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.238426][ T6012] loop0: detected capacity change from 0 to 256 [ 181.273997][ T6012] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 181.282009][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.305140][ T4483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.308306][ T4483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.382885][ T6010] tap0: tun_chr_ioctl cmd 1074025677 [ 181.384690][ T6010] tap0: linktype set to 512 [ 181.500602][ T4299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.505567][ T4299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.508359][ T4299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.515398][ T4299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.517879][ T4299] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.520043][ T4299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.600025][ T6010] device wg2 left promiscuous mode [ 181.616101][ T6014] device wg2 entered promiscuous mode [ 181.664747][ T4483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.667507][ T4483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.481119][ T4483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.489744][ T4483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.587707][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.405'. [ 182.614702][ T4483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.617446][ T4483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.660678][ T6033] device pim6reg1 entered promiscuous mode [ 182.757745][ T6036] binder: tried to use weak ref as strong ref [ 182.762908][ T4312] Bluetooth: hci0: command tx timeout [ 182.769758][ T6036] binder: 6035:6036 Acquire 1 refcount change on invalid ref 0 ret -22 [ 182.770510][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.790619][ T6036] binder: 6035:6036 got transaction to invalid handle, 1 [ 182.810415][ T6036] binder: 6036:6035 cannot find target node [ 182.819724][ T6036] binder: 6035:6036 transaction call to 0:0 failed 41/29201/-22, size 0-12280 line 3054 [ 182.823850][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.841812][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.889035][ T6016] chnl_net:caif_netlink_parms(): no params data found [ 182.965128][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.969379][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.974569][ T6016] device bridge_slave_0 entered promiscuous mode [ 182.985124][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.005698][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.016786][ T6016] device bridge_slave_1 entered promiscuous mode [ 183.069330][ T6027] loop1: detected capacity change from 0 to 32768 [ 183.082103][ T6027] XFS: noikeep mount option is deprecated. [ 183.195058][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.198177][ T6027] XFS (loop1): Mounting V5 Filesystem [ 183.228770][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.348284][ T6027] XFS (loop1): Ending clean mount [ 183.385827][ T6027] XFS (loop1): Quotacheck needed: Please wait. [ 183.455395][ T6027] XFS (loop1): Quotacheck: Done. [ 183.499934][ T6059] loop3: detected capacity change from 0 to 512 [ 183.562050][ T6059] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 183.572020][ T4299] Bluetooth: hci2: command tx timeout [ 183.651302][ T6016] team0: Port device team_slave_0 added [ 183.655853][ T6016] team0: Port device team_slave_1 added [ 184.389610][ T6065] EXT2-fs (loop3): error: ext2_check_page: bad entry in directory #2: : directory entry across blocks - offset=12, inode=2, rec_len=1548, name_len=0 [ 184.405099][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.406979][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.438189][ T4693] XFS (loop1): Unmounting Filesystem [ 184.439915][ T6016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.444236][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.447072][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.465540][ T6016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.674757][ T6016] device hsr_slave_0 entered promiscuous mode [ 184.701929][ T6016] device hsr_slave_1 entered promiscuous mode [ 184.723963][ T6074] tap0: tun_chr_ioctl cmd 1074025677 [ 184.725551][ T6074] tap0: linktype set to 512 [ 184.782230][ T6079] device wg2 left promiscuous mode [ 184.851623][ T4299] Bluetooth: hci0: command tx timeout [ 185.548350][ T6082] device wg2 entered promiscuous mode [ 185.647879][ T4299] Bluetooth: hci2: command tx timeout [ 186.149323][ T4312] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 187.303349][ T6098] device wg2 left promiscuous mode [ 187.389664][ T6108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.416'. [ 187.452687][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.454524][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.495899][ T6107] device wg2 entered promiscuous mode [ 187.515007][ T6113] binder: 6112:6113 tried to acquire reference to desc 0, got 1 instead [ 187.517836][ T6113] binder: 6112:6113 got transaction with invalid data ptr [ 187.519897][ T6113] binder: 6112:6113 transaction call to 6112:0 failed 48/29201/-14, size 52-0 line 3573 [ 187.523322][ T6113] binder: 6112:6113 got transaction to invalid handle, 1 [ 187.525299][ T6113] binder: 6113:6112 cannot find target node [ 187.526873][ T6113] binder: 6112:6113 transaction call to 0:0 failed 49/29201/-22, size 0-12280 line 3054 [ 187.530222][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.551753][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.700646][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.428'. [ 187.727605][ T4312] Bluetooth: hci2: command tx timeout [ 187.941011][ T6131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.430'. [ 188.497136][ T6133] loop2: detected capacity change from 0 to 32768 [ 188.528678][ T6133] XFS: noikeep mount option is deprecated. [ 188.537246][ T4483] device hsr_slave_0 left promiscuous mode [ 188.590093][ T6133] XFS (loop2): Mounting V5 Filesystem [ 188.651531][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.653768][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.659302][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.664942][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.676239][ T4483] device bridge_slave_1 left promiscuous mode [ 188.680879][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.685698][ T6133] XFS (loop2): Ending clean mount [ 188.689885][ T6133] XFS (loop2): Quotacheck needed: Please wait. [ 188.741535][ T4483] device bridge_slave_0 left promiscuous mode [ 188.743312][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.749663][ T6133] XFS (loop2): Quotacheck: Done. [ 188.854041][ T4483] device hsr_slave_1 left promiscuous mode [ 189.320372][ T4483] device veth1_macvtap left promiscuous mode [ 189.325437][ T4483] device veth0_macvtap left promiscuous mode [ 189.327644][ T4483] device veth1_vlan left promiscuous mode [ 189.329938][ T4483] device veth0_vlan left promiscuous mode [ 189.723952][ T4302] XFS (loop2): Unmounting Filesystem [ 189.812020][ T4299] Bluetooth: hci2: command tx timeout [ 190.084389][ T6162] serio: Serial port ptm0 [ 192.945420][ T4483] team0 (unregistering): Port device team_slave_1 removed [ 193.123668][ T4483] team0 (unregistering): Port device team_slave_0 removed [ 193.332630][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.572406][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.436537][ T4483] bond0 (unregistering): Released all slaves [ 196.671130][ T6156] tap0: tun_chr_ioctl cmd 1074025677 [ 196.672797][ T6156] tap0: linktype set to 512 [ 196.751818][ T6157] device wg2 left promiscuous mode [ 196.756257][ T6158] device wg2 entered promiscuous mode [ 196.899278][ T6016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.930585][ T6016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.983243][ T6016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.013687][ T6016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.120592][ T6016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.135517][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.138110][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.144729][ T6016] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.159294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.162185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.166486][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.168384][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.170889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.177394][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.180609][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.183620][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.185544][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.199279][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.204053][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.216231][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.220686][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.223882][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.227874][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.230788][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.239784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.243438][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.248175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.250917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.257801][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.399018][ T6016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.404886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.407094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.668273][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.671098][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.678306][ T6016] device veth0_vlan entered promiscuous mode [ 197.683027][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.686182][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.690227][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.697665][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.703984][ T6016] device veth1_vlan entered promiscuous mode [ 197.719132][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.723885][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.726504][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.729397][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.738158][ T6016] device veth0_macvtap entered promiscuous mode [ 197.743700][ T6016] device veth1_macvtap entered promiscuous mode [ 197.754470][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.757352][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.759875][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.763199][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.765862][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.768627][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.771162][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.775277][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.779103][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.781827][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.784917][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.787770][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.791031][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.797377][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.800180][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.803511][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.806250][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.808745][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.813207][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.815857][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.818506][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.823490][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.826465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.830266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.839627][ T6016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.842337][ T6016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.844819][ T6016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.847122][ T6016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.924527][ T536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.926817][ T536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.932219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.962479][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.964821][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.970211][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.124852][ T6224] loop2: detected capacity change from 0 to 2048 [ 198.147694][ T6224] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.150876][ T6224] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 198.157556][ T6224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.500834][ T6232] loop3: detected capacity change from 0 to 512 [ 200.295294][ T6238] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.150830][ T6250] binder: 6247:6250 tried to acquire reference to desc 0, got 1 instead [ 201.166822][ T6250] binder: 6247:6250 got transaction with invalid data ptr [ 201.168303][ T6249] tap0: tun_chr_ioctl cmd 1074025677 [ 201.168992][ T6250] binder: 6247:6250 transaction call to 6247:0 failed 56/29201/-14, size 52-0 line 3573 [ 201.170550][ T6249] tap0: linktype set to 512 [ 201.213572][ T6254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 201.213758][ T6250] binder: 6247:6250 got transaction to invalid handle, 1 [ 201.218009][ T6250] binder: 6250:6247 cannot find target node [ 201.219612][ T6250] binder: 6247:6250 transaction call to 0:0 failed 57/29201/-22, size 0-12280 line 3054 [ 201.305560][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.307363][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.402754][ T6249] device wg2 left promiscuous mode [ 201.512720][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.449'. [ 201.785529][ T6270] dccp_close: ABORT with 108 bytes unread [ 202.242334][ T6267] loop4: detected capacity change from 0 to 32768 [ 202.270077][ T6267] XFS: noikeep mount option is deprecated. [ 202.450139][ T6267] XFS (loop4): Mounting V5 Filesystem [ 202.521584][ T4299] Bluetooth: hci2: command tx timeout [ 202.978475][ T6267] XFS (loop4): Ending clean mount [ 203.215031][ T6267] XFS (loop4): Quotacheck needed: Please wait. [ 203.242838][ T6267] XFS (loop4): Quotacheck: Done. [ 203.286741][ T6277] loop0: detected capacity change from 0 to 32768 [ 204.735107][ T4312] Bluetooth: hci2: command tx timeout [ 205.156354][ T6016] XFS (loop4): Unmounting Filesystem [ 205.522342][ T4299] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 206.126998][ T6308] tap0: tun_chr_ioctl cmd 1074025677 [ 206.128631][ T6308] tap0: linktype set to 512 [ 206.268386][ T6313] binder: 6311:6313 tried to acquire reference to desc 0, got 1 instead [ 206.292846][ T6308] device wg2 left promiscuous mode [ 206.301943][ T6312] device wg2 entered promiscuous mode [ 206.308071][ T6313] binder: 6311:6313 got transaction with invalid data ptr [ 206.327514][ T6313] binder: 6311:6313 transaction call to 6311:0 failed 64/29201/-14, size 52-0 line 3573 [ 206.334658][ T6313] binder: 6311:6313 got transaction to invalid handle, 1 [ 206.336506][ T6313] binder: 6313:6311 cannot find target node [ 206.338338][ T6313] binder: 6311:6313 transaction call to 0:0 failed 65/29201/-22, size 0-12280 line 3054 [ 206.368194][ T4986] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.370082][ T4986] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.244739][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.454'. [ 207.344367][ T6326] loop3: detected capacity change from 0 to 512 [ 208.128139][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 208.180009][ T6326] [ 208.180722][ T6326] ====================================================== [ 208.182801][ T6326] WARNING: possible circular locking dependency detected [ 208.184894][ T6326] 6.1.106-syzkaller #0 Not tainted [ 208.186274][ T6326] ------------------------------------------------------ [ 208.188304][ T6326] syz.3.457/6326 is trying to acquire lock: [ 208.189983][ T6326] ffff0000e108c8c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x2ac/0x1810 [ 208.192749][ T6326] [ 208.192749][ T6326] but task is already holding lock: [ 208.194832][ T6326] ffff0000d5180208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x11c/0x188 [ 208.197602][ T6326] [ 208.197602][ T6326] which lock already depends on the new lock. [ 208.197602][ T6326] [ 208.200543][ T6326] [ 208.200543][ T6326] the existing dependency chain (in reverse order) is: [ 208.203058][ T6326] [ 208.203058][ T6326] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 208.205404][ T6326] down_read+0x64/0x308 [ 208.206702][ T6326] v2_read_dquot+0x50/0x11c [ 208.208254][ T6326] dquot_acquire+0x130/0x5c4 [ 208.209632][ T6326] ext4_acquire_dquot+0x270/0x420 [ 208.211201][ T6326] dqget+0x660/0xcb4 [ 208.212398][ T6326] __dquot_initialize+0x2c8/0xc04 [ 208.213879][ T6326] dquot_initialize+0x24/0x34 [ 208.215552][ T6326] ext4_process_orphan+0x5c/0x2b8 [ 208.217161][ T6326] ext4_orphan_cleanup+0x974/0x1134 [ 208.218728][ T6326] ext4_fill_super+0x6f04/0x7570 [ 208.220294][ T6326] get_tree_bdev+0x360/0x54c [ 208.221700][ T6326] ext4_get_tree+0x28/0x38 [ 208.223080][ T6326] vfs_get_tree+0x90/0x274 [ 208.224394][ T6326] do_new_mount+0x278/0x8fc [ 208.225768][ T6326] path_mount+0x590/0xe5c [ 208.227272][ T6326] __arm64_sys_mount+0x45c/0x594 [ 208.228854][ T6326] invoke_syscall+0x98/0x2c0 [ 208.230279][ T6326] el0_svc_common+0x138/0x258 [ 208.231712][ T6326] do_el0_svc+0x64/0x218 [ 208.233043][ T6326] el0_svc+0x58/0x168 [ 208.234268][ T6326] el0t_64_sync_handler+0x84/0xf0 [ 208.235777][ T6326] el0t_64_sync+0x18c/0x190 [ 208.237163][ T6326] [ 208.237163][ T6326] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 208.239246][ T6326] __mutex_lock_common+0x190/0x21a0 [ 208.240806][ T6326] mutex_lock_nested+0x38/0x44 [ 208.242343][ T6326] dquot_commit+0x54/0x240 [ 208.243745][ T6326] ext4_write_dquot+0x1b4/0x314 [ 208.245140][ T6326] ext4_mark_dquot_dirty+0xe8/0x140 [ 208.246761][ T6326] mark_all_dquot_dirty+0x108/0x424 [ 208.248363][ T6326] __dquot_free_space+0x840/0xce4 [ 208.249838][ T6326] ext4_free_blocks+0x1b48/0x2b68 [ 208.251405][ T6326] ext4_ext_remove_space+0x1bd0/0x4544 [ 208.253112][ T6326] ext4_ext_truncate+0x168/0x210 [ 208.254707][ T6326] ext4_truncate+0xa08/0x1178 [ 208.256162][ T6326] ext4_evict_inode+0xc3c/0x12cc [ 208.257750][ T6326] evict+0x260/0x68c [ 208.258962][ T6326] iput+0x7c0/0x8a4 [ 208.260131][ T6326] do_unlinkat+0x530/0x70c [ 208.261526][ T6326] __arm64_sys_unlinkat+0xcc/0xfc [ 208.263090][ T6326] invoke_syscall+0x98/0x2c0 [ 208.264523][ T6326] el0_svc_common+0x138/0x258 [ 208.265965][ T6326] do_el0_svc+0x64/0x218 [ 208.267319][ T6326] el0_svc+0x58/0x168 [ 208.268615][ T6326] el0t_64_sync_handler+0x84/0xf0 [ 208.270422][ T6326] el0t_64_sync+0x18c/0x190 [ 208.271818][ T6326] [ 208.271818][ T6326] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 208.274072][ T6326] __lock_acquire+0x3338/0x7680 [ 208.275565][ T6326] lock_acquire+0x26c/0x7cc [ 208.276932][ T6326] down_read+0x64/0x308 [ 208.278271][ T6326] ext4_map_blocks+0x2ac/0x1810 [ 208.279761][ T6326] ext4_getblk+0x198/0x6ec [ 208.281141][ T6326] ext4_bread+0x3c/0x1b0 [ 208.282464][ T6326] ext4_quota_write+0x230/0x54c [ 208.283952][ T6326] get_free_dqblk+0x28c/0x598 [ 208.285409][ T6326] do_insert_tree+0x1fc/0x1474 [ 208.286819][ T6326] do_insert_tree+0x510/0x1474 [ 208.288244][ T6326] do_insert_tree+0x510/0x1474 [ 208.289753][ T6326] do_insert_tree+0x510/0x1474 [ 208.291172][ T6326] qtree_write_dquot+0x318/0x488 [ 208.292734][ T6326] v2_write_dquot+0xf4/0x188 [ 208.294172][ T6326] dquot_acquire+0x2c4/0x5c4 [ 208.295519][ T6326] ext4_acquire_dquot+0x270/0x420 [ 208.297011][ T6326] dqget+0x660/0xcb4 [ 208.298202][ T6326] __dquot_initialize+0x344/0xc04 [ 208.299656][ T6326] dquot_initialize+0x24/0x34 [ 208.301084][ T6326] ext4_process_orphan+0x5c/0x2b8 [ 208.302595][ T6326] ext4_orphan_cleanup+0x974/0x1134 [ 208.304244][ T6326] ext4_fill_super+0x6f04/0x7570 [ 208.305806][ T6326] get_tree_bdev+0x360/0x54c [ 208.307273][ T6326] ext4_get_tree+0x28/0x38 [ 208.308614][ T6326] vfs_get_tree+0x90/0x274 [ 208.309965][ T6326] do_new_mount+0x278/0x8fc [ 208.311351][ T6326] path_mount+0x590/0xe5c [ 208.312726][ T6326] __arm64_sys_mount+0x45c/0x594 [ 208.314181][ T6326] invoke_syscall+0x98/0x2c0 [ 208.315677][ T6326] el0_svc_common+0x138/0x258 [ 208.317167][ T6326] do_el0_svc+0x64/0x218 [ 208.318505][ T6326] el0_svc+0x58/0x168 [ 208.319748][ T6326] el0t_64_sync_handler+0x84/0xf0 [ 208.321339][ T6326] el0t_64_sync+0x18c/0x190 [ 208.322744][ T6326] [ 208.322744][ T6326] other info that might help us debug this: [ 208.322744][ T6326] [ 208.325593][ T6326] Chain exists of: [ 208.325593][ T6326] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 208.325593][ T6326] [ 208.329456][ T6326] Possible unsafe locking scenario: [ 208.329456][ T6326] [ 208.331524][ T6326] CPU0 CPU1 [ 208.332959][ T6326] ---- ---- [ 208.334387][ T6326] lock(&s->s_dquot.dqio_sem); [ 208.335720][ T6326] lock(&dquot->dq_lock); [ 208.337706][ T6326] lock(&s->s_dquot.dqio_sem); [ 208.339758][ T6326] lock(&ei->i_data_sem/2); [ 208.341047][ T6326] [ 208.341047][ T6326] *** DEADLOCK *** [ 208.341047][ T6326] [ 208.343280][ T6326] 3 locks held by syz.3.457/6326: [ 208.344709][ T6326] #0: ffff0000d51800e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1b4/0x824 [ 208.347693][ T6326] #1: ffff0000e2f7c268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x68/0x5c4 [ 208.350406][ T6326] #2: ffff0000d5180208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x11c/0x188 [ 208.353285][ T6326] [ 208.353285][ T6326] stack backtrace: [ 208.354924][ T6326] CPU: 1 PID: 6326 Comm: syz.3.457 Not tainted 6.1.106-syzkaller #0 [ 208.357307][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.360180][ T6326] Call trace: [ 208.361110][ T6326] dump_backtrace+0x1c8/0x1f4 [ 208.362407][ T6326] show_stack+0x2c/0x3c [ 208.363574][ T6326] dump_stack_lvl+0x108/0x170 [ 208.364864][ T6326] dump_stack+0x1c/0x58 [ 208.365943][ T6326] print_circular_bug+0x150/0x1b8 [ 208.367269][ T6326] check_noncircular+0x2cc/0x378 [ 208.368634][ T6326] __lock_acquire+0x3338/0x7680 [ 208.369987][ T6326] lock_acquire+0x26c/0x7cc [ 208.371249][ T6326] down_read+0x64/0x308 [ 208.372455][ T6326] ext4_map_blocks+0x2ac/0x1810 [ 208.373799][ T6326] ext4_getblk+0x198/0x6ec [ 208.375016][ T6326] ext4_bread+0x3c/0x1b0 [ 208.376174][ T6326] ext4_quota_write+0x230/0x54c [ 208.377513][ T6326] get_free_dqblk+0x28c/0x598 [ 208.378879][ T6326] do_insert_tree+0x1fc/0x1474 [ 208.380148][ T6326] do_insert_tree+0x510/0x1474 [ 208.381451][ T6326] do_insert_tree+0x510/0x1474 [ 208.382734][ T6326] do_insert_tree+0x510/0x1474 [ 208.384008][ T6326] qtree_write_dquot+0x318/0x488 [ 208.385393][ T6326] v2_write_dquot+0xf4/0x188 [ 208.386614][ T6326] dquot_acquire+0x2c4/0x5c4 [ 208.387801][ T6326] ext4_acquire_dquot+0x270/0x420 [ 208.389189][ T6326] dqget+0x660/0xcb4 [ 208.390218][ T6326] __dquot_initialize+0x344/0xc04 [ 208.391599][ T6326] dquot_initialize+0x24/0x34 [ 208.392849][ T6326] ext4_process_orphan+0x5c/0x2b8 [ 208.394251][ T6326] ext4_orphan_cleanup+0x974/0x1134 [ 208.395689][ T6326] ext4_fill_super+0x6f04/0x7570 [ 208.397037][ T6326] get_tree_bdev+0x360/0x54c [ 208.398308][ T6326] ext4_get_tree+0x28/0x38 [ 208.399515][ T6326] vfs_get_tree+0x90/0x274 [ 208.400702][ T6326] do_new_mount+0x278/0x8fc [ 208.401959][ T6326] path_mount+0x590/0xe5c [ 208.403139][ T6326] __arm64_sys_mount+0x45c/0x594 [ 208.404492][ T6326] invoke_syscall+0x98/0x2c0 [ 208.405760][ T6326] el0_svc_common+0x138/0x258 [ 208.407044][ T6326] do_el0_svc+0x64/0x218 [ 208.408205][ T6326] el0_svc+0x58/0x168 [ 208.409247][ T6326] el0t_64_sync_handler+0x84/0xf0 [ 208.410663][ T6326] el0t_64_sync+0x18c/0x190 [ 208.431538][ T6326] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.457: corrupted inode contents [ 208.441589][ T6326] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #3: comm syz.3.457: mark_inode_dirty error [ 208.458628][ T6326] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.457: corrupted inode contents [ 208.469609][ T6326] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.457: mark_inode_dirty error [ 208.483642][ T6326] Quota error (device loop3): write_blk: dquota write failed [ 208.485845][ T6326] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 208.490047][ T6326] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.457: Failed to acquire dquot type 0 [ 208.494905][ T6326] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.457: corrupted inode contents [ 208.498656][ T6326] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #16: comm syz.3.457: mark_inode_dirty error [ 208.506169][ T6326] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.457: corrupted inode contents [ 208.509942][ T6326] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.457: mark_inode_dirty error [ 208.517271][ T6326] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.457: corrupted inode contents [ 208.520954][ T6326] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 208.529887][ T6326] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.457: corrupted inode contents [ 208.533717][ T6326] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.457: mark_inode_dirty error [ 208.537446][ T6326] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 208.549426][ T6326] EXT4-fs (loop3): 1 truncate cleaned up [ 208.551061][ T6326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.117656][ T4301] EXT4-fs (loop3): unmounting filesystem.