last executing test programs: 3m40.796971738s ago: executing program 3 (id=10): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES8=0x0], 0x7c, 0x2b5, &(0x7f00000001c0)="$eJzs3U9rK1UUAPAz+dc8XSSIG0VwQBeuyqtbN43yBLErJYK6MfhakKQUWghYwdpVP4FL8Wu4defabyC4Fdy1i8rIZGaaxCZttP/A/n6b3t57z52TOUOyyskXr+0On+8lcXz6W7TbSdQ2YzPOkuhGLSrfRSMAgP+PsyyLP7OIaBb/JytHNmp3lxUAcJeKz//CQ+cCANyPjz/97MPe1tazj9K0Ha90Tsb9JCJ2T8b9Yr23E1/FKLbjaXTiPCK7UIzf/2DrWTTSXDfe3D0a98dz5/f+iCeT+I3oRHdx/EZaKOP7EfnfZrwQafR2mtVRnXh5cfzbC+Kj34q33pjJfz068euXsRejeB557DT+2400fS/7/vSbz/PL5PFJLfprk31TWf1+KgIAAAAAAAAAAAAAAAAAAAAAwGOwnqZJ0b5n0r8nnyr779TPJ+vraaU735+niL/oF1z0B8qibNFzlMUPVX+dp2maZuXGaXwjXm34YQEAAAAAAAAAAAAAAAAAAADIHXx9OByMRtv7Nx7Uh4NR1Q2g+lr/fz1wc2bm9TgcDurLD1xb/Vqz3QbyXK/cHI1G3MJtuX4QPz/J81my58cy339/8tq0uJ+U4VVhbvVVvPTuRYZpuVTd5OEgue5a7apwP80utWLlNJJkbmZS29H2fjZ5JM6z+Zq2l9zM1i3cjfwZbb24cOmvLMtWO+ed34salTPJpMXGamk0y8HSp6V9uRa/LD9w6VtG/abvOQAAAAAAAAAAAAAAAAAAwGLzX5z+h+MrQ2t3lhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LPp7/9Xg3ZEzM9cGhyVwVftKQet2D944JcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/B3AAAA//+VpEaB") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 3m40.631433527s ago: executing program 3 (id=14): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m40.455478807s ago: executing program 3 (id=19): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001f80)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88"], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB") r0 = getpid() getcwd(&(0x7f0000000700)=""/224, 0xe0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r4}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'streebog512\x00'}}, 0x0, 0x0) keyctl$clear(0x7, r4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000434) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "e2080a72d232032f43c4bbcea3654ebceb550ee7954ce3ca21270ea498fbf26379831290e229919a750360bf6c9a8ce75b3b51ee247a10ce2035a50276d5abcc56f92a492d1f1d284dbe81c6ac7195726e54d6ef1d3cde5f9da82bfcee7abe66080ccc42ce0ae6136513ddef033dbe985226938068d797f1d8"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x3a, 0x1, 0x0, &(0x7f0000000080)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40000, 0x0) getdents64(r7, &(0x7f0000000940)=""/28, 0x1c) 3m37.793258687s ago: executing program 3 (id=28): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$eJzs3c9vFGUfAPDvTH/Svu+7hbxR8SBNjIFEaWkBQ4yJcCcEf9w8VVoIUiihNVoksSR4MTFePJh48iD+F0ri1YNXD148GRJiDAcxRNbMdqdMt7ulv3a37H4+ydDnmWHneabZb7+zzz4zE0DXGs3+SSP2R8TVJKJU2NYb1Y2jy//v/p83zmVLEuXy238kceOTZKm4r6T6c7j64n9KkfycRuzrWdvu/OL1S1OzszPXqvXxhctXx+cXrx++eHnqwsyFmSuTr06eOH7s+ImJI9s6vrRQPn3r/Q9Ln51599uvHyYT3/16JomT8ajat+y4al87sK2Ws9/ZaJSXPSiuz36vJ7a5793ir1L+PnksqV3BrnW++n7si4hnoxQ9hXd9KT59s62dA5qqnESeo4Cuk2wp/gd3viNAi+XnAfln+3qfg9dKm3xWArTCvVPLAwDLsd8XEXn89y6PDcZgZWxg6H6yapwniYjtjcwty9r46cczt7IlGozDAc2xdDMf76vN/0klNkdisFIbup+uiv+0sGTr39pi+6M1dfEPrbN0MyKeq+b//thU/I8W4v+9LbYv/gEAAAAAAGDn3DkVEa/Um/+Xrsz/6a8z/2c4Ik7uQPtP/v4vvVstJDvQHFBw71TE63Xn/67M8R3pqdb+W5kP0Jecvzg7cyQi/hcRh6JvIKtP1Oy3OEP48Of7vmrUfnH+X7Zk7edzAat7uttbcyHu9NTC1HaPG4i4dzPi+cr83wPVNavn/2T5P6mT/7P4vrrBNva9dPtso21Pjn+gWcrfRBysm/8fn24n69+fY7xyPjCenxWs9cLHX3zfqH3xD+2T5f+h9eN/ICner2d+c/vvj4iji73lRtu3ev7fn7zTk+8/89HUwsK1iYj+5PTa9ZOb6zN0qjwe8njJ4v/Qi+uP/62c/xficE9ELG2wzWceDf/WaJv8D+2Txf/0+vl/ZHX+33xh8vbID43aP7uh/H+sktMPVdcY/4Oitffj2GiAtqW7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCUSyPiP5GkYyvlNB0bixiOiP/HUDo7N7/w8vm5D65MZ9sqz/9P8yf9lpbrSf78/5FCfbKmfjQi9kbElz17KvWxc3Oz0+0+eAAAAAAAAAAAAAAAAAAAANglhivX/JcHaq//z/ze0+7eAU3XW/0p3qH79G75leWBHe0I0HJbj3/gabfx+O9raj+A1msc/w8elita2h2ghZz/Q/faYvz7ugA6gPwP3WqDY3qDze4H0A7yPwAAAAAAdJS9B+78kkTE0mt7Kkumv7rNZH/obGm7OwC0jTm80L1659rdA6BdfMYHkpXS33Uv9m88+z9pTocAAAAAAAAAAAAAgDUO7nf9P3Sr9a//N7cfOtk61//XC363C4AO0vjRH3I/dDqf8aGrlUsbyPau/wcAAAAAAAAAAACAXWDw+qWp2dmZa/OLT1/hjd3Rjc0VlqZ2RTd2tPCoOXvui4jdcYCtLuS34GhjN9r8dwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjxbwAAAP//1RUojg==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3m36.735548724s ago: executing program 3 (id=40): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/199, 0xffffff92) 3m30.626296262s ago: executing program 3 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m30.24940131s ago: executing program 32 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m5.163552316s ago: executing program 0 (id=803): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 2m4.854378725s ago: executing program 0 (id=807): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 2m4.606918745s ago: executing program 0 (id=813): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m0.4596677s ago: executing program 0 (id=839): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010480, &(0x7f0000000080), 0x1, 0x775, &(0x7f0000001cc0)="$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") syz_clone3(&(0x7f0000000580)={0x208188400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1m59.838285268s ago: executing program 0 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="14000380100043800c000180"], 0x34}}, 0x0) 1m58.384167762s ago: executing program 0 (id=857): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) listen(r0, 0xd5c3) accept4(r0, 0x0, 0x0, 0x80800) 1m58.177104731s ago: executing program 33 (id=857): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) listen(r0, 0xd5c3) accept4(r0, 0x0, 0x0, 0x80800) 18.281291835s ago: executing program 4 (id=1353): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001f80)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88"], 0x1, 0xc5a, &(0x7f0000001040)="$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") getpid() getcwd(&(0x7f0000000700)=""/224, 0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'streebog512\x00'}}, 0x0, 0x0) keyctl$clear(0x7, r3) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x2000434) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "e2080a72d232032f43c4bbcea3654ebceb550ee7954ce3ca21270ea498fbf26379831290e229919a750360bf6c9a8ce75b3b51ee247a10ce2035a50276d5abcc56f92a492d1f1d284dbe81c6ac7195726e54d6ef1d3cde5f9da82bfcee7abe66080ccc42ce0ae6136513ddef033dbe985226938068d797f1d8"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x3a, 0x1, 0x0, &(0x7f0000000080)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40000, 0x0) getdents64(r6, &(0x7f0000000940)=""/28, 0x1c) 18.034774704s ago: executing program 1 (id=1357): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 17.03962931s ago: executing program 1 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x12, 0x4, 0x0, 0xf0ff1f00000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) 13.863576449s ago: executing program 1 (id=1363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 12.494403024s ago: executing program 1 (id=1365): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x28a, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x8000b4) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x100}, {0xffffffffffffffff, 0x2031}], 0x2, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 11.22012275s ago: executing program 1 (id=1367): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c8, &(0x7f0000000640)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xca, 0x101, 0x643, 0xfffc, 0xf801}}}}, 0xe) mount(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0xa52033, 0x0) 10.073072665s ago: executing program 5 (id=1373): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000400, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) 9.974838335s ago: executing program 2 (id=1374): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240), 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 8.159576309s ago: executing program 5 (id=1376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8.157906008s ago: executing program 2 (id=1378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)="e2bc22"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0xfc, 0x1000000000000, 0x0}) 5.893091531s ago: executing program 5 (id=1380): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) shutdown(r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) 5.80467146s ago: executing program 2 (id=1381): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) 4.931575607s ago: executing program 5 (id=1382): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08010, &(0x7f0000000000), 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x184) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000200)={0x101, 0x8, 0x4000000000000000}) 4.803015867s ago: executing program 2 (id=1383): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 4.756496417s ago: executing program 2 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fedbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030600030000080026006c09000008009f00000000001c00700005"], 0x54}}, 0x0) 3.741085943s ago: executing program 6 (id=1386): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000380)=[0x2], &(0x7f0000000280)=[r2], &(0x7f00000002c0), 0x0, 0x200000000000}) 3.608585632s ago: executing program 6 (id=1387): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x121200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) 3.527548352s ago: executing program 4 (id=1388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffd54, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 3.473599922s ago: executing program 6 (id=1389): memfd_create(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008113b0ffbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103600000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.330985441s ago: executing program 4 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x35917}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 1.414991374s ago: executing program 2 (id=1391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.414539234s ago: executing program 5 (id=1393): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) 1.303210004s ago: executing program 6 (id=1394): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty=0x2000000}}, 0xfffffffd, 0x0, 0x2, 0x84}, &(0x7f0000000240)=0x9c) 1.227556714s ago: executing program 6 (id=1395): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) unshare(0x46060480) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x59, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x23, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast1]}, @srh], "be6726"}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES32], 0x80}}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0xffffffff, 0x4) 1.226733394s ago: executing program 4 (id=1396): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001}) 1.070416853s ago: executing program 4 (id=1397): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240), 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 1.068323333s ago: executing program 1 (id=1398): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty=0x2000000}}, 0xfffffffd, 0x0, 0x2, 0x84}, &(0x7f0000000240)=0x9c) 875.252263ms ago: executing program 5 (id=1399): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001f80)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88"], 0x1, 0xc5a, &(0x7f0000001040)="$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") getpid() getcwd(&(0x7f0000000700)=""/224, 0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'streebog512\x00'}}, 0x0, 0x0) keyctl$clear(0x7, r3) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x2000434) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "e2080a72d232032f43c4bbcea3654ebceb550ee7954ce3ca21270ea498fbf26379831290e229919a750360bf6c9a8ce75b3b51ee247a10ce2035a50276d5abcc56f92a492d1f1d284dbe81c6ac7195726e54d6ef1d3cde5f9da82bfcee7abe66080ccc42ce0ae6136513ddef033dbe985226938068d797f1d8"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x3a, 0x1, 0x0, &(0x7f0000000080)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40000, 0x0) getdents64(r6, &(0x7f0000000940)=""/28, 0x1c) 56.05064ms ago: executing program 6 (id=1400): r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=1401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/13, 0xd, 0x2, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0x200000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=1403): syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x4040048) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x22, 0x2, 0x3) kernel console output (not intermixed with test programs): y exists on: batadv_slave_0 [ 48.639600][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.639635][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.639650][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.642150][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.654178][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.656956][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.682739][ T4024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.685050][ T4024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.696665][ T4104] loop1: detected capacity change from 0 to 512 [ 48.698875][ T4024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702190][ T4024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.707342][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.710147][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.718480][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.722349][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.724907][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.727506][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.732960][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.739115][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.743612][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.746406][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.749337][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.758592][ T4034] device veth0_macvtap entered promiscuous mode [ 48.764545][ T4034] device veth1_macvtap entered promiscuous mode [ 48.787586][ T4023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.789884][ T4023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.793235][ T4023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.795595][ T4023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.800624][ T4033] device veth0_macvtap entered promiscuous mode [ 48.819964][ T4104] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.822109][ T4104] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 48.825671][ T4104] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.831760][ T4104] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.6: attempt to clear invalid blocks 2 len 1 [ 48.846663][ T4104] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.6: invalid indirect mapped block 1819239214 (level 0) [ 48.853088][ T4033] device veth1_macvtap entered promiscuous mode [ 48.858060][ T4104] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.6: invalid indirect mapped block 1819239214 (level 1) [ 48.863097][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.866226][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.868832][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.872114][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.874750][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.877960][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.882694][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.884219][ T4104] EXT4-fs (loop1): 1 truncate cleaned up [ 48.890474][ T4104] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,jqfmt=vfsv1,resgid=0x0000000000000000,delalloc,usrjquota=..,errors=continue. Quota mode: writeback. [ 48.895701][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.898633][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.901866][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.904576][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.907229][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.910333][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.914255][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.917125][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.921694][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.926550][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.929305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.932712][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.938071][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.942687][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.945657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.948499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.951548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.964843][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.967547][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.970098][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.980935][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.981715][ T4104] udc-core: couldn't find an available UDC or it's busy [ 48.983644][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.985472][ T4104] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.988304][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.990206][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.018604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.022102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.026078][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.028945][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.032845][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.035698][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.038313][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.041245][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.043812][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.046570][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.050422][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.069889][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.072380][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.072420][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.077938][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.081771][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.087110][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.089438][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.092768][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.095102][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109547][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.112735][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.114938][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.117227][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.152871][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.159557][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.185868][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.223356][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.227684][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.251192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.299156][ T566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.304943][ T566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.315350][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.322186][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.324453][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.328571][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.614800][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.617456][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.669569][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.129505][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.131798][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.183552][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.236289][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.238540][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.270785][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.346922][ T4117] binder: 4116:4117 tried to acquire reference to desc 0, got 1 instead [ 50.351213][ T3604] Bluetooth: hci2: command 0x040f tx timeout [ 50.353133][ T3604] Bluetooth: hci1: command 0x040f tx timeout [ 50.354805][ T3604] Bluetooth: hci0: command 0x040f tx timeout [ 50.356494][ T3604] Bluetooth: hci3: command 0x040f tx timeout [ 50.361265][ T3604] Bluetooth: hci4: command 0x040f tx timeout [ 50.368446][ T4117] binder: 4116:4117 got transaction with invalid fd, -1 [ 50.370590][ T4117] binder: 4116:4117 transaction failed 29201/-9, size 80-24 line 3262 [ 50.392078][ T4124] udc-core: couldn't find an available UDC or it's busy [ 50.393942][ T4124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.397257][ T4107] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.397521][ T4121] loop0: detected capacity change from 0 to 512 [ 50.405725][ T4125] loop3: detected capacity change from 0 to 256 [ 50.447125][ T4127] loop2: detected capacity change from 0 to 2048 [ 50.467544][ T4121] EXT4-fs (loop0): Ignoring removed orlov option [ 50.469281][ T4121] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.477676][ T4121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.521322][ T4127] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.532920][ T4121] EXT4-fs (loop0): 1 truncate cleaned up [ 50.534568][ T4121] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,journal_ioprio=0x0000000000000007,orlov,nombcache,,errors=continue. Quota mode: none. [ 50.570182][ T4127] fs-verity: sha512 using implementation "sha512-arm64" [ 50.591479][ T4137] input: syz0 as /devices/virtual/input/input2 [ 50.761892][ T4147] loop3: detected capacity change from 0 to 512 [ 50.802460][ T4147] ======================================================= [ 50.802460][ T4147] WARNING: The mand mount option has been deprecated and [ 50.802460][ T4147] and is ignored by this kernel. Remove the mand [ 50.802460][ T4147] option from the mount to silence this warning. [ 50.802460][ T4147] ======================================================= [ 50.803580][ T4150] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18'. [ 50.871681][ T4147] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 50.874127][ T4147] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 50.916630][ T4147] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.918871][ T4147] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 50.922846][ T4147] System zones: 0-1, 15-15, 18-18, 34-34 [ 50.928635][ T4147] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.935146][ T4147] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 50.941265][ T4147] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.949526][ T4147] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 50.954978][ T4147] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.19: bg 0: block 40: padding at end of block bitmap is not set [ 50.969971][ T4147] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 50.973127][ T4147] EXT4-fs (loop3): 1 truncate cleaned up [ 50.974601][ T4147] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 50.994947][ T4161] udc-core: couldn't find an available UDC or it's busy [ 50.996752][ T4161] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.002581][ T4161] udc-core: couldn't find an available UDC or it's busy [ 51.004504][ T4161] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.105924][ T4163] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 51.331604][ T4106] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.296120][ T3604] Bluetooth: hci4: command 0x0419 tx timeout [ 53.297843][ T3604] Bluetooth: hci3: command 0x0419 tx timeout [ 53.299751][ T3604] Bluetooth: hci0: command 0x0419 tx timeout [ 53.354942][ T3604] Bluetooth: hci1: command 0x0419 tx timeout [ 53.356743][ T3604] Bluetooth: hci2: command 0x0419 tx timeout [ 53.357162][ T4179] binder: 4178:4179 ioctl 400c620e 20000040 returned -22 [ 53.465229][ T4185] loop3: detected capacity change from 0 to 1024 [ 53.470904][ T4106] usb 1-1: device descriptor read/64, error -71 [ 53.489578][ T4185] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 53.493547][ T4185] EXT4-fs (loop3): invalid journal inode [ 53.495147][ T4185] EXT4-fs (loop3): can't get journal size [ 53.504007][ T4185] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 53.538760][ T4182] loop1: detected capacity change from 0 to 256 [ 53.586891][ T4182] FAT-fs (loop1): count of clusters too big (67107838) [ 53.589318][ T4182] FAT-fs (loop1): Can't find a valid FAT filesystem [ 53.605656][ T4182] syz.1.29 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.686748][ T4182] Zero length message leads to an empty skb [ 53.750879][ T4106] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 53.792881][ T4196] udc-core: couldn't find an available UDC or it's busy [ 53.794813][ T4196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.940826][ T4106] usb 1-1: device descriptor read/64, error -71 [ 53.948234][ T4200] loop4: detected capacity change from 0 to 1024 [ 54.005264][ T4200] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.056330][ T4200] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 54.067483][ T4106] usb usb1-port1: attempt power cycle [ 54.139247][ T4209] loop0: detected capacity change from 0 to 1024 [ 54.415875][ T4033] EXT4-fs error (device loop3): __ext4_iget:4872: inode #15: block 1803188595: comm syz-executor: invalid block [ 54.425443][ T4033] EXT4-fs error (device loop3): __ext4_iget:4872: inode #15: block 1803188595: comm syz-executor: invalid block [ 54.499675][ T4209] EXT4-fs (loop0): Test dummy encryption mode enabled [ 54.503206][ T4209] EXT4-fs (loop0): inline encryption not supported [ 54.547497][ T4209] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 56.250665][ C0] sched: RT throttling activated [ 57.421212][ T21] cfg80211: failed to load regulatory.db [ 57.628213][ T4267] loop4: detected capacity change from 0 to 1024 [ 57.921477][ T4269] loop0: detected capacity change from 0 to 2048 [ 58.206890][ T4269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.416680][ T4267] EXT4-fs (loop4): Ignoring removed orlov option [ 58.418509][ T4267] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 58.473358][ T4267] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,minixdf,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 58.507643][ T4277] loop1: detected capacity change from 0 to 1024 [ 58.568172][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.65'. [ 58.651944][ T4277] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 58.653891][ T4277] hfsplus: xattr searching failed [ 58.669365][ T4277] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 58.675806][ T4277] hfsplus: xattr searching failed [ 58.698759][ T4287] loop0: detected capacity change from 0 to 164 [ 58.949617][ T4301] loop2: detected capacity change from 0 to 1024 [ 59.022557][ T4307] kernel profiling enabled (shift: 9) [ 59.731184][ T4180] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.786111][ T4323] loop4: detected capacity change from 0 to 1024 [ 59.812908][ T4323] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 59.829561][ T4323] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 59.980939][ T4180] usb 1-1: Using ep0 maxpacket: 16 [ 60.930954][ T4180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.931000][ T4180] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 60.931165][ T4180] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 61.020855][ T4180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.023279][ T4180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.025288][ T4180] usb 1-1: SerialNumber: syz [ 61.083147][ T4180] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 61.085402][ T4180] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 61.087129][ T4180] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 61.291138][ T21] usb 1-1: USB disconnect, device number 5 [ 63.349329][ T4180] Bluetooth: hci4: command 0x0409 tx timeout [ 63.405695][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 64.465149][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.473851][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.511903][ T4341] device bridge_slave_0 entered promiscuous mode [ 64.519320][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.528211][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.538679][ T4341] device bridge_slave_1 entered promiscuous mode [ 64.587978][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.610559][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.682718][ T4396] fuse: Bad value for 'fd' [ 64.712043][ T4341] team0: Port device team_slave_0 added [ 65.458489][ T4073] Bluetooth: hci4: command 0x041b tx timeout [ 65.475802][ T4341] team0: Port device team_slave_1 added [ 65.486208][ T4398] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.104' sets config #2 [ 65.568129][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.569976][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.620931][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.625701][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.628934][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.645610][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.743203][ T4341] device hsr_slave_0 entered promiscuous mode [ 65.888694][ T4341] device hsr_slave_1 entered promiscuous mode [ 65.952689][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.085161][ T4341] Cannot create hsr debugfs directory [ 66.558675][ T4416] loop0: detected capacity change from 0 to 8 [ 66.572052][ T4411] netlink: 'syz.4.110': attribute type 4 has an invalid length. [ 66.784156][ T4421] input: syz0 as /devices/virtual/input/input3 [ 66.808325][ T4422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.481150][ T4073] Bluetooth: hci4: command 0x040f tx timeout [ 67.816398][ T4341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.828245][ T4429] udc-core: couldn't find an available UDC or it's busy [ 67.830142][ T4429] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.912961][ T4341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.973517][ T430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.983237][ T4341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.032561][ T4341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.108681][ T4441] loop2: detected capacity change from 0 to 512 [ 68.123155][ T430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.171273][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.180504][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.185971][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.194851][ T430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.202997][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.208087][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.213055][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.230482][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.232541][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.246494][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.286646][ T430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.328927][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.333303][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.336009][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.337914][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.340264][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.344000][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.349259][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.355609][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.368613][ T4341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.376987][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.393889][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.396417][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.400481][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.403614][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.411167][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.435353][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.442171][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.459178][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.653574][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.657735][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.666600][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.546057][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 69.552966][ T4073] Bluetooth: hci4: command 0x0419 tx timeout [ 69.633893][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.635839][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.673361][ T4487] loop2: detected capacity change from 0 to 256 [ 69.693949][ T4487] FAT-fs (loop2): count of clusters too big (67107838) [ 69.695874][ T4487] FAT-fs (loop2): Can't find a valid FAT filesystem [ 69.815603][ T4497] input: syz0 as /devices/virtual/input/input4 [ 69.832260][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.835123][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.877909][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.891333][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.909200][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.914271][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.920100][ T4341] device veth0_vlan entered promiscuous mode [ 69.942791][ T4341] device veth1_vlan entered promiscuous mode [ 70.035791][ T4341] device veth0_macvtap entered promiscuous mode [ 70.040215][ T4504] loop1: detected capacity change from 0 to 1024 [ 70.055263][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.059122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.062569][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.065919][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.072109][ T4341] device veth1_macvtap entered promiscuous mode [ 70.082700][ T4504] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 70.085345][ T4504] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 70.102735][ T4504] EXT4-fs (loop1): journal inode is deleted [ 70.125901][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.130230][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.138537][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.142578][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.145533][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.148174][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.157182][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.160185][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.163413][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.167827][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.176505][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.179354][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.184744][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.190106][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.193111][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.225566][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.228521][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.242963][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.245667][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.260976][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.267889][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.376099][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.379459][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.384573][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.406933][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.423417][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.427007][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.430185][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.449876][ T4341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.452542][ T4341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454836][ T4341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.457158][ T4341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.504671][ T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.508548][ T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.514634][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.518360][ T4537] loop1: detected capacity change from 0 to 512 [ 71.535805][ T4538] loop2: detected capacity change from 0 to 512 [ 72.338936][ T4538] EXT4-fs (loop2): inline encryption not supported [ 72.370350][ T338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.374641][ T338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.375308][ T4537] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 72.379267][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.398233][ T4538] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,minixdf,barrier,,errors=continue. Quota mode: writeback. [ 72.402780][ T4537] EXT4-fs (loop1): invalid journal inode [ 72.404392][ T4537] EXT4-fs (loop1): can't get journal size [ 72.472384][ T4537] EXT4-fs (loop1): 1 truncate cleaned up [ 72.473945][ T4537] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 72.748324][ T4575] loop0: detected capacity change from 0 to 164 [ 72.750195][ T4576] input: syz0 as /devices/virtual/input/input5 [ 72.892939][ T4575] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 73.805258][ T4599] loop1: detected capacity change from 0 to 512 [ 73.823993][ T4599] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 73.868606][ T4599] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noblock_validity,mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 73.907933][ T430] device hsr_slave_0 left promiscuous mode [ 73.938391][ T430] device hsr_slave_1 left promiscuous mode [ 74.001287][ T430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.003506][ T430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.016620][ T430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.018566][ T430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.023495][ T430] device bridge_slave_1 left promiscuous mode [ 74.026113][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.084856][ T4622] udc-core: couldn't find an available UDC or it's busy [ 74.093151][ T4622] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.098388][ T430] device bridge_slave_0 left promiscuous mode [ 74.100206][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.252699][ T430] device veth1_macvtap left promiscuous mode [ 74.254626][ T430] device veth0_macvtap left promiscuous mode [ 74.256305][ T430] device veth1_vlan left promiscuous mode [ 74.257953][ T430] device veth0_vlan left promiscuous mode [ 74.477373][ T430] team0 (unregistering): Port device team_slave_1 removed [ 74.486353][ T430] team0 (unregistering): Port device team_slave_0 removed [ 74.497340][ T430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.539263][ T430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.790406][ T4642] loop2: detected capacity change from 0 to 512 [ 75.568901][ T430] bond0 (unregistering): Released all slaves [ 75.665551][ T4649] udc-core: couldn't find an available UDC or it's busy [ 75.667540][ T4649] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.693204][ T4642] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 75.761662][ T4657] loop0: detected capacity change from 0 to 8 [ 75.772978][ T4642] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.2.178: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 75.869372][ T4642] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #12: comm syz.2.178: directory missing '.' [ 78.113333][ T4705] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 78.324218][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 78.457649][ T4721] loop5: detected capacity change from 0 to 1024 [ 78.516822][ T4721] EXT4-fs (loop5): Ignoring removed orlov option [ 78.518737][ T4721] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 78.577896][ T4732] udc-core: couldn't find an available UDC or it's busy [ 78.583896][ T4721] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000003,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 78.588887][ T4732] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.128450][ T4751] loop2: detected capacity change from 0 to 256 [ 79.863041][ T4749] loop0: detected capacity change from 0 to 128 [ 79.889285][ T4756] udc-core: couldn't find an available UDC or it's busy [ 79.897222][ T4756] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.953141][ T4749] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.954219][ T4758] loop1: detected capacity change from 0 to 2048 [ 80.058832][ T4758] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.067092][ T4758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.143670][ T4767] input: syz0 as /devices/virtual/input/input6 [ 80.445309][ T26] audit: type=1326 audit(80.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.1.216" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff80855a68 code=0x0 [ 80.581929][ T4794] udc-core: couldn't find an available UDC or it's busy [ 80.585466][ T4794] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.651312][ T4792] loop2: detected capacity change from 0 to 2048 [ 80.706226][ T4792] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.729527][ T4792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.103763][ T4802] loop0: detected capacity change from 0 to 2048 [ 81.176182][ T4809] loop2: detected capacity change from 0 to 512 [ 81.403612][ T4809] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 81.406246][ T4809] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 81.541860][ T4820] loop5: detected capacity change from 0 to 256 [ 82.207854][ T4069] Bluetooth: hci1: command 0x2021 tx timeout [ 82.219507][ T4809] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.221991][ T4809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 82.224082][ T4809] System zones: 0-1, 15-15, 18-18, 34-34 [ 82.232423][ T4809] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.234199][ T4809] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 82.247118][ T4809] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.254115][ T4809] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 82.257711][ T4809] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.230: bg 0: block 40: padding at end of block bitmap is not set [ 82.265545][ T4809] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 82.268360][ T4809] EXT4-fs (loop2): 1 truncate cleaned up [ 82.269870][ T4809] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 83.609888][ T4847] loop1: detected capacity change from 0 to 2048 [ 83.787539][ T4847] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 83.813153][ T4847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.030935][ T4073] Bluetooth: hci4: command 0x2021 tx timeout [ 84.269838][ T4864] loop1: detected capacity change from 0 to 2048 [ 84.307646][ T4873] loop5: detected capacity change from 0 to 512 [ 84.317451][ T4872] loop2: detected capacity change from 0 to 512 [ 84.338258][ T4864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.381263][ T4872] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 84.383858][ T4872] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 84.393177][ T4873] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 84.395728][ T4873] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 84.426987][ T4872] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.429462][ T4872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 84.461420][ T4873] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 84.463617][ T4873] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 84.465857][ T4873] System zones: 0-1, 15-15, 18-18, 34-34 [ 84.467961][ T4873] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.469806][ T4873] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 84.482330][ T4873] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.486258][ T4873] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 84.500816][ T4872] System zones: 0-1, 15-15, 18-18, 34-34 [ 84.503351][ T4872] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.505230][ T4872] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 84.507817][ T4872] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.541509][ T4873] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.238: bg 0: block 40: padding at end of block bitmap is not set [ 84.554009][ T4872] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 84.556489][ T4873] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.561379][ T4873] EXT4-fs (loop5): 1 truncate cleaned up [ 84.562952][ T4873] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 84.581181][ T4872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.237: bg 0: block 40: padding at end of block bitmap is not set [ 84.590832][ T4872] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.600197][ T4872] EXT4-fs (loop2): 1 truncate cleaned up [ 84.616813][ T4872] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 84.628473][ T4892] loop1: detected capacity change from 0 to 8 [ 84.737244][ T4831] loop0: detected capacity change from 0 to 32768 [ 86.743333][ T4915] netlink: 'syz.4.247': attribute type 11 has an invalid length. [ 87.219908][ T4931] loop2: detected capacity change from 0 to 2048 [ 87.989939][ T4937] loop1: detected capacity change from 0 to 2048 [ 88.002617][ T4931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.144707][ T4945] loop5: detected capacity change from 0 to 8 [ 88.189981][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.411898][ T4348] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.417737][ T4348] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 26 with max blocks 26 with error 28 [ 88.437393][ T4348] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.437393][ T4348] [ 88.440005][ T4348] EXT4-fs (loop1): Total free blocks count 0 [ 88.460562][ T4348] EXT4-fs (loop1): Free/Dirty block details [ 88.478055][ T4348] EXT4-fs (loop1): free_blocks=2415919504 [ 88.479624][ T4348] EXT4-fs (loop1): dirty_blocks=48 [ 88.498363][ T4348] EXT4-fs (loop1): Block reservation details [ 88.499997][ T4348] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 89.748724][ T4955] loop2: detected capacity change from 0 to 32768 [ 89.757730][ T4994] loop1: detected capacity change from 0 to 8 [ 89.800432][ T4996] device syzkaller0 entered promiscuous mode [ 89.875632][ T4955] XFS (loop2): Mounting V5 Filesystem [ 89.967669][ T4955] XFS (loop2): Ending clean mount [ 89.993431][ T4955] XFS (loop2): Quotacheck needed: Please wait. [ 90.052245][ T4955] XFS (loop2): Quotacheck: Done. [ 90.139297][ T4955] udc-core: couldn't find an available UDC or it's busy [ 90.147099][ T4955] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.767794][ T4023] XFS (loop2): Unmounting Filesystem [ 91.769566][ T5036] loop0: detected capacity change from 0 to 8 [ 92.126528][ T5050] 9pnet: Insufficient options for proto=fd [ 92.756088][ T5088] loop1: detected capacity change from 0 to 8 [ 93.052320][ T5096] loop0: detected capacity change from 0 to 256 [ 93.825608][ T5110] loop1: detected capacity change from 0 to 512 [ 93.826340][ T5111] udc-core: couldn't find an available UDC or it's busy [ 93.849290][ T5111] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.097031][ T5110] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 95.223699][ T5164] udc-core: couldn't find an available UDC or it's busy [ 95.225559][ T5164] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.066659][ T5172] loop2: detected capacity change from 0 to 1024 [ 96.111829][ T5172] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.123652][ T5175] loop1: detected capacity change from 0 to 1024 [ 96.129498][ T5172] EXT4-fs (loop2): inline encryption not supported [ 96.137686][ T4073] Bluetooth: hci2: command 0x2021 tx timeout [ 96.192357][ T5172] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 97.202705][ T5196] syzkaller0: refused to change device tx_queue_len [ 97.557804][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 97.630738][ T21] Bluetooth: hci3: command 0x2021 tx timeout [ 97.747008][ T5223] loop5: detected capacity change from 0 to 256 [ 98.392728][ T5229] input: syz1 as /devices/virtual/input/input9 [ 99.771181][ T5263] loop2: detected capacity change from 0 to 2048 [ 99.811029][ T5263] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 99.860730][ T5263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.069649][ T3604] Bluetooth: hci4: command 0x2021 tx timeout [ 100.675800][ T5276] loop1: detected capacity change from 0 to 256 [ 103.066637][ T5300] loop5: detected capacity change from 0 to 512 [ 103.311250][ T4106] Bluetooth: hci0: command 0x2021 tx timeout [ 105.205852][ T5346] loop2: detected capacity change from 0 to 512 [ 105.414483][ T5359] loop0: detected capacity change from 0 to 2048 [ 105.662929][ T5360] loop5: detected capacity change from 0 to 512 [ 106.189209][ T5360] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 106.251087][ T5360] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 106.252227][ T5359] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 106.263762][ T5359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.343738][ T5360] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 106.345821][ T5360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 106.368161][ T5346] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 106.374668][ T5360] System zones: 0-1, 15-15, 18-18, 34-34 [ 106.405076][ T5360] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.406950][ T5360] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 106.409563][ T5360] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 106.417205][ T5360] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 106.441138][ T5360] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.389: bg 0: block 40: padding at end of block bitmap is not set [ 106.481995][ T5360] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 106.512233][ T5360] EXT4-fs (loop5): 1 truncate cleaned up [ 106.514064][ T5360] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 108.288248][ T5408] udc-core: couldn't find an available UDC or it's busy [ 108.290307][ T5408] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.463454][ T5416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.405'. [ 108.559548][ T5428] loop2: detected capacity change from 0 to 512 [ 108.662211][ T5428] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 108.664522][ T5428] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 108.675909][ T5428] EXT4-fs (loop2): 1 truncate cleaned up [ 108.684796][ T5428] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 109.187529][ T5462] loop2: detected capacity change from 0 to 512 [ 109.471253][ T5462] EXT4-fs (loop2): Ignoring removed nobh option [ 109.473137][ T5462] EXT4-fs (loop2): Ignoring removed nobh option [ 109.475260][ T5462] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.769956][ T5461] loop1: detected capacity change from 0 to 128 [ 109.821684][ T5462] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 109.824851][ T5462] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.414: invalid indirect mapped block 2683928664 (level 1) [ 109.830158][ T5462] EXT4-fs (loop2): 1 truncate cleaned up [ 109.831805][ T5462] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 109.897225][ T5461] FAT-fs (loop1): Directory bread(block 162) failed [ 109.899208][ T5461] FAT-fs (loop1): Directory bread(block 163) failed [ 109.912494][ T5461] FAT-fs (loop1): Directory bread(block 164) failed [ 109.914382][ T5461] FAT-fs (loop1): Directory bread(block 165) failed [ 109.916307][ T5461] FAT-fs (loop1): Directory bread(block 166) failed [ 109.918080][ T5461] FAT-fs (loop1): Directory bread(block 167) failed [ 109.919857][ T5461] FAT-fs (loop1): Directory bread(block 168) failed [ 109.941514][ T5461] FAT-fs (loop1): Directory bread(block 169) failed [ 110.024191][ T5461] FAT-fs (loop1): Directory bread(block 162) failed [ 110.026317][ T5461] FAT-fs (loop1): Directory bread(block 163) failed [ 110.267244][ T5499] loop2: detected capacity change from 0 to 8 [ 110.288055][ T5500] loop0: detected capacity change from 0 to 256 [ 111.888242][ T5574] capability: warning: `syz.0.458' uses deprecated v2 capabilities in a way that may be insecure [ 111.906139][ T5576] loop2: detected capacity change from 0 to 8 [ 112.218052][ T5598] loop0: detected capacity change from 0 to 128 [ 112.354147][ T5602] loop1: detected capacity change from 0 to 256 [ 112.931599][ T5598] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.050113][ T5607] loop5: detected capacity change from 0 to 2048 [ 113.077936][ T4074] Bluetooth: hci2: command 0x2021 tx timeout [ 113.140885][ T5607] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 113.147344][ T5609] loop1: detected capacity change from 0 to 8 [ 113.191710][ T5607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.239096][ T5624] loop0: detected capacity change from 0 to 16 [ 113.339322][ T5624] erofs: (device loop0): mounted with root inode @ nid 36. [ 113.352292][ T5624] attempt to access beyond end of device [ 113.352292][ T5624] loop0: rw=524288, want=34359738368, limit=16 [ 113.459149][ T5638] loop5: detected capacity change from 0 to 2048 [ 113.721244][ T5641] loop2: detected capacity change from 0 to 256 [ 114.502493][ T5638] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 114.542247][ T5638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.648329][ T4071] Bluetooth: hci0: command 0x2021 tx timeout [ 114.709838][ T5651] loop1: detected capacity change from 0 to 2048 [ 114.880135][ T5651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 114.940194][ T5651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.129987][ T5670] netlink: 576 bytes leftover after parsing attributes in process `syz.5.500'. [ 115.296765][ T5680] loop5: detected capacity change from 0 to 2048 [ 115.331113][ T5680] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 115.346262][ T5680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.363945][ T5683] loop2: detected capacity change from 0 to 2048 [ 115.409158][ T5683] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.425830][ T5683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.505'. [ 115.649720][ T5699] loop0: detected capacity change from 0 to 8 [ 115.688124][ T5697] loop2: detected capacity change from 0 to 2048 [ 115.731725][ T5697] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 115.749275][ T5697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.005848][ T5716] loop2: detected capacity change from 0 to 2048 [ 116.055882][ T5716] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 116.086432][ T5716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.467766][ T5743] loop0: detected capacity change from 0 to 256 [ 116.510916][ T25] Bluetooth: hci1: command 0x2021 tx timeout [ 116.534465][ T5743] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.599759][ T5743] exFAT-fs (loop0): hint_cluster is invalid (17) [ 116.633015][ T5751] loop2: detected capacity change from 0 to 512 [ 116.762218][ T5751] EXT4-fs (loop2): 1 orphan inode deleted [ 116.786647][ T5751] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.314211][ T5783] loop2: detected capacity change from 0 to 2048 [ 117.337568][ T5783] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 117.357069][ T5783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.571800][ T5791] loop2: detected capacity change from 0 to 16 [ 117.592573][ T5791] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.622271][ T5791] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 117.625227][ T5791] attempt to access beyond end of device [ 117.625227][ T5791] loop2: rw=524288, want=34359740336, limit=16 [ 117.630283][ T5795] loop5: detected capacity change from 0 to 2048 [ 117.750168][ T5795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.233101][ T5825] loop5: detected capacity change from 0 to 8 [ 119.907896][ T26] audit: type=1107 audit(119.770:3): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 120.477966][ T5846] loop5: detected capacity change from 0 to 2048 [ 120.539262][ T5854] loop2: detected capacity change from 0 to 256 [ 120.651037][ T5846] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000006,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 120.862220][ T5866] loop5: detected capacity change from 0 to 8 [ 121.291443][ T5894] input: syz1 as /devices/virtual/input/input13 [ 121.334556][ T5893] device syzkaller0 entered promiscuous mode [ 121.428571][ T5897] loop2: detected capacity change from 0 to 8 [ 121.539262][ T5904] loop0: detected capacity change from 0 to 512 [ 121.550536][ T5905] syz.4.600 uses obsolete (PF_INET,SOCK_PACKET) [ 121.650329][ T5904] EXT4-fs (loop0): 1 orphan inode deleted [ 121.653272][ T5904] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 122.007231][ T5932] udc-core: couldn't find an available UDC or it's busy [ 122.020209][ T5932] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.120447][ T5936] loop2: detected capacity change from 0 to 8 [ 122.317485][ T5940] loop0: detected capacity change from 0 to 512 [ 122.430558][ T5940] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.263186][ T5966] device wg1 entered promiscuous mode [ 123.938171][ T5971] loop2: detected capacity change from 0 to 8 [ 124.282573][ T5980] loop1: detected capacity change from 0 to 2048 [ 124.323463][ T5980] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 124.355532][ T5980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.587503][ T26] audit: type=1326 audit(124.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.1.635" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80855a68 code=0x0 [ 124.607995][ T5995] loop2: detected capacity change from 0 to 1024 [ 124.649677][ T6003] loop5: detected capacity change from 0 to 8 [ 125.777212][ T6018] loop1: detected capacity change from 0 to 2048 [ 125.805646][ T6018] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 125.841388][ T6018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.326445][ T6041] loop1: detected capacity change from 0 to 64 [ 127.829720][ T6069] loop2: detected capacity change from 0 to 8 [ 127.868898][ T6072] fuse: Bad value for 'fd' [ 127.918421][ T6075] loop1: detected capacity change from 0 to 512 [ 127.953728][ T6075] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 127.956370][ T6075] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.045592][ T6081] loop2: detected capacity change from 0 to 512 [ 128.065547][ T6075] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 128.093559][ T6081] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 128.096122][ T6081] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 128.107683][ T6075] EXT4-fs (loop1): 1 truncate cleaned up [ 128.109217][ T6075] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,jqfmt=vfsold,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 128.143173][ T4432] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 128.146425][ T4432] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:12: Failed to release dquot type 1 [ 128.189778][ T6081] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.192222][ T6081] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 128.194352][ T6081] System zones: 0-1, 15-15, 18-18, 34-34 [ 128.214361][ T6075] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 128.234220][ T6081] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.245392][ T6081] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 128.291392][ T6081] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 128.295244][ T6081] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 128.332063][ T6081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.668: bg 0: block 40: padding at end of block bitmap is not set [ 128.343696][ T6091] input: syz0 as /devices/virtual/input/input14 [ 128.350258][ T6081] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 128.389161][ T6081] EXT4-fs (loop2): 1 truncate cleaned up [ 128.391097][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 129.962697][ T6110] loop0: detected capacity change from 0 to 512 [ 130.029621][ T6114] loop2: detected capacity change from 0 to 8 [ 130.076069][ T6110] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,discard,,errors=continue. Quota mode: writeback. [ 130.161465][ T6127] loop5: detected capacity change from 0 to 512 [ 130.228570][ T6127] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 130.662858][ T6158] loop2: detected capacity change from 0 to 1024 [ 130.744449][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'. [ 130.840991][ T4346] hfsplus: b-tree write err: -5, ino 4 [ 130.882760][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.707'. [ 130.927582][ T6177] loop2: detected capacity change from 0 to 128 [ 131.017434][ T6177] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 131.072415][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.074287][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.087422][ T6192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.427929][ T6202] netlink: 112 bytes leftover after parsing attributes in process `syz.4.718'. [ 131.440950][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.313641][ T6208] netlink: 96 bytes leftover after parsing attributes in process `syz.1.720'. [ 132.410842][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 132.560912][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.563979][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.566971][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.587147][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.628627][ T7] usb 1-1: config 0 descriptor?? [ 132.901500][ T6228] device wg1 entered promiscuous mode [ 133.500641][ T6215] loop1: detected capacity change from 0 to 32768 [ 133.741960][ T6236] loop5: detected capacity change from 0 to 512 [ 134.154030][ T6236] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 134.157251][ T6236] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 134.164564][ T7] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 134.197763][ T6236] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 134.199971][ T6236] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 134.203095][ T6236] System zones: 0-1, 15-15, 18-18, 34-34 [ 134.207428][ T6236] EXT4-fs (loop5): orphan cleanup on readonly fs [ 134.209329][ T6236] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 134.219695][ T6215] XFS (loop1): Mounting V5 Filesystem [ 134.229044][ T6236] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.235858][ T6236] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 134.238578][ T6236] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.732: bg 0: block 40: padding at end of block bitmap is not set [ 134.243618][ T6236] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 134.246401][ T6236] EXT4-fs (loop5): 1 truncate cleaned up [ 134.247891][ T6236] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 134.382470][ T6215] XFS (loop1): Ending clean mount [ 134.386615][ T6215] XFS (loop1): Quotacheck needed: Please wait. [ 134.407447][ T13] usb 1-1: USB disconnect, device number 6 [ 134.416294][ T6215] XFS (loop1): Quotacheck: Done. [ 134.449507][ T6215] udc-core: couldn't find an available UDC or it's busy [ 134.451590][ T6215] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.470451][ T6252] loop2: detected capacity change from 0 to 1024 [ 134.975099][ T6252] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.977929][ T6252] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 134.980461][ T6252] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 135.004861][ T6252] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 135.307119][ T4022] XFS (loop1): Unmounting Filesystem [ 135.542400][ T6278] loop2: detected capacity change from 0 to 512 [ 135.573499][ T6278] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.576032][ T6278] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.670976][ T6278] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 135.673132][ T6278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 135.675294][ T6278] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.677503][ T6278] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.679258][ T6278] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 135.721386][ T6278] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.733213][ T6278] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 135.746637][ T6278] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.747: bg 0: block 40: padding at end of block bitmap is not set [ 135.769357][ T6278] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 135.778544][ T6278] EXT4-fs (loop2): 1 truncate cleaned up [ 135.780065][ T6278] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 138.802657][ T6321] loop0: detected capacity change from 0 to 256 [ 138.927671][ T6321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.939581][ T6321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 138.960954][ T6321] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 138.963036][ T6321] UDF-fs: Scanning with blocksize 512 failed [ 138.995238][ T6321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.999843][ T6321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.526277][ T6373] loop5: detected capacity change from 0 to 1764 [ 141.661655][ T6384] binder: 6382:6384 tried to acquire reference to desc 0, got 1 instead [ 141.664982][ T6384] binder: 6382:6384 got transaction with invalid parent offset or type [ 141.667310][ T6384] binder: 6382:6384 transaction failed 29201/-22, size 112-24 line 3381 [ 141.670829][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.615488][ T6389] loop0: detected capacity change from 0 to 512 [ 142.746805][ T6358] loop2: detected capacity change from 0 to 32768 [ 142.762928][ T6389] EXT4-fs (loop0): 1 orphan inode deleted [ 142.764748][ T6389] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 143.595334][ T6358] XFS (loop2): Mounting V5 Filesystem [ 143.857916][ T6358] XFS (loop2): Ending clean mount [ 143.864140][ T6358] XFS (loop2): Quotacheck needed: Please wait. [ 143.966433][ T6358] XFS (loop2): Quotacheck: Done. [ 144.098089][ T4023] XFS (loop2): Unmounting Filesystem [ 145.175058][ T26] audit: type=1326 audit(145.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.5.801" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1885a68 code=0x0 [ 146.033456][ T6442] loop0: detected capacity change from 0 to 512 [ 146.159145][ T6442] EXT4-fs (loop0): 1 orphan inode deleted [ 146.173258][ T6442] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 146.186706][ T6447] loop2: detected capacity change from 0 to 8 [ 146.428167][ T6459] device bridge2 entered promiscuous mode [ 149.019914][ T6481] loop5: detected capacity change from 0 to 8 [ 149.073665][ T6484] loop1: detected capacity change from 0 to 512 [ 149.210523][ T6484] EXT4-fs (loop1): 1 orphan inode deleted [ 149.214719][ T6484] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 149.870597][ T6518] loop2: detected capacity change from 0 to 8 [ 150.099008][ T6521] loop1: detected capacity change from 0 to 2048 [ 150.170054][ T6521] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.220345][ T6521] udc-core: couldn't find an available UDC or it's busy [ 150.235747][ T6521] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.517009][ T6531] loop2: detected capacity change from 0 to 1024 [ 150.727300][ T6533] loop2: detected capacity change from 0 to 1024 [ 150.756389][ T6533] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 150.758455][ T6533] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.803369][ T6533] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,max_dir_size_kb=0x0000000000000009,sysvgroups,data_err=ignore,dioread_nolock,stripe=0x0000000000000004,min_batch_time=0x0000000000000002,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 150.824730][ T6535] loop0: detected capacity change from 0 to 2048 [ 150.989636][ T6535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.042393][ T6546] udc-core: couldn't find an available UDC or it's busy [ 151.044315][ T6546] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.092960][ T6548] mac80211_hwsim hwsim5 wlan1: refused to change device tx_queue_len [ 151.158641][ T6553] loop5: detected capacity change from 0 to 8 [ 151.269979][ T4024] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.427067][ T6569] loop1: detected capacity change from 0 to 512 [ 152.535592][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 152.551472][ T6544] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 152.554618][ T6544] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.554618][ T6544] [ 152.556950][ T6544] EXT4-fs (loop0): Total free blocks count 0 [ 152.558371][ T6544] EXT4-fs (loop0): Free/Dirty block details [ 152.559787][ T6544] EXT4-fs (loop0): free_blocks=2415919120 [ 152.570779][ T6544] EXT4-fs (loop0): dirty_blocks=800 [ 152.572230][ T6544] EXT4-fs (loop0): Block reservation details [ 152.573785][ T6544] EXT4-fs (loop0): i_reserved_data_blocks=50 [ 152.602220][ T6577] netlink: 45 bytes leftover after parsing attributes in process `syz.4.853'. [ 154.611739][ T6598] chnl_net:caif_netlink_parms(): no params data found [ 155.413710][ T6479] Bluetooth: hci2: command 0x0409 tx timeout [ 155.609617][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.624286][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.627078][ T6598] device bridge_slave_0 entered promiscuous mode [ 155.650977][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.731555][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.750479][ T6598] device bridge_slave_1 entered promiscuous mode [ 155.891320][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.914713][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.969362][ T6598] team0: Port device team_slave_0 added [ 155.975255][ T6598] team0: Port device team_slave_1 added [ 156.085002][ T7] hid-generic 001E:0003:0005.0002: unknown main item tag 0x6 [ 156.092057][ T7] hid-generic 001E:0003:0005.0002: item fetching failed at offset 3/4 [ 156.095668][ T7] hid-generic: probe of 001E:0003:0005.0002 failed with error -22 [ 156.155321][ T6651] binder: tried to use weak ref as strong ref [ 156.159569][ T6651] binder: 6650:6651 Acquire 1 refcount change on invalid ref 0 ret -22 [ 156.163434][ T6651] binder: 6650:6651 got transaction to invalid handle, 1 [ 156.168594][ T6651] binder: 6650:6651 transaction failed 29201/-22, size 112-24 line 2917 [ 156.173529][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.217527][ T6655] loop5: detected capacity change from 0 to 16 [ 156.244650][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.258587][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.260619][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.268290][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.281795][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.285841][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.299318][ T6655] erofs: (device loop5): mounted with root inode @ nid 36. [ 156.332050][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.357494][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.433109][ T6598] device hsr_slave_0 entered promiscuous mode [ 156.551560][ T6598] device hsr_slave_1 entered promiscuous mode [ 156.620740][ T6598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.623138][ T6598] Cannot create hsr debugfs directory [ 156.655165][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.737624][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.049488][ T6676] binder: 6675:6676 tried to acquire reference to desc 0, got 1 instead [ 157.052409][ T6676] binder: 6675:6676 unknown command 0 [ 157.053814][ T6676] binder: 6675:6676 ioctl c0306201 20000480 returned -22 [ 157.143836][ T6598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.162080][ T6679] loop2: detected capacity change from 0 to 256 [ 157.192765][ T6598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.241416][ T6598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.282985][ T6598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.479961][ T4072] Bluetooth: hci2: command 0x041b tx timeout [ 157.500277][ T4072] kernel write not supported for file [eventfd] (pid: 4072 comm: kworker/1:7) [ 158.559376][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.623289][ T6598] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.634044][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.636860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.650841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.661324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.681078][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.683114][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.686455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.701327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.704631][ T6712] loop1: detected capacity change from 0 to 256 [ 158.705941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.727148][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.729111][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.738688][ T6712] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 158.747580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.757474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.876560][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.879694][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.883686][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.902937][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.912280][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.935779][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.938395][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.948391][ T6598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.968000][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.975567][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.978625][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.230873][ T4068] Bluetooth: hci1: command 0x2021 tx timeout [ 159.276090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.278404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.298294][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.551015][ T4072] Bluetooth: hci2: command 0x040f tx timeout [ 159.638759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.642482][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.681080][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.683835][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.687350][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.695866][ T6756] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 159.698610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.705299][ T6598] device veth0_vlan entered promiscuous mode [ 159.719536][ T6598] device veth1_vlan entered promiscuous mode [ 159.734273][ T6760] binder: 6758:6760 tried to acquire reference to desc 0, got 1 instead [ 159.760981][ T6760] binder_alloc: 6758: binder_alloc_buf, no vma [ 159.762946][ T6760] binder: 6758:6760 transaction failed 29189/-3, size 112-24 line 3085 [ 159.780083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.783097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.786015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.787854][ T6153] binder: undelivered TRANSACTION_ERROR: 29189 [ 159.792896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.802955][ T6598] device veth0_macvtap entered promiscuous mode [ 159.869421][ T6598] device veth1_macvtap entered promiscuous mode [ 159.910096][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.918390][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.927478][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.941643][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.950278][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.960823][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.974594][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.986055][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.005377][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.039116][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.058139][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.060269][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.063703][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.083319][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.094908][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.119680][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.137073][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.139617][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.143460][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.146131][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.148860][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.170009][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.180411][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.184004][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.200443][ T6780] fuse: Unknown parameter 'group_i00000000000000000000' [ 160.206747][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.223854][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.228822][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.233226][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.258190][ T6598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.260446][ T6598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.291570][ T6598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.294034][ T6598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.473532][ T430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.475829][ T430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.498217][ T6798] loop2: detected capacity change from 0 to 256 [ 160.595752][ T6798] FAT-fs (loop2): Directory bread(block 64) failed [ 160.597726][ T6798] FAT-fs (loop2): Directory bread(block 65) failed [ 160.602131][ T6798] FAT-fs (loop2): Directory bread(block 66) failed [ 160.605321][ T6798] FAT-fs (loop2): Directory bread(block 67) failed [ 160.609676][ T6798] FAT-fs (loop2): Directory bread(block 68) failed [ 160.617013][ T6798] FAT-fs (loop2): Directory bread(block 69) failed [ 160.621103][ T6798] FAT-fs (loop2): Directory bread(block 70) failed [ 160.624273][ T6798] FAT-fs (loop2): Directory bread(block 71) failed [ 160.626515][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.630123][ T6798] FAT-fs (loop2): Directory bread(block 72) failed [ 160.632243][ T6798] FAT-fs (loop2): Directory bread(block 73) failed [ 160.658384][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.661122][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.665150][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.781469][ T6817] loop6: detected capacity change from 0 to 8 [ 161.137366][ T6845] loop1: detected capacity change from 0 to 256 [ 161.183404][ T6845] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 161.234061][ T6848] loop2: detected capacity change from 0 to 256 [ 161.245971][ T6847] input: syz0 as /devices/virtual/input/input15 [ 161.431952][ T6855] binder: 6854:6855 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 161.434083][ T6855] binder: 6854:6855 unknown command 0 [ 161.435464][ T6855] binder: 6854:6855 ioctl c0306201 20000480 returned -22 [ 161.573501][ T6862] loop1: detected capacity change from 0 to 8 [ 161.631055][ T4068] Bluetooth: hci2: command 0x0419 tx timeout [ 162.532225][ T6879] loop6: detected capacity change from 0 to 256 [ 162.602181][ T6880] binder: 6876:6880 got transaction to invalid handle, 1 [ 162.618104][ T6879] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 162.626504][ T6880] binder: 6876:6880 transaction failed 29201/-22, size 112-24 line 2917 [ 162.643830][ T6156] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.956337][ T6899] loop6: detected capacity change from 0 to 256 [ 163.019850][ T6903] loop5: detected capacity change from 0 to 512 [ 163.029969][ T6899] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 163.035804][ T6899] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 163.039704][ T153] device hsr_slave_0 left promiscuous mode [ 163.042815][ T6899] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 163.051586][ T6899] UDF-fs: Scanning with blocksize 512 failed [ 163.059445][ T6899] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 163.067112][ T6903] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 163.069815][ T6903] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 163.078933][ T6899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.091391][ T153] device hsr_slave_1 left promiscuous mode [ 163.096823][ T6903] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 163.099145][ T6903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 163.109591][ T6903] System zones: 0-1, 15-15, 18-18, 34-34 [ 163.136071][ T6903] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.150199][ T6903] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 163.165632][ T6903] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 163.181233][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.183219][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.186640][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.188509][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.191827][ T6903] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 163.195935][ T153] device bridge_slave_1 left promiscuous mode [ 163.197664][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.200194][ T6903] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.957: bg 0: block 40: padding at end of block bitmap is not set [ 163.218363][ T6903] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 163.256013][ T6903] EXT4-fs (loop5): 1 truncate cleaned up [ 163.261818][ T6920] udc-core: couldn't find an available UDC or it's busy [ 163.268321][ T6903] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 163.274805][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.283257][ T6920] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.310766][ T4068] Bluetooth: hci1: command 0x2021 tx timeout [ 164.410946][ T153] device veth1_macvtap left promiscuous mode [ 164.412892][ T153] device veth0_macvtap left promiscuous mode [ 164.420241][ T153] device veth1_vlan left promiscuous mode [ 164.422389][ T153] device veth0_vlan left promiscuous mode [ 164.692364][ T6944] loop6: detected capacity change from 0 to 1024 [ 165.619225][ T6953] fuse: Bad value for 'user_id' [ 166.075075][ T153] team0 (unregistering): Port device team_slave_1 removed [ 166.085671][ T153] team0 (unregistering): Port device team_slave_0 removed [ 166.103102][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.177320][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.375244][ T153] bond0 (unregistering): Released all slaves [ 166.759356][ T6986] fuse: Bad value for 'user_id' [ 166.766970][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 167.066767][ T7000] loop5: detected capacity change from 0 to 512 [ 167.195990][ T7000] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 167.292888][ T7015] loop6: detected capacity change from 0 to 512 [ 167.366759][ T7015] EXT4-fs (loop6): 1 orphan inode deleted [ 167.368413][ T7015] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 168.069260][ T7032] binder: BINDER_SET_CONTEXT_MGR already set [ 168.071190][ T7032] binder: 7026:7032 ioctl 4018620d 20004a80 returned -16 [ 168.644608][ T7037] fuse: Bad value for 'user_id' [ 169.001190][ T5383] Bluetooth: hci3: command 0x0406 tx timeout [ 169.003417][ T5383] Bluetooth: hci0: command 0x0406 tx timeout [ 169.006249][ T5383] Bluetooth: hci1: command 0x0406 tx timeout [ 169.615620][ T7051] loop2: detected capacity change from 0 to 512 [ 169.705112][ T7060] loop5: detected capacity change from 0 to 512 [ 169.740249][ T7051] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 169.750302][ T7059] binder: BINDER_SET_CONTEXT_MGR already set [ 169.757531][ T7059] binder: 7057:7059 ioctl 4018620d 200001c0 returned -16 [ 169.777262][ T7059] binder: 7057:7059 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 169.789761][ T7059] binder: 7057:7059 unknown command 0 [ 169.801323][ T7059] binder: 7057:7059 ioctl c0306201 20000480 returned -22 [ 169.866842][ T7060] EXT4-fs (loop5): 1 orphan inode deleted [ 169.868557][ T7060] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 170.025931][ T7073] device vlan2 entered promiscuous mode [ 170.028459][ T7073] device team_slave_0 entered promiscuous mode [ 170.030339][ T7073] device team_slave_1 entered promiscuous mode [ 170.072443][ T7079] binder: BINDER_SET_CONTEXT_MGR already set [ 170.074193][ T7079] binder: 7078:7079 ioctl 4018620d 20000040 returned -16 [ 170.077670][ T7073] device team0 entered promiscuous mode [ 170.102157][ T7073] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 170.105522][ T7079] binder: 7078:7079 got transaction to invalid handle, 1 [ 170.107357][ T7079] binder: 7078:7079 transaction failed 29201/-22, size 112-24 line 2917 [ 170.125581][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.333431][ T7087] loop2: detected capacity change from 0 to 512 [ 171.113196][ T6156] Bluetooth: hci3: command 0x2021 tx timeout [ 171.121883][ T7087] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 171.124483][ T7087] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 171.226254][ T7087] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.228337][ T7087] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 171.230430][ T7087] System zones: 0-1, 15-15, 18-18, 34-34 [ 171.235649][ T7087] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.244535][ T7087] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 171.250385][ T7087] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 171.265181][ T7087] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 171.267819][ T7087] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1010: bg 0: block 40: padding at end of block bitmap is not set [ 171.310926][ T7087] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 171.330842][ T7087] EXT4-fs (loop2): 1 truncate cleaned up [ 171.332387][ T7087] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 171.382420][ T7103] binder: BINDER_SET_CONTEXT_MGR already set [ 171.384302][ T7103] binder: 7102:7103 ioctl 4018620d 200001c0 returned -16 [ 171.403367][ T7103] binder: 7102:7103 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 171.405622][ T7103] binder: 7102:7103 unknown command 0 [ 171.406986][ T7103] binder: 7102:7103 ioctl c0306201 20000480 returned -22 [ 171.407007][ T7105] IPv6: Can't replace route, no match found [ 172.783763][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 172.819958][ T7124] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.833146][ T7124] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 173.358597][ T7146] loop6: detected capacity change from 0 to 256 [ 173.889088][ T7131] loop1: detected capacity change from 0 to 32768 [ 174.665228][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.668732][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.718318][ T7131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1024 (7131) [ 174.748481][ T7172] netlink: 'syz.5.1034': attribute type 10 has an invalid length. [ 174.763016][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.765126][ T7172] bridge0: port 2(bridge_slave_1) entered listening state [ 174.767359][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.769299][ T7172] bridge0: port 1(bridge_slave_0) entered listening state [ 174.804039][ T7131] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 174.806719][ T7131] BTRFS info (device loop1): using free space tree [ 174.808566][ T7131] BTRFS info (device loop1): has skinny extents [ 174.906454][ T7172] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 175.873886][ T6156] Bluetooth: hci2: command 0x2021 tx timeout [ 176.169554][ T7131] BTRFS error (device loop1): open_ctree failed [ 179.803499][ T7257] loop2: detected capacity change from 0 to 512 [ 179.995463][ T7257] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 180.007495][ T7257] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 180.820848][ T7257] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 180.823015][ T7257] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 180.825143][ T7257] System zones: 0-1, 15-15, 18-18, 34-34 [ 180.827225][ T7257] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.828854][ T7257] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 180.860800][ T7257] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 180.864881][ T7257] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 180.867238][ T7257] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1055: bg 0: block 40: padding at end of block bitmap is not set [ 180.883792][ T7257] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 180.900266][ T7257] EXT4-fs (loop2): 1 truncate cleaned up [ 180.902131][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 182.089324][ T7287] loop2: detected capacity change from 0 to 128 [ 182.304834][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.307111][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.336003][ T7293] fuse: Bad value for 'fd' [ 182.339703][ T7265] process 'syz.4.1057' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 182.384306][ T7291] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 182.388740][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.390732][ T7291] bridge0: port 2(bridge_slave_1) entered listening state [ 182.392641][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.394678][ T7291] bridge0: port 1(bridge_slave_0) entered listening state [ 182.412607][ T7291] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 183.613646][ T7315] loop1: detected capacity change from 0 to 512 [ 185.004472][ T4180] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 185.007920][ T7315] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 185.010357][ T7315] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 185.015460][ T4180] Bluetooth: hci3: Injecting HCI hardware error event [ 185.018609][ T4038] Bluetooth: hci3: hardware error 0x00 [ 185.200825][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 185.715052][ T7328] binder: 7327:7328 got transaction to invalid handle, 1 [ 185.717019][ T7328] binder: 7327:7328 transaction failed 29201/-22, size 112-24 line 2917 [ 186.025471][ T4180] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.030384][ T7321] loop5: detected capacity change from 0 to 256 [ 186.074636][ T7315] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 186.076690][ T7315] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 186.082758][ T7315] System zones: 0-1, 15-15, 18-18, 34-34 [ 186.086238][ T7315] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.088550][ T7315] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 186.131616][ T7315] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 186.143251][ T7335] overlayfs: failed to clone lowerpath [ 186.161950][ T7315] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 186.174217][ T7315] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1072: bg 0: block 40: padding at end of block bitmap is not set [ 186.183516][ T7340] fuse: Invalid rootmode [ 186.257353][ T7315] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 186.259987][ T7315] EXT4-fs (loop1): 1 truncate cleaned up [ 186.273584][ T7315] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 188.942396][ T13] Bluetooth: hci4: command 0x2021 tx timeout [ 191.420374][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 191.422694][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 191.510317][ T7360] binder: 7357:7360 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 191.566197][ T7360] binder: 7357:7360 unknown command 1074553619 [ 191.567894][ T7360] binder: 7357:7360 ioctl c0306201 20000580 returned -22 [ 191.584965][ T7358] binder: 7357:7358 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 193.608680][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.610573][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.051905][ T7413] loop1: detected capacity change from 0 to 256 [ 196.033733][ T26] audit: type=1326 audit(196.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.4.1103" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad9fa68 code=0x0 [ 197.084817][ T4071] Bluetooth: hci0: command 0x2021 tx timeout [ 197.631140][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 197.633296][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 199.412362][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1114'. [ 201.214816][ T7513] loop6: detected capacity change from 0 to 128 [ 201.280413][ T7513] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.465852][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1122'. [ 201.766241][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1126'. [ 203.149951][ T7515] loop1: detected capacity change from 0 to 32768 [ 203.158597][ T7567] loop6: detected capacity change from 0 to 128 [ 203.221915][ T7567] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.292320][ T7567] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: none. [ 203.405758][ T7572] loop5: detected capacity change from 0 to 256 [ 203.975767][ T7583] loop6: detected capacity change from 0 to 512 [ 204.082316][ T7583] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 204.084888][ T7583] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 204.161417][ T7583] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 204.163566][ T7583] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 204.165715][ T7583] System zones: 0-1, 15-15, 18-18, 34-34 [ 204.167870][ T7583] EXT4-fs (loop6): orphan cleanup on readonly fs [ 204.169754][ T7583] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 204.174885][ T7594] binder: 7589:7594 Acquire 1 refcount change on invalid ref 0 ret -22 [ 204.181061][ T7583] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 204.190574][ T7596] loop1: detected capacity change from 0 to 8 [ 204.191173][ T7583] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 204.196618][ T7594] binder: 7589:7594 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 204.198579][ T7594] binder: 7589:7594 unknown command 0 [ 204.199983][ T7594] binder: 7589:7594 ioctl c0306201 20000480 returned -22 [ 204.205873][ T7583] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1135: bg 0: block 40: padding at end of block bitmap is not set [ 204.230899][ T7583] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 204.247400][ T7583] EXT4-fs (loop6): 1 truncate cleaned up [ 204.248994][ T7583] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 206.187717][ T5800] Bluetooth: hci4: command 0x2021 tx timeout [ 206.481234][ T7629] loop6: detected capacity change from 0 to 8 [ 206.591258][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.593389][ C0] bridge0: topology change detected, propagating [ 206.596910][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.599017][ C0] bridge0: topology change detected, propagating [ 207.687342][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1150'. [ 208.371965][ T7641] binder: 7639:7641 Acquire 1 refcount change on invalid ref 0 ret -22 [ 208.391436][ T7641] binder: 7639:7641 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 208.393541][ T7641] binder: 7639:7641 unknown command 0 [ 208.394958][ T7641] binder: 7639:7641 ioctl c0306201 20000480 returned -22 [ 208.574362][ T7621] loop1: detected capacity change from 0 to 32768 [ 208.594500][ T7656] loop6: detected capacity change from 0 to 512 [ 208.789975][ T7666] loop2: detected capacity change from 0 to 256 [ 209.649875][ T7656] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 209.656989][ T7656] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 209.705123][ T7656] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 209.707551][ T7656] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 209.714668][ T7656] System zones: 0-1, 15-15, 18-18, 34-34 [ 209.803400][ T7656] EXT4-fs (loop6): orphan cleanup on readonly fs [ 209.805338][ T7656] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 209.807881][ T7656] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 209.829185][ T7656] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 209.836874][ T7656] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1156: bg 0: block 40: padding at end of block bitmap is not set [ 209.970818][ T7656] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 209.986804][ T7656] EXT4-fs (loop6): 1 truncate cleaned up [ 209.988325][ T7656] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 210.007136][ T7654] loop5: detected capacity change from 0 to 40427 [ 210.211644][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 210.796004][ T7654] F2FS-fs (loop5): Unrecognized mount option "errors=continue" or missing value [ 211.720963][ T13] Bluetooth: hci1: command 0x2021 tx timeout [ 212.024184][ T7706] loop6: detected capacity change from 0 to 512 [ 212.115235][ T7706] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 212.122993][ T7706] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 212.243399][ T7706] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 212.245728][ T7706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 212.247972][ T7706] System zones: 0-1, 15-15, 18-18, 34-34 [ 212.256524][ T7706] EXT4-fs (loop6): orphan cleanup on readonly fs [ 212.258365][ T7706] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 212.753003][ T7706] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.757003][ T7706] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 212.772170][ T7719] loop5: detected capacity change from 0 to 1024 [ 212.795941][ T7706] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1162: bg 0: block 40: padding at end of block bitmap is not set [ 212.814791][ T7706] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 212.825004][ T7706] EXT4-fs (loop6): 1 truncate cleaned up [ 212.826524][ T7706] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 212.991905][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.993804][ C1] bridge0: topology change detected, propagating [ 212.995601][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.997524][ C1] bridge0: topology change detected, propagating [ 213.077288][ T7736] loop2: detected capacity change from 0 to 256 [ 213.824368][ T7741] libceph: resolve ' [ 213.824368][ T7741] -&fYǝa2i [ 213.824368][ T7741] .?&*&' (ret=-3): failed [ 214.146065][ T136] hfsplus: b-tree write err: -5, ino 4 [ 216.182772][ T7779] loop5: detected capacity change from 0 to 512 [ 216.203915][ T4180] Bluetooth: hci1: command 0x2021 tx timeout [ 216.211705][ T7779] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 216.243348][ T7779] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 216.377280][ T7779] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 216.379721][ T7779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 216.382538][ T7779] System zones: 0-1, 15-15, 18-18, 34-34 [ 216.384784][ T7779] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.452122][ T7779] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 216.455652][ T7779] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.468349][ T7779] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 216.481609][ T7779] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1185: bg 0: block 40: padding at end of block bitmap is not set [ 216.509911][ T7779] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 216.529514][ T7779] EXT4-fs (loop5): 1 truncate cleaned up [ 216.544089][ T7779] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 217.179805][ T7805] loop1: detected capacity change from 0 to 8 [ 221.398359][ T7843] loop6: detected capacity change from 0 to 512 [ 221.434988][ T7847] loop1: detected capacity change from 0 to 8 [ 221.436282][ T7843] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 221.438997][ T7843] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 221.504579][ T7843] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 221.507161][ T7843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 221.509524][ T7843] System zones: 0-1, 15-15, 18-18, 34-34 [ 221.520219][ T7843] EXT4-fs (loop6): orphan cleanup on readonly fs [ 221.539504][ T7843] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 221.568997][ T7843] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 221.598994][ T7843] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 221.608990][ T7843] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1207: bg 0: block 40: padding at end of block bitmap is not set [ 221.626924][ T7843] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 221.637711][ T7843] EXT4-fs (loop6): 1 truncate cleaned up [ 221.670042][ T7843] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 222.185641][ T7865] binder: 7864:7865 ioctl 4018620d 0 returned -22 [ 222.202999][ T7865] binder: 7864:7865 Acquire 1 refcount change on invalid ref 0 ret -22 [ 222.262592][ T7865] binder: 7864:7865 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 222.264675][ T7865] binder: 7864:7865 unknown command 0 [ 222.266155][ T7865] binder: 7864:7865 ioctl c0306201 20000480 returned -22 [ 223.456809][ T7882] loop2: detected capacity change from 0 to 8 [ 223.750026][ T26] audit: type=1326 audit(223.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.779324][ T26] audit: type=1326 audit(223.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.797692][ T26] audit: type=1326 audit(223.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=186 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.810233][ T7873] loop1: detected capacity change from 0 to 32768 [ 223.815963][ T26] audit: type=1326 audit(223.750:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.826931][ T26] audit: type=1326 audit(223.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.836128][ T26] audit: type=1326 audit(223.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.855401][ T26] audit: type=1326 audit(223.760:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.893767][ T26] audit: type=1326 audit(223.760:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.914728][ T26] audit: type=1326 audit(223.760:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffff89070a68 code=0x7ffc0000 [ 223.930641][ T7873] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1217 (7873) [ 224.281507][ T7873] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 224.284654][ T7873] BTRFS info (device loop1): force zlib compression, level 3 [ 224.289327][ T7873] BTRFS info (device loop1): force clearing of disk cache [ 224.305375][ T7873] BTRFS info (device loop1): setting nodatasum [ 224.307226][ T7873] BTRFS info (device loop1): allowing degraded mounts [ 224.318181][ T7873] BTRFS info (device loop1): enabling disk space caching [ 224.320466][ T7873] BTRFS info (device loop1): disk space caching is enabled [ 224.340821][ T7873] BTRFS info (device loop1): has skinny extents [ 224.413444][ T7913] binder: 7910:7913 ioctl 4018620d 0 returned -22 [ 224.433236][ T7913] binder: 7910:7913 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.457111][ T7913] binder: 7910:7913 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 224.459151][ T7913] binder: 7910:7913 unknown command 0 [ 224.471190][ T7913] binder: 7910:7913 ioctl c0306201 20000480 returned -22 [ 225.309797][ T7873] BTRFS info (device loop1): clearing free space tree [ 225.312552][ T7873] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.315442][ T7873] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.684919][ T7962] loop2: detected capacity change from 0 to 1024 [ 225.736975][ T7962] hfsplus: failed to load root directory [ 226.777482][ T7975] loop6: detected capacity change from 0 to 512 [ 226.815405][ T7976] loop5: detected capacity change from 0 to 256 [ 226.837547][ T7975] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 226.840407][ T7975] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 226.869229][ T7978] fuse: Unknown parameter 'user_id00000000000000000000' [ 227.368343][ T7975] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 227.452211][ T7975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 227.634451][ T7975] System zones: 0-1, 15-15, 18-18, 34-34 [ 227.637485][ T7975] EXT4-fs (loop6): orphan cleanup on readonly fs [ 227.639376][ T7975] __quota_error: 5 callbacks suppressed [ 227.639389][ T7975] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 227.654971][ T7975] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 227.658788][ T7975] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 227.687388][ T7975] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1247: bg 0: block 40: padding at end of block bitmap is not set [ 227.706742][ T7975] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 227.719102][ T7975] EXT4-fs (loop6): 1 truncate cleaned up [ 227.743113][ T7975] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 228.741730][ T8013] fuse: Bad value for 'fd' [ 228.761792][ T8015] binder: BINDER_SET_CONTEXT_MGR already set [ 228.763552][ T8015] binder: 8014:8015 ioctl 4018620d 200001c0 returned -16 [ 230.209424][ T5384] Bluetooth: hci4: command 0x2021 tx timeout [ 230.571980][ T8029] loop1: detected capacity change from 0 to 8 [ 230.723762][ T8033] binder: 8032:8033 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 230.871801][ T8035] loop2: detected capacity change from 0 to 512 [ 230.897472][ T8035] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 230.900141][ T8035] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 230.945418][ T8041] fuse: Bad value for 'fd' [ 230.990769][ T8035] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 231.000855][ T8035] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 231.003050][ T8035] System zones: 0-1, 15-15, 18-18, 34-34 [ 231.005163][ T8035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.006928][ T8035] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 231.027159][ T8035] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 231.144954][ T8035] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 232.002367][ T8035] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1269: bg 0: block 40: padding at end of block bitmap is not set [ 232.008208][ T8035] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 232.016316][ T8035] EXT4-fs (loop2): 1 truncate cleaned up [ 232.018046][ T8035] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 234.223070][ T8079] fuse: Bad value for 'fd' [ 238.405055][ T8114] binder: 8113:8114 ioctl c0306201 0 returned -14 [ 238.425501][ T8114] binder: BINDER_SET_CONTEXT_MGR already set [ 238.427098][ T8114] binder: 8113:8114 ioctl 4018620d 200001c0 returned -16 [ 239.105577][ T8114] binder: 8113:8114 Acquire 1 refcount change on invalid ref 0 ret -22 [ 239.115459][ T8114] binder: 8113:8114 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 239.117607][ T8114] binder: 8113:8114 unknown command 0 [ 239.119016][ T8114] binder: 8113:8114 ioctl c0306201 20000480 returned -22 [ 239.620930][ T8128] loop6: detected capacity change from 0 to 8 [ 239.884150][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 239.917011][ T8136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.979666][ T8143] loop5: detected capacity change from 0 to 512 [ 240.034147][ T8143] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 240.036842][ T8143] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 240.871175][ T8143] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 240.873366][ T8143] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 240.876289][ T8143] System zones: 0-1, 15-15, 18-18, 34-34 [ 240.878738][ T8143] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.880514][ T8143] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 240.911362][ T8143] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 240.915088][ T8143] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 241.082939][ T8143] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1307: bg 0: block 40: padding at end of block bitmap is not set [ 241.087150][ T8143] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 241.089933][ T8143] EXT4-fs (loop5): 1 truncate cleaned up [ 241.103136][ T8143] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 244.435695][ T8188] loop5: detected capacity change from 0 to 1024 [ 244.587533][ T8188] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,noblock_validity,noauto_da_alloc,i_version,errors=remount-ro,resgid=0x0000000000000000,grpquota,sysvgroups,. Quota mode: writeback. [ 244.905091][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1328'. [ 247.801629][ T8238] loop5: detected capacity change from 0 to 512 [ 247.956147][ T8238] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 247.958963][ T8238] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 248.041519][ T8238] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 248.044594][ T8238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 248.046872][ T8238] System zones: 0-1, 15-15, 18-18, 34-34 [ 248.052861][ T8238] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.067958][ T8238] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 248.071084][ T8238] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.074957][ T8238] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 248.106735][ T8238] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1336: bg 0: block 40: padding at end of block bitmap is not set [ 248.128152][ T8238] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 248.147137][ T8238] EXT4-fs (loop5): 1 truncate cleaned up [ 248.160872][ T8238] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 248.212501][ T8246] sctp: [Deprecated]: syz.6.1339 (pid 8246) Use of int in maxseg socket option. [ 248.212501][ T8246] Use struct sctp_assoc_value instead [ 248.500336][ T8254] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1341'. [ 251.775567][ T8147] Set syz1 is full, maxelem 65536 reached [ 252.962653][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1354'. [ 253.578456][ T8297] loop2: detected capacity change from 0 to 256 [ 253.832748][ T8300] nvme_fabrics: missing parameter 'transport=%s' [ 253.834886][ T8300] nvme_fabrics: missing parameter 'nqn=%s' [ 253.953488][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.955207][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.991013][ T8303] nvme_fabrics: missing parameter 'transport=%s' [ 253.992830][ T8303] nvme_fabrics: missing parameter 'nqn=%s' [ 261.107513][ T8357] loop5: detected capacity change from 0 to 256 [ 262.859137][ T8367] loop1: detected capacity change from 0 to 256 [ 263.150070][ T8374] binder: 8372:8374 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 263.161738][ T8373] binder: 8372:8373 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 263.179485][ T8373] binder: 8373 RLIMIT_NICE not set [ 263.219101][ T8374] binder: 8372:8374 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 263.239239][ T8374] binder: 8372:8374 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 265.217197][ T8374] binder: 8374 RLIMIT_NICE not set [ 266.406754][ T4023] cgroup: fork rejected by pids controller in /syz2 [ 267.704147][ T8403] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1388'. [ 267.707315][ T8403] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1388'. [ 271.111629][ T8434] loop5: detected capacity change from 0 to 512 [ 271.183792][ T8434] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 271.187234][ T8434] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 271.206349][ T8440] [ 271.207059][ T8440] ====================================================== [ 271.208993][ T8440] WARNING: possible circular locking dependency detected [ 271.210924][ T8440] 5.15.174-syzkaller #0 Not tainted [ 271.212362][ T8440] ------------------------------------------------------ [ 271.214347][ T8440] syz.6.1403/8440 is trying to acquire lock: [ 271.215986][ T8440] ffff0000ca7f0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 271.219116][ T8440] [ 271.219116][ T8440] but task is already holding lock: [ 271.221110][ T8440] ffff800016f36ba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 271.223772][ T8440] [ 271.223772][ T8440] which lock already depends on the new lock. [ 271.223772][ T8440] [ 271.226611][ T8440] [ 271.226611][ T8440] the existing dependency chain (in reverse order) is: [ 271.229031][ T8440] [ 271.229031][ T8440] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 271.231342][ T8440] __mutex_lock_common+0x194/0x2154 [ 271.232931][ T8440] mutex_lock_nested+0xa4/0xf8 [ 271.234352][ T8440] rfkill_register+0x44/0x7a4 [ 271.235762][ T8440] hci_register_dev+0x3e0/0x880 [ 271.237191][ T8440] vhci_create_device+0x2c4/0x568 [ 271.238699][ T8440] vhci_write+0x318/0x3b8 [ 271.240020][ T8440] vfs_write+0x884/0xb44 [ 271.241338][ T8440] ksys_write+0x15c/0x26c [ 271.242630][ T8440] __arm64_sys_write+0x7c/0x90 [ 271.244173][ T8440] invoke_syscall+0x98/0x2b8 [ 271.245560][ T8440] el0_svc_common+0x138/0x258 [ 271.246911][ T8440] do_el0_svc+0x58/0x14c [ 271.248255][ T8440] el0_svc+0x7c/0x1f0 [ 271.249458][ T8440] el0t_64_sync_handler+0x84/0xe4 [ 271.250943][ T8440] el0t_64_sync+0x1a0/0x1a4 [ 271.252311][ T8440] [ 271.252311][ T8440] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 271.254388][ T8440] __mutex_lock_common+0x194/0x2154 [ 271.255937][ T8440] mutex_lock_nested+0xa4/0xf8 [ 271.257335][ T8440] vhci_send_frame+0x8c/0x10c [ 271.258799][ T8440] hci_send_frame+0x194/0x2f0 [ 271.260248][ T8440] hci_tx_work+0x9ac/0x16cc [ 271.261657][ T8440] process_one_work+0x790/0x11b8 [ 271.263176][ T8440] worker_thread+0x910/0x1034 [ 271.264544][ T8440] kthread+0x37c/0x45c [ 271.265774][ T8440] ret_from_fork+0x10/0x20 [ 271.267178][ T8440] [ 271.267178][ T8440] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 271.269735][ T8440] __flush_work+0xf8/0x1c0 [ 271.271083][ T8440] flush_work+0x24/0x38 [ 271.272441][ T8440] hci_dev_do_close+0x16c/0x1060 [ 271.273912][ T8440] hci_unregister_dev+0x248/0x4d4 [ 271.275549][ T8440] vhci_release+0x74/0xc4 [ 271.276766][ T8440] __fput+0x1c4/0x800 [ 271.277945][ T8440] ____fput+0x20/0x30 [ 271.279190][ T8440] task_work_run+0x130/0x1e4 [ 271.280626][ T8440] do_exit+0x670/0x20bc [ 271.281933][ T8440] do_group_exit+0x110/0x268 [ 271.283287][ T8440] __wake_up_parent+0x0/0x60 [ 271.284589][ T8440] invoke_syscall+0x98/0x2b8 [ 271.285948][ T8440] el0_svc_common+0x138/0x258 [ 271.287340][ T8440] do_el0_svc+0x58/0x14c [ 271.288607][ T8440] el0_svc+0x7c/0x1f0 [ 271.289833][ T8440] el0t_64_sync_handler+0x84/0xe4 [ 271.291422][ T8440] el0t_64_sync+0x1a0/0x1a4 [ 271.292781][ T8440] [ 271.292781][ T8440] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 271.294930][ T8440] __mutex_lock_common+0x194/0x2154 [ 271.296519][ T8440] mutex_lock_nested+0xa4/0xf8 [ 271.297918][ T8440] bg_scan_update+0x9c/0x470 [ 271.299329][ T8440] process_one_work+0x790/0x11b8 [ 271.300855][ T8440] worker_thread+0x910/0x1034 [ 271.302282][ T8440] kthread+0x37c/0x45c [ 271.303520][ T8440] ret_from_fork+0x10/0x20 [ 271.304818][ T8440] [ 271.304818][ T8440] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 271.307572][ T8440] __lock_acquire+0x32d4/0x7638 [ 271.309097][ T8440] lock_acquire+0x240/0x77c [ 271.310506][ T8440] __flush_work+0xf8/0x1c0 [ 271.311863][ T8440] __cancel_work_timer+0x3ec/0x548 [ 271.313421][ T8440] cancel_work_sync+0x24/0x38 [ 271.314790][ T8440] hci_request_cancel_all+0xcc/0x2d0 [ 271.316448][ T8440] hci_dev_do_close+0x54/0x1060 [ 271.317967][ T8440] hci_rfkill_set_block+0xdc/0x1d0 [ 271.319426][ T8440] rfkill_set_block+0x18c/0x37c [ 271.320890][ T8440] rfkill_fop_write+0x594/0x750 [ 271.322425][ T8440] vfs_write+0x280/0xb44 [ 271.323733][ T8440] ksys_write+0x15c/0x26c [ 271.325106][ T8440] __arm64_sys_write+0x7c/0x90 [ 271.326485][ T8440] invoke_syscall+0x98/0x2b8 [ 271.327923][ T8440] el0_svc_common+0x138/0x258 [ 271.329307][ T8440] do_el0_svc+0x58/0x14c [ 271.330584][ T8440] el0_svc+0x7c/0x1f0 [ 271.331795][ T8440] el0t_64_sync_handler+0x84/0xe4 [ 271.333230][ T8440] el0t_64_sync+0x1a0/0x1a4 [ 271.334603][ T8440] [ 271.334603][ T8440] other info that might help us debug this: [ 271.334603][ T8440] [ 271.337336][ T8440] Chain exists of: [ 271.337336][ T8440] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 271.337336][ T8440] [ 271.341694][ T8440] Possible unsafe locking scenario: [ 271.341694][ T8440] [ 271.343670][ T8440] CPU0 CPU1 [ 271.345080][ T8440] ---- ---- [ 271.346547][ T8440] lock(rfkill_global_mutex); [ 271.347830][ T8440] lock(&data->open_mutex); [ 271.349812][ T8440] lock(rfkill_global_mutex); [ 271.351808][ T8440] lock((work_completion)(&hdev->bg_scan_update)); [ 271.353651][ T8440] [ 271.353651][ T8440] *** DEADLOCK *** [ 271.353651][ T8440] [ 271.355868][ T8440] 1 lock held by syz.6.1403/8440: [ 271.357218][ T8440] #0: ffff800016f36ba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 271.360026][ T8440] [ 271.360026][ T8440] stack backtrace: [ 271.361639][ T8440] CPU: 1 PID: 8440 Comm: syz.6.1403 Not tainted 5.15.174-syzkaller #0 [ 271.363839][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 271.366608][ T8440] Call trace: [ 271.367556][ T8440] dump_backtrace+0x0/0x530 [ 271.368787][ T8440] show_stack+0x2c/0x3c [ 271.369857][ T8440] dump_stack_lvl+0x108/0x170 [ 271.371075][ T8440] dump_stack+0x1c/0x58 [ 271.372187][ T8440] print_circular_bug+0x150/0x1b8 [ 271.373537][ T8440] check_noncircular+0x2cc/0x378 [ 271.374818][ T8440] __lock_acquire+0x32d4/0x7638 [ 271.376074][ T8440] lock_acquire+0x240/0x77c [ 271.377275][ T8440] __flush_work+0xf8/0x1c0 [ 271.378492][ T8440] __cancel_work_timer+0x3ec/0x548 [ 271.379834][ T8440] cancel_work_sync+0x24/0x38 [ 271.381061][ T8440] hci_request_cancel_all+0xcc/0x2d0 [ 271.382468][ T8440] hci_dev_do_close+0x54/0x1060 [ 271.383825][ T8440] hci_rfkill_set_block+0xdc/0x1d0 [ 271.385223][ T8440] rfkill_set_block+0x18c/0x37c [ 271.386482][ T8440] rfkill_fop_write+0x594/0x750 [ 271.387724][ T8440] vfs_write+0x280/0xb44 [ 271.388905][ T8440] ksys_write+0x15c/0x26c [ 271.390062][ T8440] __arm64_sys_write+0x7c/0x90 [ 271.391361][ T8440] invoke_syscall+0x98/0x2b8 [ 271.392614][ T8440] el0_svc_common+0x138/0x258 [ 271.393867][ T8440] do_el0_svc+0x58/0x14c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.395056][ T8440] el0_svc+0x7c/0x1f0 [ 271.396115][ T8440] el0t_64_sync_handler+0x84/0xe4 [ 271.397317][ T8434] EXT4-fs: failed to create workqueue [ 271.397476][ T8440] el0t_64_sync+0x1a0/0x1a4 [ 271.398898][ T8434] EXT4-fs (loop5): mount failed [ 271.737589][ T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.788021][ T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.834665][ T153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.895170][ T153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.685871][ T153] device hsr_slave_0 left promiscuous mode [ 273.730924][ T153] device hsr_slave_1 left promiscuous mode [ 273.820920][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.823242][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.825743][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.827928][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.830284][ T153] device bridge_slave_1 left promiscuous mode [ 273.832213][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.891471][ T153] device bridge_slave_0 left promiscuous mode [ 273.893327][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.030893][ T153] device veth1_macvtap left promiscuous mode [ 274.032633][ T153] device veth0_macvtap left promiscuous mode [ 274.034234][ T153] device veth1_vlan left promiscuous mode [ 274.035754][ T153] device veth0_vlan left promiscuous mode [ 274.162517][ T153] team0 (unregistering): Port device team_slave_1 removed [ 274.169101][ T153] team0 (unregistering): Port device team_slave_0 removed [ 274.175759][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.226651][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.376773][ T153] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 274.411581][ T153] bond0 (unregistering): Released all slaves [ 276.935194][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.975625][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.015587][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.095775][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.239273][ T153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.294716][ T153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.354755][ T153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.407528][ T153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.592916][ T153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.634773][ T153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.675044][ T153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.714648][ T153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0