last executing test programs: 54.98866692s ago: executing program 3 (id=461): open$dir(&(0x7f0000000040)='./file0\x00', 0x80000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x2) r1 = socket(0x1c, 0x1, 0x0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x4, 0x0) mkdirat(r2, &(0x7f0000000100)='./file1\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') renameat(r3, &(0x7f0000000200)='./file1\x00', r3, &(0x7f0000000140)='./file0/file0\x00') renameat(r2, &(0x7f00000000c0)='./file0/file0\x00', r2, 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0xffffffffffffffff) 54.9877295s ago: executing program 3 (id=464): socket(0x1c, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@rights, @rights], 0x18}, 0x114) 54.922987194s ago: executing program 3 (id=467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b40)=ANY=[@ANYBLOB="f800000018000100000000000000000000000000000000000000000000000000e000000200"/46, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) 53.765474323s ago: executing program 2 (id=479): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 53.746314004s ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) 53.675635627s ago: executing program 3 (id=482): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) 53.61343688s ago: executing program 3 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 53.494441835s ago: executing program 2 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000050000000000ed530000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) 53.38302833s ago: executing program 2 (id=487): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 52.422350602s ago: executing program 2 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000340), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 52.386434173s ago: executing program 2 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 52.381921303s ago: executing program 1 (id=493): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) 52.307992667s ago: executing program 2 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486"], 0x66) 52.294611567s ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd02}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 52.274367118s ago: executing program 1 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 52.187969642s ago: executing program 1 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 52.187612022s ago: executing program 1 (id=498): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x14000) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 52.143174974s ago: executing program 1 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 38.458284696s ago: executing program 32 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 36.452528933s ago: executing program 33 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 36.434133834s ago: executing program 34 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486"], 0x66) 10.271683235s ago: executing program 6 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, 0x82}}, {@longad}, {@dmode={'dmode', 0x3d, 0x7fff}}, {@volume={'volume', 0x3d, 0x2}}, {@shortad}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@gid_forget}, {@fileset={'fileset', 0x3d, 0x2}}, {@adinicb}, {@gid_ignore}, {@gid_forget}, {@uid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'utf8'}}], [{@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_hash}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000002000000000000000000000000000000ddba00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"], 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 9.535958357s ago: executing program 6 (id=567): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, 0x0, 0x4000) 8.487997902s ago: executing program 6 (id=571): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c6", 0x9c, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) 8.048262331s ago: executing program 6 (id=574): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 8.048006721s ago: executing program 6 (id=575): socket$can_raw(0x1d, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) 6.079985426s ago: executing program 6 (id=582): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r4) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) 5.355952938s ago: executing program 5 (id=586): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x8000b}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0xc00001, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x10002, @loopback, 0xc}, 0x1c) listen(r2, 0x204) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) 5.355619168s ago: executing program 5 (id=587): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756d61736b3d3000000000011167a16d303030303030303030303132362c636f6465706167653d69736f3833342c6769643d00000000", @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d63703835322c706172743d3078303030303030303030303030303830302c63726561746f723d5863953a2c00"], 0x11, 0x31c, &(0x7f0000000940)="$eJzs3U1P1EAcBvBn2u6yKwQrYEg8oiSeCOBB40ViiBe/gAdDRFgTQsVEMVES4+rZGG8mJh69eTb6FfRi/AJ64mA86YV4sGZmOn1Zpt2ywBayzy9h2bbz8p9OX2aWLAURDayri9/fXdiWP6IGwAVwGXAANAAPwGlMNh5ubK5tBq3VooJclUP+COicYlealY2WLavMp3JEfLnkYSS9jg5HGIbhj66pfvclFqqO0Of+Lg4wFJ2danuj75EdjrZu12BJ9bDYwQ4eYbTKcIiIqHrR/d+J7hIj0fjdcYDpaBx+3O//mfHNTnVxHAnx/d/Ry6GQ++ek2pTM99QUTva+Y2aJtrL0MTGSXRkmu7sOfWRlOkB0m1WqWJzmnbWgNdNWBTzHlUgq2YR6XYVpiJIXbV3/mrLMTQsUtb3YsGpDTbZhPif+8T3X+OknXturW/pSIibxWXwVS8LHG6zG4z8vFHLnqP3jd/SUjn82v0TVSl+nyrQymb+fUpWcMT3w8X3Symbefm3AlbHYyFJE5/jdN3G+qufnwhiyHyvo1s3lt07lGrfmmo+X/1pzTXTmanq1oDWzci8o/CjlwFhndOKluCGm8AsfsJga/zsy9TTyz8zMlV+olNGRUdgeT6XM6ccMdQLftZyZTonMA+2ataOLvcBtXMLog8db68tB0Lpf/RtzqhyRePSBGB2Oco38nUqDhnxTA3Bglf4Lw9C6yUM/mlxTTb34Nmny1vqyaOvF/VWBdlyg2bSQnxjAAoBojbki9FL70zjXUFJgqex/ZG+rNfYD0kTVhwPSVJXZ5GKo1JnS7KHS60/Wl4OerkR0zCSdjsmbVQdDVZDDK6Hnf6n5yqy66sgXv2A2EnYrPFXiXM4MaEy9nig3g4uLzZ3BDZs3XeZcZ88D5zpqdGBqfNZZrB/FiaP4V8m9/ylDLOIbbvHzfyIiIiIiIiIiIiIiIiIiIiIiIiKi42av30bo5esE2Rq3B/AfbxARERERERERERERERERERERERERERER7U/q+b+Aq54YU6/8+b9uief/mudSEFHP/gcAAP//NBBgTQ==") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) 5.29884528s ago: executing program 4 (id=588): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10) 4.276153565s ago: executing program 5 (id=591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) 4.234714337s ago: executing program 4 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=r3, @ANYRES64=r0, @ANYRESDEC=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, &(0x7f0000000080)=r6}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f00000002c0)=ANY=[], 0x138) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx2Dd', 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000480), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x7, 0xffffffff, 0x52424752, 0x8, 0x81, 0x20000006, 0x7, 0xa, 0x0, 0x7, 0x0, 0x7}}) 3.668720081s ago: executing program 0 (id=594): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3.047090288s ago: executing program 4 (id=595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') pread64(r3, &(0x7f0000032400)=""/102366, 0x18fde, 0xc2a) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5], 0x20) 2.98113845s ago: executing program 5 (id=596): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.501479012s ago: executing program 0 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.416497585s ago: executing program 0 (id=599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 2.025477273s ago: executing program 5 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f0000000340)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 2.023966942s ago: executing program 4 (id=601): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) 1.943488806s ago: executing program 4 (id=602): socket$inet6(0xa, 0x8000e, 0x5) eventfd2(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffff51, r1}, 0x38) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x2b, 0x0, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000300), 0x0, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) 1.780010183s ago: executing program 4 (id=603): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_io_uring_setup(0x288f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 1.562865222s ago: executing program 0 (id=605): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x24060400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 1.040008225s ago: executing program 0 (id=606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) 702.916099ms ago: executing program 5 (id=607): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 602.940004ms ago: executing program 7 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 523.979707ms ago: executing program 7 (id=610): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 523.648867ms ago: executing program 7 (id=611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x880) 233.01513ms ago: executing program 7 (id=612): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) 217.83368ms ago: executing program 7 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ffcaf35c8375f28ac9d75e9f065f6cdda072000a45aea9d25fd91f3d"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 164.240553ms ago: executing program 0 (id=614): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000480)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = timerfd_create(0x3, 0x800) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, 0x0) timerfd_settime(r1, 0x1, 0x0, &(0x7f0000000380)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) sendfile(r4, r4, 0x0, 0x4) 0s ago: executing program 7 (id=615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): : batadv_slave_0 [ 29.694646][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.696225][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.700652][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.702909][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.708373][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.709524][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.713979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.715573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.717542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.728728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.730326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.732149][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.733413][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.733508][ T4329] device veth0_macvtap entered promiscuous mode [ 29.741702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.743322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.745437][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.748910][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.750416][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.751888][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.753307][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.754737][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.757832][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.760210][ T4329] device veth1_macvtap entered promiscuous mode [ 29.763652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.765046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.767631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.770407][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.771774][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.773174][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.774566][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.778300][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.778889][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.779546][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.780145][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.780814][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.789879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.820996][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.822477][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.824437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.837291][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.838818][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.840172][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.841614][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.842970][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.844342][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.854942][ T4433] loop2: detected capacity change from 0 to 1024 [ 29.855133][ T4434] loop3: detected capacity change from 0 to 2048 [ 29.857615][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.859293][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.861452][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.865884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.868191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.886276][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.887720][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.887780][ T4433] hfsplus: request for non-existent node 2 in B*Tree [ 29.889975][ T4433] hfsplus: request for non-existent node 2 in B*Tree [ 29.890528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.893204][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.894768][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.896115][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.911980][ T4434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.913291][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.914976][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.923906][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.925323][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.932242][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.938547][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.942094][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.943493][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.944811][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.946189][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.023001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.024705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.048452][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.049666][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.050997][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.509366][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.512515][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.514604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.604310][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.606075][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.608764][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.880430][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 30.882300][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 30.882532][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 30.887947][ T4325] Bluetooth: hci2: command 0x041b tx timeout [ 30.889002][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 30.920349][ T4454] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 234: padding at end of block bitmap is not set [ 30.923467][ T4454] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 30.925692][ T4454] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.925692][ T4454] [ 30.930099][ T4454] EXT4-fs (loop3): Total free blocks count 0 [ 30.931093][ T4454] EXT4-fs (loop3): Free/Dirty block details [ 30.932032][ T4454] EXT4-fs (loop3): free_blocks=0 [ 30.932956][ T4454] EXT4-fs (loop3): dirty_blocks=8192 [ 30.933698][ T4454] EXT4-fs (loop3): Block reservation details [ 30.934757][ T4454] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 30.999838][ T4459] loop0: detected capacity change from 0 to 256 [ 31.570980][ T4454] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 31.661248][ T4466] loop2: detected capacity change from 0 to 64 [ 32.206893][ T4473] loop2: detected capacity change from 0 to 32768 [ 32.251220][ T4473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (4473) [ 32.696430][ T4473] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 32.698202][ T4473] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 32.699471][ T4473] BTRFS info (device loop2): unrecognized rescue option 'ignoresuperflags' [ 32.700811][ T4473] BTRFS error (device loop2): unrecognized rescue value ignoresuperflags [ 32.703794][ T4473] BTRFS error (device loop2): open_ctree failed: -22 [ 33.201690][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 33.203854][ T4325] Bluetooth: hci1: command 0x040f tx timeout [ 33.204818][ T4325] Bluetooth: hci4: command 0x040f tx timeout [ 33.206748][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 33.209692][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 34.019640][ T4313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4313) [ 34.035723][ T4486] loop3: detected capacity change from 0 to 32768 [ 34.049291][ T4486] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.051994][ T4486] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 34.054203][ T4486] BTRFS info (device loop3): using free space tree [ 34.183002][ T4509] loop1: detected capacity change from 0 to 128 [ 34.184518][ T4509] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 34.297883][ T4311] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.591559][ T4523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.592746][ T4523] IPv6: NLM_F_CREATE should be set when creating new route [ 34.593818][ T4523] IPv6: NLM_F_CREATE should be set when creating new route [ 34.690026][ T4486] BTRFS info (device loop3): enabling ssd optimizations [ 34.770631][ T4319] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.468865][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 35.469762][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 35.471064][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 35.471972][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 35.472084][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 35.626949][ T4531] loop0: detected capacity change from 0 to 32768 [ 36.212037][ T4551] ======================================================= [ 36.212037][ T4551] WARNING: The mand mount option has been deprecated and [ 36.212037][ T4551] and is ignored by this kernel. Remove the mand [ 36.212037][ T4551] option from the mount to silence this warning. [ 36.212037][ T4551] ======================================================= [ 36.221395][ T4551] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.226440][ T4551] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.515419][ T4556] CUSE: unknown device info "" [ 36.516246][ T4556] CUSE: zero length info key specified [ 37.536043][ T4325] Bluetooth: hci0: command 0x0401 tx timeout [ 37.999901][ T4580] Cannot find add_set index 65532 as target [ 39.040850][ T4593] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.045665][ T4593] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.716003][ T4605] loop4: detected capacity change from 0 to 164 [ 40.390394][ T4618] loop2: detected capacity change from 0 to 764 [ 40.399225][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 40.412095][ T4618] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.290292][ T4620] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 41.402692][ T4620] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 42.176195][ T4636] loop4: detected capacity change from 0 to 131072 [ 42.528279][ T4636] F2FS-fs (loop4): invalid crc value [ 42.588927][ T4636] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.597466][ T4636] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 42.612375][ T4636] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 42.646138][ T4650] loop1: detected capacity change from 0 to 1024 [ 42.647811][ T4650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.793119][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 42.918829][ T4650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.963214][ T4650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.038340][ T4658] loop0: detected capacity change from 0 to 1024 [ 43.050225][ T4658] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.181793][ T4658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.285877][ T4658] netlink: 'syz.0.47': attribute type 12 has an invalid length. [ 44.145694][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 44.164399][ T4640] loop3: detected capacity change from 0 to 32768 [ 44.177412][ T4640] (syz.3.44,4640,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 44.178923][ T4640] (syz.3.44,4640,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 44.513467][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 44.637237][ T4483] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.241265][ T4680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.242490][ T4680] IPv6: NLM_F_CREATE should be set when creating new route [ 45.243624][ T4680] IPv6: NLM_F_CREATE should be set when creating new route [ 46.286213][ T4700] loop1: detected capacity change from 0 to 764 [ 46.327818][ T4707] Zero length message leads to an empty skb [ 46.343536][ T4700] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.317513][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.319149][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.321308][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 47.416997][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 47.806367][ T4727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.921209][ T4721] loop2: detected capacity change from 0 to 32768 [ 47.945816][ T4721] overlayfs: missing 'lowerdir' [ 48.019763][ T4730] netlink: 168 bytes leftover after parsing attributes in process `syz.1.68'. [ 48.639990][ T4756] loop3: detected capacity change from 0 to 32768 [ 48.650374][ T4756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.77 (4756) [ 48.663420][ T4756] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.667112][ T4756] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 48.670156][ T4756] BTRFS info (device loop3): using free space tree [ 48.742254][ T4756] BTRFS info (device loop3): enabling ssd optimizations [ 48.765418][ T4319] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.893908][ T4786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.895186][ T4786] IPv6: NLM_F_CREATE should be set when creating new route [ 48.896273][ T4786] IPv6: NLM_F_CREATE should be set when creating new route [ 48.995825][ T4791] loop3: detected capacity change from 0 to 4096 [ 49.020487][ T4791] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 50.079051][ T4808] loop1: detected capacity change from 0 to 32768 [ 50.092585][ T4808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.88 (4808) [ 50.109883][ T4808] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.115018][ T4808] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 50.116445][ T4808] BTRFS info (device loop1): using free space tree [ 50.238674][ T4808] BTRFS info (device loop1): enabling ssd optimizations [ 50.264596][ T27] audit: type=1326 audit(50.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.93" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255b9e8 code=0x0 [ 50.275299][ T4320] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.473589][ T4848] loop1: detected capacity change from 0 to 32768 [ 50.475619][ T4848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.94 (4848) [ 50.479244][ T4848] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.480856][ T4848] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 50.482062][ T4848] BTRFS info (device loop1): using free space tree [ 50.514873][ T4848] BTRFS info (device loop1): enabling ssd optimizations [ 50.535533][ T4841] loop3: detected capacity change from 0 to 32768 [ 51.282072][ T4320] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.104844][ T14] cfg80211: failed to load regulatory.db [ 52.179016][ T4897] loop2: detected capacity change from 0 to 512 [ 52.180366][ T4897] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.203989][ T4897] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 52.209211][ T4890] loop3: detected capacity change from 0 to 32768 [ 52.209286][ T4897] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.107: attempt to clear invalid blocks 2 len 1 [ 52.212792][ T4890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.104 (4890) [ 52.216241][ T4890] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.222977][ T4890] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 52.224443][ T4890] BTRFS info (device loop3): using free space tree [ 52.226263][ T4897] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 52.230400][ T4897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.107: invalid indirect mapped block 1819239214 (level 0) [ 52.569026][ T4897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.107: invalid indirect mapped block 1819239214 (level 1) [ 52.580810][ T4897] EXT4-fs (loop2): 1 truncate cleaned up [ 52.581910][ T4897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.005004][ T4925] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 53.314700][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 53.358613][ T4890] BTRFS info (device loop3): enabling ssd optimizations [ 54.349916][ T4319] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.520993][ T4951] loop4: detected capacity change from 0 to 32768 [ 54.821530][ T4955] loop0: detected capacity change from 0 to 512 [ 54.823863][ T4951] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.112 (4951) [ 54.828633][ T4955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.881229][ T4955] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.885982][ T4955] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.116: bg 0: block 248: padding at end of block bitmap is not set [ 54.891465][ T4955] Quota error (device loop0): write_blk: dquota write failed [ 54.893258][ T4955] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 54.894848][ T4955] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.116: Failed to acquire dquot type 1 [ 54.898311][ T4955] EXT4-fs (loop0): 1 truncate cleaned up [ 54.938974][ T4955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.761227][ T4438] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.834023][ T27] audit: type=1326 audit(55.810:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 55.838494][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 55.845954][ T27] audit: type=1326 audit(55.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 55.849783][ T27] audit: type=1326 audit(55.830:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 56.156978][ T4978] loop1: detected capacity change from 0 to 256 [ 56.260250][ T4979] loop3: detected capacity change from 0 to 1024 [ 56.271038][ T4979] EXT4-fs: Ignoring removed bh option [ 56.272383][ T4979] EXT4-fs: inline encryption not supported [ 57.610145][ T4979] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.613150][ T4979] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.641303][ T4979] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.121: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.647574][ T4979] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 57.649005][ T4979] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.121: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.655362][ T4979] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 57.656923][ T4979] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.121: Failed to acquire dquot type 0 [ 57.664260][ T4979] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 57.670219][ T4979] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.121: mark_inode_dirty error [ 57.675294][ T4979] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 57.677431][ T4979] EXT4-fs (loop3): 1 orphan inode deleted [ 57.680401][ T4443] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.684083][ T4443] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 57.685552][ T4443] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0 [ 57.689974][ T4979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.886581][ C1] sched: RT throttling activated [ 57.964380][ T4988] loop4: detected capacity change from 0 to 128 [ 57.972514][ T4984] loop2: detected capacity change from 0 to 128 [ 57.978361][ T4984] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 58.044241][ T4990] ipt_CLUSTERIP: Please specify destination IP [ 58.352056][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 58.427568][ T4988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.429908][ T4987] loop1: detected capacity change from 0 to 32768 [ 58.462135][ T4313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.491978][ T4987] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.124 (4987) [ 58.527572][ T4987] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.531122][ T4987] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 58.532509][ T4987] BTRFS info (device loop1): using free space tree [ 58.894015][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 59.023613][ T4987] BTRFS info (device loop1): enabling ssd optimizations [ 59.051384][ T4320] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.571521][ T5040] loop1: detected capacity change from 0 to 256 [ 60.694155][ T5050] loop0: detected capacity change from 0 to 512 [ 60.695504][ T5050] ext3: Unknown parameter 'rootcontext' [ 60.737308][ T4438] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.075832][ T5055] loop0: detected capacity change from 0 to 128 [ 61.077311][ T5055] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 61.113366][ T5057] loop4: detected capacity change from 0 to 128 [ 61.141230][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 61.147830][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.812347][ T5009] loop2: detected capacity change from 0 to 262144 [ 61.833399][ T5009] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.847440][ T5009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.978838][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 62.374157][ T5086] loop4: detected capacity change from 0 to 512 [ 62.612718][ T5086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.615512][ T5086] EXT4-fs (loop4): unmounting filesystem. [ 62.637259][ T5081] loop0: detected capacity change from 0 to 32768 [ 62.640200][ T5081] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.147 (5081) [ 62.697362][ T5095] loop1: detected capacity change from 0 to 512 [ 62.825407][ T5081] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 63.116024][ T5095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.399388][ T5081] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 63.400734][ T5081] BTRFS info (device loop0): force zlib compression, level 3 [ 63.401784][ T5081] BTRFS info (device loop0): force clearing of disk cache [ 63.427140][ T5081] BTRFS info (device loop0): setting nodatasum [ 63.428103][ T5081] BTRFS info (device loop0): allowing degraded mounts [ 63.429047][ T5081] BTRFS info (device loop0): enabling disk space caching [ 63.430134][ T5081] BTRFS info (device loop0): disk space caching is enabled [ 63.696357][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 63.888735][ T5081] BTRFS info (device loop0): rebuilding free space tree [ 64.050472][ T5081] BTRFS info (device loop0): disabling free space tree [ 64.051735][ T5081] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.053151][ T5081] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.112842][ T5081] BTRFS info (device loop0): balance: start -susage=7..17671 [ 64.115657][ T5081] BTRFS info (device loop0): balance: ended with status: 0 [ 64.179894][ T5134] loop3: detected capacity change from 0 to 512 [ 64.188227][ T4326] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 64.496970][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499394][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.593370][ T5143] loop4: detected capacity change from 0 to 128 [ 64.615926][ T5143] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.640619][ T5134] EXT4-fs (loop3): Test dummy encryption mode enabled [ 64.641991][ T5134] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 65.277611][ T5160] loop3: detected capacity change from 0 to 128 [ 65.280470][ T5160] FAT-fs (loop3): bogus sectors per cluster 0 [ 65.281639][ T5160] FAT-fs (loop3): Can't find a valid FAT filesystem [ 65.325352][ T4681] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop0 scanned by udevd (4681) [ 65.335213][ T4313] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.221199][ T5169] loop0: detected capacity change from 0 to 32768 [ 66.227152][ T5169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.164 (5169) [ 66.232127][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 66.233233][ T5169] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.234741][ T5169] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 66.235971][ T5169] BTRFS info (device loop0): using free space tree [ 66.304921][ T5181] Illegal XDP return value 4025397248 on prog (id 6) dev syz_tun, expect packet loss! [ 66.646544][ T5194] loop1: detected capacity change from 0 to 256 [ 66.677098][ T5169] BTRFS info (device loop0): enabling ssd optimizations [ 67.202374][ T4326] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.475702][ T5209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 67.477347][ T5209] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 67.641101][ T4438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4438) [ 67.766349][ T5219] loop3: detected capacity change from 0 to 16 [ 67.774636][ T5219] erofs: (device loop3): mounted with root inode @ nid 36. [ 67.847563][ T5219] syz.3.171: attempt to access beyond end of device [ 67.847563][ T5219] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 67.857609][ T5219] syz.3.171: attempt to access beyond end of device [ 67.857609][ T5219] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 67.945471][ T5224] loop1: detected capacity change from 0 to 128 [ 67.947066][ T5224] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 68.275019][ T4438] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.324184][ T5230] loop4: detected capacity change from 0 to 4096 [ 68.689115][ T5230] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.702225][ T5230] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 68.703547][ T5230] System zones: 0-5 [ 68.716262][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.768224][ T5230] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 68.802945][ T5239] loop0: detected capacity change from 0 to 512 [ 68.831171][ T5239] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.178: inode has both inline data and extents flags [ 68.839106][ T5239] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 68.844587][ T5239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.918120][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 71.468540][ T5274] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 71.469903][ T5274] netlink: 'syz.3.187': attribute type 3 has an invalid length. [ 71.470975][ T5274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 71.535141][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 71.946892][ T5280] loop3: detected capacity change from 0 to 128 [ 71.948282][ T5280] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 72.089161][ T5271] loop2: detected capacity change from 0 to 32768 [ 72.103025][ T5271] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 72.205539][ T4438] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.279687][ T4681] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 72.618536][ T5290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.691838][ T5302] loop0: detected capacity change from 0 to 512 [ 73.932472][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.360009][ T5317] process 'syz.2.190' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 74.720752][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 74.821603][ T27] audit: type=1326 audit(74.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255b9e8 code=0x7ffc0000 [ 74.827879][ T27] audit: type=1326 audit(74.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=62 compat=0 ip=0xffff8255b9e8 code=0x7ffc0000 [ 74.831933][ T27] audit: type=1326 audit(74.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255b9e8 code=0x7ffc0000 [ 75.028785][ T5331] loop2: detected capacity change from 0 to 1024 [ 75.187743][ T5331] EXT4-fs: Ignoring removed nobh option [ 75.192373][ T5333] loop0: detected capacity change from 0 to 128 [ 75.194399][ T5333] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 75.206304][ T5331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.215876][ T5336] netlink: 100 bytes leftover after parsing attributes in process `syz.4.196'. [ 75.219432][ T5331] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.201: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 75.233042][ T5331] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.201: couldn't read orphan inode 11 (err -117) [ 75.238292][ T4681] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.243698][ T5331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.329594][ T5331] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.201: Invalid block bitmap block 0 in block_group 0 [ 75.333026][ T5331] Quota error (device loop2): write_blk: dquota write failed [ 75.334253][ T5331] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 75.335819][ T5331] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.201: Failed to acquire dquot type 0 [ 75.408993][ T5340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.628926][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 75.666305][ T27] audit: type=1107 audit(75.640:9): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 75.856210][ T5349] loop3: detected capacity change from 0 to 512 [ 75.864940][ T5349] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.208: inode has both inline data and extents flags [ 75.867704][ T5349] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.208: couldn't read orphan inode 15 (err -117) [ 75.879191][ T5349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.491874][ T5366] loop4: detected capacity change from 0 to 1024 [ 76.523100][ T5366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.527796][ T5366] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.214: inode has both inline data and extents flags [ 76.533999][ T5366] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.214: inode has both inline data and extents flags [ 76.830535][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 76.888886][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 77.271740][ T5385] loop2: detected capacity change from 0 to 128 [ 77.273222][ T5385] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 77.328150][ T4438] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.612715][ T5394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.613790][ T5394] IPv6: NLM_F_CREATE should be set when creating new route [ 77.614849][ T5394] IPv6: NLM_F_CREATE should be set when creating new route [ 78.022353][ T5401] loop1: detected capacity change from 0 to 512 [ 78.027516][ T4325] Bluetooth: hci0: command 0x0401 tx timeout [ 78.139739][ T5402] loop4: detected capacity change from 0 to 256 [ 78.262120][ T5401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.370669][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 78.601847][ T5419] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 79.929232][ T5425] loop4: detected capacity change from 0 to 256 [ 79.931491][ T5425] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ" or missing value [ 81.033576][ T47] Bluetooth: hci0: command 0x0401 tx timeout [ 81.134359][ T4438] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.170414][ T5442] loop0: detected capacity change from 0 to 128 [ 82.171924][ T5442] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 82.248413][ T4438] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.309560][ T5448] loop3: detected capacity change from 0 to 512 [ 82.491256][ T5451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.675453][ T5448] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.237: inode has both inline data and extents flags [ 82.677764][ T5448] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.237: couldn't read orphan inode 15 (err -117) [ 82.681522][ T5448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.411206][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 83.656431][ T5465] loop1: detected capacity change from 0 to 256 [ 84.088448][ T5461] loop0: detected capacity change from 0 to 4096 [ 84.100512][ T5461] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.106553][ T5467] loop2: detected capacity change from 0 to 512 [ 84.176012][ T5467] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.244: inode has both inline data and extents flags [ 84.180994][ T5467] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.244: couldn't read orphan inode 15 (err -117) [ 84.183068][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.185834][ T5461] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 84.187554][ T5461] System zones: 0-5 [ 84.189048][ T5461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.750000][ T5480] loop1: detected capacity change from 0 to 512 [ 84.815617][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 84.831891][ T5480] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.245: inode has both inline data and extents flags [ 84.834436][ T5480] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.245: couldn't read orphan inode 15 (err -117) [ 84.837384][ T5480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.398029][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 85.729776][ T5496] loop3: detected capacity change from 0 to 512 [ 85.795173][ T5496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.260277][ T5496] EXT4-fs (loop3): 1 orphan inode deleted [ 86.261366][ T5496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.898579][ T4980] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.905527][ T4980] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:17: Failed to release dquot type 1 [ 86.912710][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 87.046741][ T4325] Bluetooth: hci0: command 0x0401 tx timeout [ 87.406038][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 87.460690][ T5504] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 87.461901][ T5504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 87.630936][ T5510] loop4: detected capacity change from 0 to 512 [ 87.738506][ T5510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.747022][ T5513] loop3: detected capacity change from 0 to 128 [ 88.748499][ T5513] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 88.748936][ T5510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.753271][ T5510] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.254: bg 0: block 248: padding at end of block bitmap is not set [ 88.755746][ T5510] Quota error (device loop4): write_blk: dquota write failed [ 88.756949][ T5510] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 88.758441][ T5510] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.254: Failed to acquire dquot type 1 [ 88.763299][ T5510] EXT4-fs (loop4): 1 truncate cleaned up [ 88.764556][ T5510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.821164][ T4438] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.118836][ T5518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.250179][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 89.325477][ T5521] loop0: detected capacity change from 0 to 512 [ 89.330095][ T5526] loop1: detected capacity change from 0 to 256 [ 89.338429][ T5521] EXT4-fs: Ignoring removed bh option [ 89.354393][ T5521] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.360381][ T5525] binder: BINDER_SET_CONTEXT_MGR already set [ 89.374071][ T5525] binder: 5524:5525 ioctl 4018620d 200002c0 returned -16 [ 89.439686][ T5521] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.442285][ T5521] EXT4-fs (loop0): 1 truncate cleaned up [ 89.443262][ T5521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.643969][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 90.176263][ T5542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.937528][ T5546] loop2: detected capacity change from 0 to 16 [ 91.565868][ T5546] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.159202][ T5554] loop0: detected capacity change from 0 to 1024 [ 92.160904][ T5554] EXT4-fs: Ignoring removed bh option [ 92.161991][ T5554] EXT4-fs: inline encryption not supported [ 92.266148][ T4325] Bluetooth: hci0: command 0x0401 tx timeout [ 92.337848][ T5554] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.340731][ T5554] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.352144][ T5554] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.263: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.355450][ T5554] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 92.356772][ T5554] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.263: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.379860][ T5554] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 92.381344][ T5554] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.263: Failed to acquire dquot type 0 [ 92.390311][ T5554] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 92.392595][ T5554] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.263: mark_inode_dirty error [ 92.397276][ T5554] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 92.399031][ T5554] EXT4-fs (loop0): 1 orphan inode deleted [ 92.404503][ T5137] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.422385][ T5137] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 92.423889][ T5137] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:18: Failed to release dquot type 0 [ 92.427772][ T5554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.676750][ T27] audit: type=1326 audit(92.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 92.681621][ T27] audit: type=1326 audit(92.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 92.686695][ T27] audit: type=1326 audit(92.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 92.690116][ T27] audit: type=1326 audit(92.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 92.702663][ T27] audit: type=1326 audit(92.660:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 92.781132][ T5562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 92.784584][ T5562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 93.032157][ T27] audit: type=1326 audit(92.660:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 93.046234][ T27] audit: type=1326 audit(92.660:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 93.077222][ T5568] loop4: detected capacity change from 0 to 16 [ 93.299438][ T5571] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 93.538741][ T5568] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.594671][ T5573] loop2: detected capacity change from 0 to 128 [ 93.596133][ T5573] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 93.616562][ T5574] syz.4.270: attempt to access beyond end of device [ 93.616562][ T5574] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 93.697402][ T5575] syz.4.270: attempt to access beyond end of device [ 93.697402][ T5575] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 93.701025][ T5575] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 93.702618][ T5575] syz.4.270: attempt to access beyond end of device [ 93.702618][ T5575] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 93.726101][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 93.738541][ T4681] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.896971][ T5580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.734023][ T5594] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.735664][ T5594] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.287542][ T5595] loop3: detected capacity change from 0 to 256 [ 96.082863][ T5627] loop4: detected capacity change from 0 to 256 [ 96.691559][ T47] Bluetooth: hci0: command 0x0401 tx timeout [ 96.832681][ T5627] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 97.177911][ T5627] exFAT-fs (loop4): IO charset B not found [ 97.734431][ T5642] loop0: detected capacity change from 0 to 128 [ 97.735889][ T5642] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 98.430543][ T4438] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.024887][ T5649] loop3: detected capacity change from 0 to 512 [ 99.040341][ T5653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.127012][ T5655] loop4: detected capacity change from 0 to 256 [ 99.176484][ T5661] loop0: detected capacity change from 0 to 512 [ 99.220313][ T5649] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.291: inode has both inline data and extents flags [ 99.222920][ T5661] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.294: inode has both inline data and extents flags [ 99.225162][ T5649] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.291: couldn't read orphan inode 15 (err -117) [ 99.226406][ T5668] loop4: detected capacity change from 0 to 1024 [ 99.230180][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.232828][ T5661] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.294: couldn't read orphan inode 15 (err -117) [ 99.235486][ T5661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.235971][ T5668] EXT4-fs: Ignoring removed bh option [ 99.239650][ T5668] EXT4-fs: inline encryption not supported [ 99.243837][ T5668] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 99.245376][ T5668] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.248310][ T5668] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.295: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.250744][ T5668] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 99.252013][ T5668] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.295: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.254198][ T5668] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 99.256157][ T5668] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.295: Failed to acquire dquot type 0 [ 99.260521][ T5668] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 99.263015][ T5668] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.295: mark_inode_dirty error [ 99.264845][ T5668] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 99.266459][ T5668] EXT4-fs (loop4): 1 orphan inode deleted [ 99.267637][ T9] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.269950][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 99.271208][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:0: Failed to release dquot type 0 [ 99.272945][ T5668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.100938][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 100.133714][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 100.343520][ T5679] netlink: 'syz.0.298': attribute type 27 has an invalid length. [ 100.492968][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.495115][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.779392][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 101.614361][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.621925][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.643308][ T5701] loop1: detected capacity change from 0 to 128 [ 101.644788][ T5701] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 102.060099][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.069403][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.204761][ T5679] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.206470][ T5679] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.210921][ T5679] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.213037][ T5679] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.398944][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.400763][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.402415][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.446857][ T5681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.459521][ T5706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.515398][ T5711] loop1: detected capacity change from 0 to 512 [ 102.541504][ T5711] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.309: inode has both inline data and extents flags [ 102.556511][ T5711] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.309: couldn't read orphan inode 15 (err -117) [ 102.561507][ T5711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.947517][ T5728] loop3: detected capacity change from 0 to 16 [ 102.965896][ T5728] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.033383][ T5728] syz.3.310: attempt to access beyond end of device [ 103.033383][ T5728] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 103.036188][ T5728] syz.3.310: attempt to access beyond end of device [ 103.036188][ T5728] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 103.461077][ T5728] syz.3.310: attempt to access beyond end of device [ 103.461077][ T5728] loop3: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 103.464556][ T5728] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 103.468288][ T5728] syz.3.310: attempt to access beyond end of device [ 103.468288][ T5728] loop3: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 103.544960][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 103.708788][ T5737] xt_CONNSECMARK: invalid mode: 66 [ 103.721783][ T5737] loop2: detected capacity change from 0 to 1024 [ 103.723277][ T5737] EXT4-fs: Ignoring removed bh option [ 103.724136][ T5737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.765340][ T5737] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.652221][ T5737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.935913][ T5749] loop1: detected capacity change from 0 to 1024 [ 104.937986][ T5749] EXT4-fs: Ignoring removed bh option [ 104.938880][ T5749] EXT4-fs: inline encryption not supported [ 105.385559][ T5749] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.388391][ T5749] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.397424][ T5749] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.313: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.400001][ T5749] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 105.401268][ T5749] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.313: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.404037][ T5749] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 105.405325][ T5749] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.313: Failed to acquire dquot type 0 [ 105.408214][ T5749] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 105.410246][ T5749] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.313: mark_inode_dirty error [ 105.412570][ T5749] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 105.414316][ T5749] EXT4-fs (loop1): 1 orphan inode deleted [ 105.415673][ T4454] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.431229][ T4454] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 105.432578][ T4454] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:8: Failed to release dquot type 0 [ 105.435974][ T5749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.588383][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 106.787723][ T5765] capability: warning: `syz.0.319' uses deprecated v2 capabilities in a way that may be insecure [ 106.789952][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 108.254606][ T5798] loop2: detected capacity change from 0 to 128 [ 108.257195][ T5798] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 108.390989][ T5807] loop4: detected capacity change from 0 to 512 [ 108.669668][ T5807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.690914][ T4681] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.698804][ T5807] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.703830][ T5807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.332: bg 0: block 248: padding at end of block bitmap is not set [ 108.706886][ T5807] Quota error (device loop4): write_blk: dquota write failed [ 108.708117][ T5807] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 108.709603][ T5807] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.332: Failed to acquire dquot type 1 [ 108.715220][ T5807] EXT4-fs (loop4): 1 truncate cleaned up [ 108.796348][ T5807] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.976484][ T5811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.241234][ T5819] tipc: Can't bind to reserved service type 1 [ 110.493808][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 110.560142][ T5820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.561671][ T5820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.523949][ T5840] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.525577][ T5840] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.117514][ T5846] loop3: detected capacity change from 0 to 256 [ 112.121660][ T5846] FAT-fs (loop3): bogus number of FAT sectors [ 112.122636][ T5846] FAT-fs (loop3): Can't find a valid FAT filesystem [ 113.172778][ T5856] loop3: detected capacity change from 0 to 128 [ 113.174214][ T5856] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 113.562273][ T4438] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.819132][ T5861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.778417][ T5880] x_tables: duplicate underflow at hook 1 [ 116.311324][ T27] audit: type=1326 audit(116.290:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 116.314458][ T27] audit: type=1326 audit(116.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 116.317884][ T27] audit: type=1326 audit(116.290:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 116.321020][ T27] audit: type=1326 audit(116.290:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 116.324107][ T27] audit: type=1326 audit(116.290:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 116.357150][ T5901] tipc: Started in network mode [ 116.357940][ T5901] tipc: Node identity 7e3565c282ea, cluster identity 4711 [ 116.362892][ T5901] tipc: Enabled bearer , priority 0 [ 116.375968][ T5901] device syzkaller0 entered promiscuous mode [ 116.774029][ T5899] tipc: Resetting bearer [ 116.870069][ T5899] tipc: Disabling bearer [ 116.884599][ T5923] tipc: Enabling of bearer rejected, failed to enable media [ 117.353950][ T5948] sch_fq: defrate 4294967295 ignored. [ 117.628234][ T6006] loop4: detected capacity change from 0 to 1024 [ 117.669020][ T6006] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 117.673712][ T6006] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 117.682819][ T6006] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.369: Failed to acquire dquot type 0 [ 117.690553][ T6006] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 117.709457][ T6006] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.369: corrupted inode contents [ 117.777559][ T6006] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #13: comm syz.4.369: mark_inode_dirty error [ 117.782487][ T6006] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.369: corrupted inode contents [ 117.799849][ T6006] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.369: mark_inode_dirty error [ 117.802319][ T6006] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.369: corrupted inode contents [ 117.811980][ T6006] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 117.813451][ T6006] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.369: corrupted inode contents [ 117.815557][ T6006] EXT4-fs error (device loop4): ext4_truncate:4318: inode #13: comm syz.4.369: mark_inode_dirty error [ 117.819957][ T6006] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 117.821807][ T6006] EXT4-fs (loop4): 1 truncate cleaned up [ 117.822742][ T6006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.824806][ T6030] loop0: detected capacity change from 0 to 16 [ 119.898487][ T6030] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.976644][ T6030] x_tables: duplicate underflow at hook 1 [ 120.057128][ T6006] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 120.058622][ T6006] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 120.060324][ T6006] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.369: Failed to acquire dquot type 0 [ 120.079567][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 120.127693][ T6036] loop1: detected capacity change from 0 to 512 [ 120.259722][ T6045] loop3: detected capacity change from 0 to 1024 [ 120.262654][ T6045] EXT4-fs: Ignoring removed bh option [ 120.263584][ T6045] EXT4-fs: inline encryption not supported [ 120.342855][ T6045] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.345531][ T6045] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.354455][ T6045] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.375: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.357192][ T6045] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 120.358548][ T6045] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.375: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.362789][ T6045] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.375: Failed to acquire dquot type 0 [ 120.365024][ T6045] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 120.368193][ T6045] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.375: mark_inode_dirty error [ 120.370860][ T6045] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 120.372644][ T6045] EXT4-fs (loop3): 1 orphan inode deleted [ 120.376110][ T5995] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.400639][ T5995] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:27: Failed to release dquot type 0 [ 120.405207][ T6045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.261472][ T6036] EXT4-fs (loop1): 1 orphan inode deleted [ 121.262428][ T6036] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.276825][ T4628] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:14: Failed to release dquot type 1 [ 121.810808][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 121.836235][ T6060] loop0: detected capacity change from 0 to 1024 [ 121.846378][ T6060] EXT4-fs: Ignoring removed orlov option [ 121.860918][ T6060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.911169][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 121.974843][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 122.043260][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.044655][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.678589][ T6076] loop2: detected capacity change from 0 to 256 [ 122.683950][ T6076] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ" or missing value [ 123.894341][ T6084] loop3: detected capacity change from 0 to 1024 [ 123.895753][ T6084] EXT4-fs: Ignoring removed bh option [ 123.896740][ T6084] EXT4-fs: inline encryption not supported [ 124.048787][ T6084] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 124.051921][ T6084] EXT4-fs (loop3): orphan cleanup on readonly fs [ 124.059277][ T6084] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.390: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.061763][ T6084] __quota_error: 3 callbacks suppressed [ 124.061782][ T6084] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 124.063987][ T6084] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.390: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.066983][ T6084] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 124.068197][ T6084] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.390: Failed to acquire dquot type 0 [ 124.070687][ T6084] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 124.072562][ T6084] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.390: mark_inode_dirty error [ 124.074831][ T6084] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 124.076605][ T6084] EXT4-fs (loop3): 1 orphan inode deleted [ 124.078275][ T11] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.082439][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 124.083798][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 0 [ 124.086316][ T6084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.029694][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.031392][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.261473][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 126.054510][ T6108] hub 8-0:1.0: USB hub found [ 126.057736][ T6108] hub 8-0:1.0: 8 ports detected [ 126.231295][ T6108] loop1: detected capacity change from 0 to 1024 [ 126.263736][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.264292][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.369598][ T6108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 126.371178][ T6108] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 126.424886][ T6108] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.394: unexpected bad inode w/o EXT4_IGET_BAD [ 126.475858][ T6108] EXT4-fs (loop1): no journal found [ 126.479416][ T6108] EXT4-fs (loop1): can't get journal size [ 126.933482][ T6108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.582893][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.584150][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.930391][ T6117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.956029][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 128.302757][ T6126] loop1: detected capacity change from 0 to 256 [ 128.306291][ T6126] FAT-fs (loop1): bogus number of FAT sectors [ 128.307239][ T6126] FAT-fs (loop1): Can't find a valid FAT filesystem [ 129.545199][ T6137] loop3: detected capacity change from 0 to 256 [ 129.550372][ T6137] FAT-fs (loop3): Unrecognized mount option "check=relaxdd" or missing value [ 130.820890][ T6148] loop4: detected capacity change from 0 to 512 [ 131.165288][ T6148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.817091][ T6135] loop1: detected capacity change from 0 to 40427 [ 131.822831][ T6135] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 131.823961][ T6135] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.826053][ T6135] F2FS-fs (loop1): invalid crc value [ 131.850813][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 131.860855][ T6135] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.912224][ T6135] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 131.913691][ T6135] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.922080][ T6161] loop4: detected capacity change from 0 to 512 [ 131.942728][ T6161] EXT4-fs: inline encryption not supported [ 131.954220][ T6161] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.964556][ T6161] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.996533][ T6161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.000172][ T6161] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.410: inode #13: comm syz.4.410: iget: illegal inode # [ 132.002375][ T6161] EXT4-fs (loop4): Remounting filesystem read-only [ 132.003409][ T6161] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.410: couldn't read orphan inode 13 (err -117) [ 132.010890][ T6161] EXT4-fs (loop4): Remounting filesystem read-only [ 132.011919][ T6161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.898183][ T6172] loop3: detected capacity change from 0 to 256 [ 133.007452][ T6172] FAT-fs (loop3): Directory bread(block 64) failed [ 133.008604][ T6172] FAT-fs (loop3): Directory bread(block 65) failed [ 133.009736][ T6172] FAT-fs (loop3): Directory bread(block 66) failed [ 133.010842][ T6172] FAT-fs (loop3): Directory bread(block 67) failed [ 133.012090][ T6172] FAT-fs (loop3): Directory bread(block 68) failed [ 133.013192][ T6172] FAT-fs (loop3): Directory bread(block 69) failed [ 133.014481][ T6172] FAT-fs (loop3): Directory bread(block 70) failed [ 133.015587][ T6172] FAT-fs (loop3): Directory bread(block 71) failed [ 133.016793][ T6172] FAT-fs (loop3): Directory bread(block 72) failed [ 133.017818][ T6172] FAT-fs (loop3): Directory bread(block 73) failed [ 133.983987][ T6186] loop0: detected capacity change from 0 to 512 [ 134.033086][ T27] audit: type=1326 audit(133.990:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.044334][ T27] audit: type=1326 audit(133.990:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.051124][ T27] audit: type=1326 audit(133.990:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.064199][ T6186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.086362][ T6194] loop1: detected capacity change from 0 to 512 [ 134.089684][ T27] audit: type=1326 audit(134.070:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.092726][ T27] audit: type=1326 audit(134.070:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.095787][ T27] audit: type=1326 audit(134.070:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.095853][ T27] audit: type=1326 audit(134.070:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.095915][ T27] audit: type=1326 audit(134.070:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.095974][ T27] audit: type=1326 audit(134.070:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.096057][ T27] audit: type=1326 audit(134.070:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915b9e8 code=0x7ffc0000 [ 134.453058][ T6194] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.413: inode has both inline data and extents flags [ 134.453232][ T6194] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.413: couldn't read orphan inode 15 (err -117) [ 134.453316][ T6194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.961049][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 134.975108][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 135.062816][ T6206] loop3: detected capacity change from 0 to 256 [ 135.150058][ T6206] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 135.629908][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 135.842404][ T6220] loop1: detected capacity change from 0 to 1024 [ 135.864281][ T6220] EXT4-fs: Ignoring removed bh option [ 135.865200][ T6220] EXT4-fs: inline encryption not supported [ 135.888768][ T6220] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.890391][ T6220] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.960888][ T6220] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.420: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.963264][ T6220] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.420: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.966254][ T6220] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.420: Failed to acquire dquot type 0 [ 135.970335][ T6220] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 135.982692][ T6220] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.420: mark_inode_dirty error [ 135.989639][ T6225] loop4: detected capacity change from 0 to 1024 [ 135.999280][ T6220] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 136.000823][ T6220] EXT4-fs (loop1): 1 orphan inode deleted [ 136.001739][ T5993] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.003778][ T5993] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:26: Failed to release dquot type 0 [ 136.016410][ T6225] EXT4-fs: Ignoring removed bh option [ 136.017461][ T6225] EXT4-fs: inline encryption not supported [ 136.018842][ T6220] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.059309][ T6225] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.061092][ T6225] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.080471][ T6228] loop0: detected capacity change from 0 to 4096 [ 136.082736][ T6228] EXT4-fs (loop0): Test dummy encryption mode enabled [ 136.090711][ T6228] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 136.094924][ T6228] System zones: 0-5 [ 136.105847][ T6225] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.423: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.118295][ T6228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.125506][ T6225] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.423: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.218533][ T6225] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.423: Failed to acquire dquot type 0 [ 136.229027][ T6225] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 136.243705][ T6225] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.423: mark_inode_dirty error [ 136.593423][ T6243] loop3: detected capacity change from 0 to 256 [ 136.706675][ T6243] FAT-fs (loop3): bogus number of FAT sectors [ 136.707770][ T6243] FAT-fs (loop3): Can't find a valid FAT filesystem [ 137.409088][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 137.419647][ T6225] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 137.421363][ T6225] EXT4-fs (loop4): 1 orphan inode deleted [ 137.992334][ T11] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.995802][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 0 [ 138.001485][ T6225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.089815][ T6252] netlink: 'syz.0.431': attribute type 27 has an invalid length. [ 138.594633][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.599044][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.602463][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.636678][ T6254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.835422][ T6259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.837069][ T6259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 139.357683][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 139.357694][ T27] audit: type=1326 audit(139.340:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.363200][ T27] audit: type=1326 audit(139.340:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.367286][ T27] audit: type=1326 audit(139.340:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.370962][ T27] audit: type=1326 audit(139.350:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.375234][ T27] audit: type=1326 audit(139.350:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.381800][ T27] audit: type=1326 audit(139.350:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=440 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.386191][ T27] audit: type=1326 audit(139.350:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df5b9e8 code=0x7ffc0000 [ 139.714318][ T6279] loop2: detected capacity change from 0 to 512 [ 139.759707][ T6279] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.441: inode has both inline data and extents flags [ 139.762059][ T6279] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.441: couldn't read orphan inode 15 (err -117) [ 139.763864][ T6279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.883665][ T6284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.885139][ T6284] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 140.088904][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 140.427797][ T6291] loop0: detected capacity change from 0 to 256 [ 140.434235][ T6291] FAT-fs (loop0): Unrecognized mount option "check=relaxdd" or missing value [ 140.678182][ T4438] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.588318][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 142.940618][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 143.020474][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.021738][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.606054][ T27] audit: type=1326 audit(143.580:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 143.609641][ T27] audit: type=1326 audit(143.580:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 143.612855][ T27] audit: type=1326 audit(143.590:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 143.833224][ T6334] hub 8-0:1.0: USB hub found [ 143.834376][ T6334] hub 8-0:1.0: 8 ports detected [ 143.881001][ T6334] loop1: detected capacity change from 0 to 1024 [ 143.971854][ T6334] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 143.973334][ T6334] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 143.978326][ T6334] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.459: unexpected bad inode w/o EXT4_IGET_BAD [ 143.980911][ T6334] EXT4-fs (loop1): no journal found [ 143.981737][ T6334] EXT4-fs (loop1): can't get journal size [ 144.046507][ T6334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.999426][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 145.102619][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.116930][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.794780][ T6308] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.796205][ T6308] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.797681][ T6308] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.799047][ T6308] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.132977][ T6377] device veth1_macvtap left promiscuous mode [ 146.148465][ T6385] device bridge_slave_1 left promiscuous mode [ 146.155030][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.197636][ T6385] device bridge_slave_0 left promiscuous mode [ 146.198720][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.363026][ T6387] device wg2 entered promiscuous mode [ 153.607236][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 153.607327][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 153.619579][ T4325] Bluetooth: hci3: command 0x0406 tx timeout [ 153.620596][ T4325] Bluetooth: hci1: command 0x0406 tx timeout [ 153.621289][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 161.456741][ T4325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.459545][ T4325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.461046][ T4325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.463039][ T4325] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.464320][ T4325] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.465513][ T4325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.472312][ T4325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.474282][ T4325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.475949][ T4325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.477976][ T4325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.479437][ T4325] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.480668][ T4325] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.494973][ T4335] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.501754][ T4335] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.503747][ T4335] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.505879][ T4335] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.507665][ T4335] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.508752][ T4335] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.536734][ T4335] Bluetooth: hci5: command 0x0409 tx timeout [ 165.537588][ T4335] Bluetooth: hci7: command 0x0409 tx timeout [ 165.538797][ T4335] Bluetooth: hci6: command 0x0409 tx timeout [ 165.606701][ T4335] Bluetooth: hci5: command 0x041b tx timeout [ 167.606623][ T4328] Bluetooth: hci7: command 0x041b tx timeout [ 167.607678][ T4328] Bluetooth: hci6: command 0x041b tx timeout [ 167.686697][ T4335] Bluetooth: hci5: command 0x040f tx timeout [ 169.686665][ T4335] Bluetooth: hci6: command 0x040f tx timeout [ 169.686671][ T4328] Bluetooth: hci7: command 0x040f tx timeout [ 169.776649][ T4328] Bluetooth: hci5: command 0x0419 tx timeout [ 170.415778][ T6461] chnl_net:caif_netlink_parms(): no params data found [ 170.567276][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.568605][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.570141][ T6461] device bridge_slave_0 entered promiscuous mode [ 170.572180][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.573271][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.574863][ T6461] device bridge_slave_1 entered promiscuous mode [ 170.586548][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.589239][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.601654][ T6461] team0: Port device team_slave_0 added [ 170.647300][ T6461] team0: Port device team_slave_1 added [ 171.187581][ T6000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.617694][ T6000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.620730][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.621830][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.625595][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.656983][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.658046][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.661641][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.766650][ T47] Bluetooth: hci7: command 0x0419 tx timeout [ 171.776794][ T4328] Bluetooth: hci6: command 0x0419 tx timeout [ 171.823246][ T6000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.834926][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 171.840357][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 171.911812][ T6461] device hsr_slave_0 entered promiscuous mode [ 171.936986][ T6461] device hsr_slave_1 entered promiscuous mode [ 171.966766][ T6461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.968877][ T6461] Cannot create hsr debugfs directory [ 172.028576][ T6000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.051181][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.052288][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.053719][ T6468] device bridge_slave_0 entered promiscuous mode [ 172.062604][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.063746][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.065182][ T6468] device bridge_slave_1 entered promiscuous mode [ 172.081318][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.082447][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.083925][ T6470] device bridge_slave_0 entered promiscuous mode [ 172.096187][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.098883][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.100018][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.100480][ T6470] device bridge_slave_1 entered promiscuous mode [ 172.111387][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.121738][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.124740][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.134399][ T6470] team0: Port device team_slave_0 added [ 172.147767][ T6468] team0: Port device team_slave_0 added [ 172.150144][ T6470] team0: Port device team_slave_1 added [ 172.170984][ T6468] team0: Port device team_slave_1 added [ 172.172376][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.173556][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.177722][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.194937][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.196117][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.201156][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.203648][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.204733][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.211266][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.217304][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.218424][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.222367][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.550348][ T6470] device hsr_slave_0 entered promiscuous mode [ 172.586907][ T6470] device hsr_slave_1 entered promiscuous mode [ 172.626726][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.628000][ T6470] Cannot create hsr debugfs directory [ 172.687762][ T6468] device hsr_slave_0 entered promiscuous mode [ 172.737085][ T6468] device hsr_slave_1 entered promiscuous mode [ 172.786685][ T6468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.787941][ T6468] Cannot create hsr debugfs directory [ 172.896757][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 173.227219][ T6461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.313816][ T6461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.762698][ T6461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.087742][ T6461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.673699][ T6470] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.731070][ T6470] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.784337][ T6470] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.179396][ T6470] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.774872][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.122511][ T6468] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.433570][ T6468] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.548556][ T6468] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.565906][ T6468] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.579854][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.581358][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.587830][ T6461] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.600078][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.614735][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.616347][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.619875][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.621007][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.632338][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.641883][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.643470][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.644901][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.645999][ T5478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.655723][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.661716][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.663439][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.664775][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.707606][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.722711][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.724795][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.726313][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.731204][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.733017][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.734130][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.735660][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.744772][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.803538][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.805315][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.807968][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.809384][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.810812][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.812377][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.813816][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.814942][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.818030][ T6461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.819847][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.830293][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.831995][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.841912][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.859970][ T6000] device hsr_slave_0 left promiscuous mode [ 176.861328][ T6000] device hsr_slave_1 left promiscuous mode [ 176.863596][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.864755][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.866457][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.868132][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.870246][ T6000] device bridge_slave_1 left promiscuous mode [ 176.872181][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.875830][ T6000] device bridge_slave_0 left promiscuous mode [ 176.878770][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.889925][ T6000] device veth1_macvtap left promiscuous mode [ 176.891847][ T6000] device veth0_macvtap left promiscuous mode [ 176.892919][ T6000] device veth1_vlan left promiscuous mode [ 176.893833][ T6000] device veth0_vlan left promiscuous mode [ 177.474528][ T6639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.475522][ T6000] team0 (unregistering): Port device team_slave_1 removed [ 177.476926][ T6639] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.482790][ T6639] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 177.488807][ T6639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.490110][ T6639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 177.495863][ T6639] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 177.497224][ T6639] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 177.498190][ T6639] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 177.509868][ T6639] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 177.511493][ T6639] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 177.511862][ T6000] team0 (unregistering): Port device team_slave_0 removed [ 177.512583][ T6639] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 177.524023][ T6639] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 177.525204][ T6639] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 177.526127][ T6639] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 177.531156][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.535211][ T6639] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 177.548576][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.686750][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.933234][ T6685] loop4: detected capacity change from 0 to 1024 [ 178.934773][ T6685] EXT4-fs: Ignoring removed nobh option [ 178.935805][ T6685] EXT4-fs: inline encryption not supported [ 178.938169][ T6685] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.958302][ T6685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.972908][ T6685] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.534: Allocating blocks 385-513 which overlap fs metadata [ 178.981591][ T6685] EXT4-fs (loop4): pa 0000000033cb0a68: logic 16, phys. 129, len 24 [ 178.982976][ T6685] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 179.000495][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 179.526743][ T4328] Bluetooth: hci6: command 0x0c1a tx timeout [ 179.528796][ T47] Bluetooth: hci5: command 0x0c1a tx timeout [ 179.529708][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.616637][ T4335] Bluetooth: hci7: command 0x0c1a tx timeout [ 180.796692][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 181.357758][ T6000] bond0 (unregistering): Released all slaves [ 181.559938][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.563060][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.566567][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.535'. [ 181.594274][ T6470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.595865][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.606921][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 181.607948][ T47] Bluetooth: hci6: command 0x0406 tx timeout [ 181.608928][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 181.621879][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.624065][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.625727][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.629727][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.635948][ T6706] loop4: detected capacity change from 0 to 1024 [ 181.641715][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.643133][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.644834][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.646288][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.648417][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.649895][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.686726][ T4335] Bluetooth: hci7: command 0x0406 tx timeout [ 181.688823][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.691988][ T6461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.693185][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.694503][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.695724][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.698299][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.703688][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.705226][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.710733][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.711800][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.713140][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.741946][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.743561][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.744808][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.745837][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.752731][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.788727][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.797865][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.799833][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.801345][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.838359][ T6468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.840036][ T6468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.896042][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.898412][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.899915][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.901368][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.903135][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.904584][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.916943][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.929825][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.153326][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.235943][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.401860][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.403542][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.475859][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.502388][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.509228][ T6461] device veth0_vlan entered promiscuous mode [ 182.512473][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.523371][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.531811][ T6461] device veth1_vlan entered promiscuous mode [ 182.579591][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.582134][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.605324][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.615176][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.694182][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.730521][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.732184][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.740759][ T6461] device veth0_macvtap entered promiscuous mode [ 182.782211][ T6461] device veth1_macvtap entered promiscuous mode [ 182.831700][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.833511][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.836474][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.167358][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.169815][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.175231][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.177039][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.178372][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.179772][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.182007][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.184251][ T6461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.185542][ T6461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.186933][ T6461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.188211][ T6461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.192410][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.194049][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.195532][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.197909][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.199637][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.203459][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.260683][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.263143][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.730917][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.732596][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.845090][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.846404][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.857934][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.859364][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.860742][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.255729][ T6794] hub 8-0:1.0: USB hub found [ 184.256986][ T6794] hub 8-0:1.0: 8 ports detected [ 184.269859][ T6794] loop4: detected capacity change from 0 to 1024 [ 184.278918][ T6794] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 184.278964][ T6794] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 184.283025][ T6794] EXT4-fs error (device loop4): ext4_get_journal_inode:5730: inode #5: comm syz.4.545: unexpected bad inode w/o EXT4_IGET_BAD [ 184.288819][ T6794] EXT4-fs (loop4): no journal found [ 184.288852][ T6794] EXT4-fs (loop4): can't get journal size [ 184.383214][ T6794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.700847][ T6470] device veth0_vlan entered promiscuous mode [ 184.761239][ T6470] device veth1_vlan entered promiscuous mode [ 185.206275][ T6468] device veth0_vlan entered promiscuous mode [ 185.219380][ T6468] device veth1_vlan entered promiscuous mode [ 185.244843][ T6468] device veth0_macvtap entered promiscuous mode [ 185.251419][ T6468] device veth1_macvtap entered promiscuous mode [ 185.257690][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.259678][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.261099][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.262676][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.264191][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.265801][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.272046][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.274754][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.276493][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.279883][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.281672][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.283206][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.284853][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.292778][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.295980][ T6468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.297720][ T6468] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.299185][ T6468] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.300582][ T6468] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.350492][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.351980][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.375220][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.376511][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.518034][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 185.519444][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.521150][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.522719][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.524183][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.525604][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.531894][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.533384][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.534828][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.536369][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.537948][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.539419][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.540863][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.542322][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.543686][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.545005][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.546281][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.552288][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.558273][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.559889][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.561238][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.561412][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.563761][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.565123][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.566822][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.616276][ T6470] device veth0_macvtap entered promiscuous mode [ 185.623180][ T6470] device veth1_macvtap entered promiscuous mode [ 185.625654][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.627410][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.628956][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.630395][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.662687][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.664298][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.665684][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.674933][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.681259][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.683068][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.684534][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.770076][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.009032][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.014818][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.019168][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.071855][ T6000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.076450][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.079713][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.081175][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.082807][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.084403][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.086139][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.092712][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.094177][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.108299][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.127141][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.130649][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.415923][ T6000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.541147][ T6470] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.542603][ T6470] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.544004][ T6470] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.545311][ T6470] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.594930][ T6839] loop4: detected capacity change from 0 to 512 [ 186.647522][ T6837] xt_nat: multiple ranges no longer supported [ 186.659478][ T6000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.683545][ T6839] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.550: inode #1: comm syz.4.550: iget: illegal inode # [ 186.708265][ T6839] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.550: error while reading EA inode 1 err=-117 [ 186.710950][ T6839] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.550: inode #1: comm syz.4.550: iget: illegal inode # [ 186.720745][ T6839] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.550: error while reading EA inode 1 err=-117 [ 186.723056][ T6839] EXT4-fs (loop4): 1 orphan inode deleted [ 186.724177][ T6839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.749145][ T6000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.778958][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.780298][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.784212][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.819548][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 186.923157][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.924444][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.927088][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.956332][ T6864] loop4: detected capacity change from 0 to 512 [ 187.966429][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.968790][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.090335][ T6864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.250198][ T6864] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.553: dir seems corrupt? Run e2fsck -D. [ 189.258743][ T6864] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.553: Directory index failed checksum [ 189.397272][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 189.398449][ T4329] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 189.407165][ T4329] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 189.408929][ T4329] EXT4-fs error (device loop4): ext4_quota_off:7115: inode #3: comm syz-executor: mark_inode_dirty error [ 189.415069][ T6907] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 189.423180][ T4329] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 189.427685][ T6907] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 189.451026][ T4329] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 189.467863][ T4329] EXT4-fs error (device loop4): ext4_quota_off:7115: inode #4: comm syz-executor: mark_inode_dirty error [ 189.803553][ T6930] loop6: detected capacity change from 0 to 2048 [ 189.883037][ T6930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.994167][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.566'. [ 190.059121][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.566'. [ 191.353631][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 193.203249][ T7016] loop4: detected capacity change from 0 to 16 [ 193.215170][ T7016] erofs: (device loop4): mounted with root inode @ nid 36. [ 194.212525][ T7026] loop4: detected capacity change from 0 to 256 [ 194.244095][ T7026] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.295515][ T7026] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.330671][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.333812][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.335544][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.338031][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.340053][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 194.341435][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.542495][ T7041] loop5: detected capacity change from 0 to 64 [ 196.097371][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 196.157850][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 196.397283][ T7088] loop7: detected capacity change from 0 to 128 [ 196.407048][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 196.909446][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.593'. [ 197.275408][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 197.292096][ T7097] loop5: detected capacity change from 0 to 2048 [ 197.339988][ T7084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.594'. [ 197.343430][ T7104] loop7: detected capacity change from 0 to 512 [ 197.442438][ T7097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 197.646144][ T7116] autofs4:pid:7116:autofs_fill_super: called with bogus options [ 197.855184][ T6461] EXT4-fs (loop5): unmounting filesystem. [ 198.208773][ T7140] loop5: detected capacity change from 0 to 256 [ 198.486841][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 198.830340][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.832821][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.841134][ T7027] device bridge_slave_0 entered promiscuous mode [ 198.860678][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.868445][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.873927][ T7027] device bridge_slave_1 entered promiscuous mode [ 198.972615][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.001777][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.106478][ T7027] team0: Port device team_slave_0 added [ 199.132560][ T7027] team0: Port device team_slave_1 added [ 199.309284][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.310402][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.314373][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.327745][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.328836][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.335064][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.121569][ T7204] loop7: detected capacity change from 0 to 512 [ 200.138803][ T7204] [ 200.139232][ T7204] ====================================================== [ 200.140261][ T7204] WARNING: possible circular locking dependency detected [ 200.141195][ T7204] syzkaller #0 Not tainted [ 200.141803][ T7204] ------------------------------------------------------ [ 200.142833][ T7204] syz.7.615/7204 is trying to acquire lock: [ 200.143745][ T7204] ffff0000d8f22b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 200.145311][ T7204] [ 200.145311][ T7204] but task is already holding lock: [ 200.146404][ T7204] ffff0000e20ca8e8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 200.147848][ T7204] [ 200.147848][ T7204] which lock already depends on the new lock. [ 200.147848][ T7204] [ 200.149276][ T7204] [ 200.149276][ T7204] the existing dependency chain (in reverse order) is: [ 200.150533][ T7204] [ 200.150533][ T7204] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 200.151593][ T7204] down_write+0x5c/0x88 [ 200.152266][ T7204] ext4_destroy_inline_data+0x30/0x11c [ 200.153059][ T7204] ext4_writepages+0x3f4/0x284c [ 200.153864][ T7204] do_writepages+0x2c0/0x4fc [ 200.154541][ T7204] __writeback_single_inode+0x164/0x157c [ 200.155367][ T7204] writeback_sb_inodes+0x824/0x1404 [ 200.156135][ T7204] wb_writeback+0x400/0xfb0 [ 200.156887][ T7204] wb_workfn+0x34c/0xd98 [ 200.157601][ T7204] process_one_work+0x7f4/0x13a8 [ 200.158411][ T7204] worker_thread+0x8c8/0xfbc [ 200.159207][ T7204] kthread+0x250/0x2d8 [ 200.159915][ T7204] ret_from_fork+0x10/0x20 [ 200.160699][ T7204] [ 200.160699][ T7204] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 200.161916][ T7204] __lock_acquire+0x293c/0x6544 [ 200.162782][ T7204] lock_acquire+0x20c/0x644 [ 200.163565][ T7204] percpu_down_read+0x70/0x2a8 [ 200.164349][ T7204] ext4_writepages+0x188/0x284c [ 200.165130][ T7204] do_writepages+0x2c0/0x4fc [ 200.165870][ T7204] __writeback_single_inode+0x164/0x157c [ 200.166791][ T7204] writeback_single_inode+0x1c0/0x720 [ 200.167652][ T7204] write_inode_now+0x144/0x1b0 [ 200.168419][ T7204] iput+0x5cc/0x7f4 [ 200.169040][ T7204] ext4_xattr_block_set+0x17a4/0x2810 [ 200.169891][ T7204] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 200.170839][ T7204] __ext4_expand_extra_isize+0x298/0x358 [ 200.171745][ T7204] __ext4_mark_inode_dirty+0x3e4/0x790 [ 200.172647][ T7204] ext4_evict_inode+0xb58/0x1270 [ 200.173446][ T7204] evict+0x3c8/0x810 [ 200.174133][ T7204] iput+0x764/0x7f4 [ 200.174770][ T7204] ext4_process_orphan+0x240/0x2b4 [ 200.175605][ T7204] ext4_orphan_cleanup+0x908/0x104c [ 200.176431][ T7204] ext4_fill_super+0x6440/0x68a8 [ 200.177271][ T7204] get_tree_bdev+0x358/0x544 [ 200.178070][ T7204] ext4_get_tree+0x28/0x38 [ 200.178768][ T7204] vfs_get_tree+0x90/0x274 [ 200.179366][ T7207] loop5: detected capacity change from 0 to 16 [ 200.179463][ T7204] do_new_mount+0x228/0x810 [ 200.181097][ T7204] path_mount+0x5b4/0xe78 [ 200.181831][ T7204] __arm64_sys_mount+0x49c/0x584 [ 200.182654][ T7204] invoke_syscall+0x98/0x2bc [ 200.183359][ T7207] erofs: (device loop5): mounted with root inode @ nid 36. [ 200.183387][ T7204] el0_svc_common+0x138/0x258 [ 200.185330][ T7204] do_el0_svc+0x58/0x13c [ 200.185982][ T7204] el0_svc+0x58/0x138 [ 200.186623][ T7204] el0t_64_sync_handler+0x84/0xf0 [ 200.187363][ T7204] el0t_64_sync+0x18c/0x190 [ 200.188139][ T7204] [ 200.188139][ T7204] other info that might help us debug this: [ 200.188139][ T7204] [ 200.189659][ T7204] Possible unsafe locking scenario: [ 200.189659][ T7204] [ 200.190660][ T7204] CPU0 CPU1 [ 200.191394][ T7204] ---- ---- [ 200.192225][ T7204] lock(&ei->xattr_sem); [ 200.192862][ T7204] lock(&sbi->s_writepages_rwsem); [ 200.194121][ T7204] lock(&ei->xattr_sem); [ 200.195162][ T7204] lock(&sbi->s_writepages_rwsem); [ 200.195958][ T7204] [ 200.195958][ T7204] *** DEADLOCK *** [ 200.195958][ T7204] [ 200.197165][ T7204] 3 locks held by syz.7.615/7204: [ 200.197943][ T7204] #0: ffff0000d8f240e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 200.199420][ T7204] #1: ffff0000d8f24650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 200.200742][ T7204] #2: ffff0000e20ca8e8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 200.202268][ T7204] [ 200.202268][ T7204] stack backtrace: [ 200.203097][ T7204] CPU: 1 PID: 7204 Comm: syz.7.615 Not tainted syzkaller #0 [ 200.204165][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 200.205641][ T7204] Call trace: [ 200.206133][ T7204] dump_backtrace+0x1c8/0x1f4 [ 200.206719][ T7204] show_stack+0x2c/0x3c [ 200.207284][ T7204] __dump_stack+0x30/0x40 [ 200.207911][ T7204] dump_stack_lvl+0xf8/0x160 [ 200.208522][ T7204] dump_stack+0x1c/0x5c [ 200.209135][ T7204] print_circular_bug+0x148/0x1b0 [ 200.209876][ T7204] check_noncircular+0x240/0x2d4 [ 200.210601][ T7204] __lock_acquire+0x293c/0x6544 [ 200.211336][ T7204] lock_acquire+0x20c/0x644 [ 200.211957][ T7204] percpu_down_read+0x70/0x2a8 [ 200.212660][ T7204] ext4_writepages+0x188/0x284c [ 200.213407][ T7204] do_writepages+0x2c0/0x4fc [ 200.214090][ T7204] __writeback_single_inode+0x164/0x157c [ 200.214924][ T7204] writeback_single_inode+0x1c0/0x720 [ 200.215736][ T7204] write_inode_now+0x144/0x1b0 [ 200.216473][ T7204] iput+0x5cc/0x7f4 [ 200.217033][ T7204] ext4_xattr_block_set+0x17a4/0x2810 [ 200.217801][ T7204] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 200.218728][ T7204] __ext4_expand_extra_isize+0x298/0x358 [ 200.219653][ T7204] __ext4_mark_inode_dirty+0x3e4/0x790 [ 200.220588][ T7204] ext4_evict_inode+0xb58/0x1270 [ 200.221390][ T7204] evict+0x3c8/0x810 [ 200.222019][ T7204] iput+0x764/0x7f4 [ 200.222609][ T7204] ext4_process_orphan+0x240/0x2b4 [ 200.223401][ T7204] ext4_orphan_cleanup+0x908/0x104c [ 200.224131][ T7204] ext4_fill_super+0x6440/0x68a8 [ 200.224884][ T7204] get_tree_bdev+0x358/0x544 [ 200.225547][ T7204] ext4_get_tree+0x28/0x38 [ 200.226158][ T7204] vfs_get_tree+0x90/0x274 [ 200.226836][ T7204] do_new_mount+0x228/0x810 [ 200.227550][ T7204] path_mount+0x5b4/0xe78 [ 200.228191][ T7204] __arm64_sys_mount+0x49c/0x584 [ 200.228907][ T7204] invoke_syscall+0x98/0x2bc [ 200.229593][ T7204] el0_svc_common+0x138/0x258 [ 200.230402][ T7204] do_el0_svc+0x58/0x13c [ 200.231144][ T7204] el0_svc+0x58/0x138 [ 200.231783][ T7204] el0t_64_sync_handler+0x84/0xf0 [ 200.232578][ T7204] el0t_64_sync+0x18c/0x190 [ 200.242965][ T6000] device hsr_slave_0 left promiscuous mode [ 200.246310][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #11: comm syz.7.615: iget: bad extra_isize 90 (inode size 256) [ 200.248751][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.249810][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.615: error while reading EA inode 11 err=-117 [ 200.251848][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.252913][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #11: comm syz.7.615: iget: bad extra_isize 90 (inode size 256) [ 200.255137][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.256220][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.615: error while reading EA inode 11 err=-117 [ 200.259906][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.261025][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #18: comm syz.7.615: iget: bad extra_isize 90 (inode size 256) [ 200.263215][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.264367][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.615: error while reading EA inode 18 err=-117 [ 200.266495][ T7204] EXT4-fs (loop7): Remounting filesystem read-only SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 200.314775][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #18: comm syz.7.615: iget: bad extra_isize 90 (inode size 256) [ 200.318820][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.319853][ T7204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.615: error while reading EA inode 18 err=-117 [ 200.321929][ T7204] EXT4-fs (loop7): Remounting filesystem read-only [ 200.324546][ T7204] EXT4-fs (loop7): 1 orphan inode deleted [ 200.325502][ T7204] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 200.346529][ T6000] device hsr_slave_1 left promiscuous mode [ 200.349485][ T7204] EXT4-fs (loop7): unmounting filesystem. [ 200.406709][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.408351][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.411609][ T6000] device bridge_slave_1 left promiscuous mode [ 200.412482][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.437027][ T6000] device bridge_slave_0 left promiscuous mode [ 200.438066][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.486428][ T6000] device hsr_slave_0 left promiscuous mode [ 200.526728][ T6000] device hsr_slave_1 left promiscuous mode [ 200.566634][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 200.606678][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.607921][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.609461][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.610520][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.611730][ T6000] device bridge_slave_1 left promiscuous mode [ 200.612727][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.648967][ T6000] device bridge_slave_0 left promiscuous mode [ 200.650039][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.796696][ T6000] device veth1_macvtap left promiscuous mode [ 200.797656][ T6000] device veth0_macvtap left promiscuous mode [ 200.798517][ T6000] device veth1_vlan left promiscuous mode [ 200.799402][ T6000] device veth0_vlan left promiscuous mode [ 202.577100][ T6000] team0 (unregistering): Port device team_slave_1 removed [ 202.646604][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 202.747470][ T6000] team0 (unregistering): Port device team_slave_0 removed [ 202.928009][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.126948][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.478082][ T6000] bond0 (unregistering): Released all slaves [ 207.417112][ T6000] team0 (unregistering): Port device team_slave_1 removed [ 207.587099][ T6000] team0 (unregistering): Port device team_slave_0 removed [ 207.768869][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.976966][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface