last executing test programs: 2m15.509881135s ago: executing program 3 (id=34): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0xa, @pix={0x4, 0x0, 0xb5315241, 0x7, 0x5, 0x3, 0x9, 0x7, 0x1, 0x4, 0x0, 0x5}}, 0x10000}) 2m15.460345326s ago: executing program 3 (id=36): socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdc01, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x5, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x7, 0x6, "6e901a"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x8058) 2m14.560572517s ago: executing program 3 (id=51): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xfffe, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="15d8000065ffff002000000800"], 0x15) 2m13.736644087s ago: executing program 3 (id=67): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) 2m13.600579441s ago: executing program 3 (id=69): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000002000)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000008000)=""/10, 0xa) 2m13.015697574s ago: executing program 3 (id=82): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x9, 0x0, {0xff, 0x3ff, 0x1017, 0x90, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x40, 0x9, 0x1401, 0x9aa5, "cb630dab3a0338057401a19241951ead1f50be109c34b204d11ab8f01c0e0e7a"}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0, r2}) 2m12.977333705s ago: executing program 32 (id=82): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x9, 0x0, {0xff, 0x3ff, 0x1017, 0x90, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x40, 0x9, 0x1401, 0x9aa5, "cb630dab3a0338057401a19241951ead1f50be109c34b204d11ab8f01c0e0e7a"}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0, r2}) 1m18.017589047s ago: executing program 2 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 1m17.635500706s ago: executing program 2 (id=512): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x6b}, 0x0) 1m17.573996987s ago: executing program 2 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 1m16.536805802s ago: executing program 2 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r3], 0x38}}, 0x4c8c4) 1m16.403193785s ago: executing program 2 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 1m16.007612204s ago: executing program 2 (id=525): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fat=@flush}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@check_normal}, {@rodir}, {@numtail}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 1m0.857789043s ago: executing program 33 (id=525): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fat=@flush}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@check_normal}, {@rodir}, {@numtail}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 42.324429412s ago: executing program 5 (id=737): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012042, &(0x7f00000003c0)=@rc={0x1f, @any, 0x5}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 41.470468643s ago: executing program 5 (id=746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000580)="36311e0e6f387242aa7b6a45a4adc44a1c3b834f06af2fc084b2225aadb0b329cea566fac35a86d3b3bd22eecec52d511dcf5f3786ed82cc402ed5a4427b3b1753509150678fcf919c3bb1bdc266588332ee720a"}) 41.420314604s ago: executing program 5 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7, 0x0, 0x0, 0x0, 0x85ffffff}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 40.501128906s ago: executing program 5 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xaa1053, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x185093, 0x0) 40.420654448s ago: executing program 5 (id=763): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 39.556724929s ago: executing program 5 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r4], 0x38}}, 0x4c8c4) 39.344867494s ago: executing program 34 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r4], 0x38}}, 0x4c8c4) 36.054732223s ago: executing program 4 (id=800): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) 35.984616566s ago: executing program 4 (id=801): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_create_resource$binfmt(0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @remote, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 35.154840405s ago: executing program 4 (id=807): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012042, &(0x7f00000003c0)=@rc={0x1f, @any, 0x5}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 35.035736288s ago: executing program 4 (id=808): syz_open_dev$loop(0x0, 0x6, 0x800) r0 = getpid() semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000080)='net/if_inet6\x00') read$FUSE(r4, &(0x7f0000002a40)={0x2020}, 0x2020) 33.461734967s ago: executing program 4 (id=813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000580)="36311e0e6f387242aa7b6a45a4adc44a1c3b834f06af2fc084b2225aadb0b329cea566fac35a86d3b3bd22eecec52d511dcf5f3786ed82cc402ed5a4427b3b1753509150678fcf919c3bb1bdc266588332ee720a"}) 33.379713049s ago: executing program 4 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) 18.281002176s ago: executing program 35 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) 4.329377785s ago: executing program 6 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7, 0x0, 0x0, 0x0, 0x85ffffff}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 3.121859005s ago: executing program 8 (id=1036): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000017c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) readv(r0, &(0x7f0000003840)=[{0x0, 0x500}, {&(0x7f0000000180)=""/99, 0x63}], 0x2) 3.072557126s ago: executing program 8 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 2.968106349s ago: executing program 8 (id=1039): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1b", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 2.887040511s ago: executing program 8 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 2.718050645s ago: executing program 6 (id=1045): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012042, &(0x7f00000003c0)=@rc={0x1f, @any, 0x5}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) socket(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 2.565397229s ago: executing program 6 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='1', 0x1) write$FUSE_INIT(r0, &(0x7f0000004d40)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x101, 0x800000, 0x9, 0x1, 0x2, 0x8000, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x71) write(r1, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00', 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tipc={{0xf, 0x4, 0x0, 0x3c, 0x68, 0x65, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0xd, [{@local, 0x10000}, {@multicast1, 0xae3d}, {@multicast1, 0x80000000}]}, @ssrr={0x89, 0x7, 0xc5, [@rand_addr=0x64010101]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e23}, 0x1}, 0x1}, 0x2000001}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000000000040000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) unshare(0x62040200) 1.975215743s ago: executing program 8 (id=1053): syz_open_dev$loop(0x0, 0x6, 0x800) r0 = getpid() semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000080)='net/if_inet6\x00') read$FUSE(r4, &(0x7f0000002a40)={0x2020}, 0x2020) 1.864704855s ago: executing program 7 (id=1054): unshare(0x400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(r0, 0xee00, 0x0) 1.847831906s ago: executing program 7 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7, 0x0, 0x0, 0x0, 0x85ffffff}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 1.609960352s ago: executing program 1 (id=1056): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012042, &(0x7f00000003c0)=@rc={0x1f, @any, 0x5}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) socket(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 1.560899433s ago: executing program 0 (id=1057): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x4f) setgid(r1) 1.401411607s ago: executing program 0 (id=1058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000580)="36311e0e6f387242aa7b6a45a4adc44a1c3b834f06af2fc084b2225aadb0b329cea566fac35a86d3b3bd22eecec52d511dcf5f3786ed82cc402ed5a4427b3b1753509150678fcf919c3bb1bdc266588332ee720a"}) 1.400364607s ago: executing program 1 (id=1059): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040002"], 0x0, 0x50}, 0x28) 1.28072797s ago: executing program 1 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 1.26351456s ago: executing program 0 (id=1061): socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(r0, 0xee01, r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x94, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x800}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x7, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0x10, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x5, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x10000009, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x400000, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.180314402s ago: executing program 1 (id=1062): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc708", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 1.135130883s ago: executing program 1 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 1.008776576s ago: executing program 0 (id=1064): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') lseek(r0, 0x1000000, 0x0) 1.008599266s ago: executing program 0 (id=1065): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) readv(r0, 0x0, 0x0) 957.106777ms ago: executing program 0 (id=1066): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x20e, 0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3818014, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000240)={[{@fat=@errors_remount}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f8, &(0x7f0000000580)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e}) 771.986642ms ago: executing program 8 (id=1067): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 605.782156ms ago: executing program 7 (id=1068): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8200a00060001000101"], 0xf) 492.757979ms ago: executing program 7 (id=1069): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8) 476.635939ms ago: executing program 7 (id=1070): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012042, &(0x7f00000003c0)=@rc={0x1f, @any, 0x5}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) socket(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 361.317842ms ago: executing program 6 (id=1071): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000580)="36311e0e6f387242aa7b6a45a4adc44a1c3b834f06af2fc084b2225aadb0b329cea566fac35a86d3b3bd22eecec52d511dcf5f3786ed82cc402ed5a4427b3b1753509150678fcf919c3bb1bdc266588332ee720a"}) 284.116084ms ago: executing program 7 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 185.913916ms ago: executing program 6 (id=1073): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc708", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 168.773987ms ago: executing program 1 (id=1074): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x8}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x502520}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x4, 0x0, 0x0) write(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b33, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1', 0x12) 0s ago: executing program 6 (id=1075): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000440)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@usrjquota}]}, 0x1, 0x516, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) fallocate(r0, 0x0, 0x0, 0x90001) write$binfmt_script(r0, &(0x7f0000000b00)={'#! ', './file1'}, 0xb) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): man_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.664051][ T6458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.974053][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.629'. [ 113.005279][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 113.115916][ T6520] xt_NFQUEUE: number of total queues is 0 [ 113.851265][ T6458] device hsr_slave_0 entered promiscuous mode [ 113.901713][ T6458] device hsr_slave_1 entered promiscuous mode [ 113.941359][ T6458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.943215][ T6458] Cannot create hsr debugfs directory [ 114.023810][ T5293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.192678][ T5293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.430953][ T6542] binder: 6541:6542 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 114.436723][ T6542] binder: 6541:6542 got transaction to invalid handle, 1 [ 114.437868][ T6542] binder: 6542:6541 cannot find target node [ 114.438832][ T6542] binder: 6541:6542 transaction async to 0:0 failed 135/29201/-22, size 0-0 line 3062 [ 114.463239][ T5293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.475807][ T6544] loop1: detected capacity change from 0 to 512 [ 114.487276][ T6544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.505070][ T6544] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.506850][ T6544] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.508761][ T6544] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 114.510393][ T6544] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 114.512233][ T6544] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.640: Failed to acquire dquot type 1 [ 114.514510][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.516237][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.640: corrupted inode contents [ 114.518522][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.519686][ T6544] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.640: mark_inode_dirty error [ 114.522495][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.523866][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.640: corrupted inode contents [ 114.526127][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.527306][ T6544] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.640: mark_inode_dirty error [ 114.529419][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.530607][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.640: corrupted inode contents [ 114.532274][ T5293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.535112][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.536308][ T6544] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 114.538044][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.539223][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.640: corrupted inode contents [ 114.544483][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.545660][ T6544] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.640: mark_inode_dirty error [ 114.547891][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.548963][ T6544] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 114.550649][ T6544] EXT4-fs (loop1): Remounting filesystem read-only [ 114.552442][ T6544] EXT4-fs (loop1): 1 truncate cleaned up [ 114.553549][ T6544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.567030][ T6458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.634099][ T6458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.963110][ T4344] Bluetooth: hci5: command 0x041b tx timeout [ 114.978317][ T6458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 115.019898][ T6556] loop5: detected capacity change from 0 to 1024 [ 115.021471][ T6556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.024930][ T6458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.036772][ T6556] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 115.128561][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.133690][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.138382][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.153668][ T6458] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.156350][ T4620] EXT4-fs (loop5): unmounting filesystem. [ 115.157458][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.159171][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.160701][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.161920][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.166127][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.184088][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.187387][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.190880][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.192064][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.207537][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.211222][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.215971][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.219255][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.221248][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.223662][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.228804][ T6458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.230601][ T6458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.276448][ T6571] xt_NFQUEUE: number of total queues is 0 [ 115.331728][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 115.361729][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.646'. [ 115.764395][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.766260][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.767905][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.770116][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.772741][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.783974][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.161633][ T6595] binder: 6591:6595 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 116.173575][ T6595] binder: 6591:6595 got transaction to invalid handle, 1 [ 116.174620][ T6595] binder: 6595:6591 cannot find target node [ 116.175502][ T6595] binder: 6591:6595 transaction call to 0:0 failed 137/29201/-22, size 0-24 line 3062 [ 116.347656][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.348993][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.358239][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.949383][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.951222][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.967199][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.968974][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.970941][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.972370][ T4332] Bluetooth: hci5: command 0x040f tx timeout [ 116.981016][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.018707][ T6458] device veth0_vlan entered promiscuous mode [ 117.024197][ T6458] device veth1_vlan entered promiscuous mode [ 117.036151][ T6458] device veth0_macvtap entered promiscuous mode [ 117.038401][ T6458] device veth1_macvtap entered promiscuous mode [ 117.131925][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.133764][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.135086][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.136821][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.138286][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.166988][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.168829][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.170268][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.172225][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.173603][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.175154][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.176593][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.178063][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.213317][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.236809][ T6653] loop1: detected capacity change from 0 to 512 [ 117.253352][ T6653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.255955][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.257427][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.259237][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.262345][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.263961][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.265440][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.266952][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.331370][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.537853][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.546758][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.556262][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.558583][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.560697][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.564219][ T6653] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 117.567003][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.568639][ T6653] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.573907][ T6653] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 117.574293][ T6458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.575636][ T6653] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 117.576805][ T6458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.579271][ T6653] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.655: Failed to acquire dquot type 1 [ 117.579504][ T6458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.583306][ T6458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.620239][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.646401][ T6653] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.655: corrupted inode contents [ 117.655833][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.657982][ T6653] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.655: mark_inode_dirty error [ 117.664555][ T6660] xt_NFQUEUE: number of total queues is 0 [ 117.665561][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.668825][ T6653] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.655: corrupted inode contents [ 117.678086][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.679420][ T6653] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.655: mark_inode_dirty error [ 117.749136][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.750395][ T6653] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.655: corrupted inode contents [ 117.754931][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.755909][ T6653] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 117.757953][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.758978][ T6653] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.655: corrupted inode contents [ 117.761039][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.762977][ T6653] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.655: mark_inode_dirty error [ 117.764814][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.765877][ T6653] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 117.767363][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 117.768667][ T6653] EXT4-fs (loop1): 1 truncate cleaned up [ 117.769637][ T6653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.345726][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 118.385107][ T6683] binder: 6682:6683 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 118.387920][ T6683] binder: 6682:6683 got transaction to invalid handle, 1 [ 118.388906][ T6683] binder: 6683:6682 cannot find target node [ 118.389786][ T6683] binder: 6682:6683 transaction call to 0:0 failed 139/29201/-22, size 0-24 line 3062 [ 118.504225][ T4659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.505587][ T4659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.509801][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.716444][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.717913][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.719961][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.051370][ T4332] Bluetooth: hci5: command 0x0419 tx timeout [ 119.533571][ T5293] device hsr_slave_0 left promiscuous mode [ 119.540070][ T6726] xt_NFQUEUE: number of total queues is 0 [ 119.610721][ T5293] device hsr_slave_1 left promiscuous mode [ 120.141765][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.143224][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.147175][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.148350][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.166257][ T5293] device bridge_slave_1 left promiscuous mode [ 120.240782][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.327386][ T5293] device bridge_slave_0 left promiscuous mode [ 120.328563][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.370667][ T6738] loop5: detected capacity change from 0 to 512 [ 120.373758][ T6736] xt_NFQUEUE: number of total queues is 0 [ 120.387374][ T6738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.444789][ T6742] binder: 6741:6742 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 120.449558][ T6742] binder: 6741:6742 got transaction to invalid handle, 1 [ 120.450714][ T6742] binder: 6742:6741 cannot find target node [ 120.475430][ T6742] binder: 6741:6742 transaction call to 0:0 failed 141/29201/-22, size 0-24 line 3062 [ 120.491749][ T5293] device veth1_macvtap left promiscuous mode [ 120.492768][ T5293] device veth0_macvtap left promiscuous mode [ 120.493759][ T5293] device veth1_vlan left promiscuous mode [ 120.494658][ T5293] device veth0_vlan left promiscuous mode [ 120.504548][ T6738] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 120.508264][ T6738] EXT4-fs (loop5): orphan cleanup on readonly fs [ 120.844110][ T6738] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 120.845619][ T6738] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 120.847008][ T6738] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.669: Failed to acquire dquot type 1 [ 120.849791][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.852900][ T6738] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.669: corrupted inode contents [ 120.860810][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.863382][ T6738] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #16: comm syz.5.669: mark_inode_dirty error [ 120.866980][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.868147][ T6738] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.669: corrupted inode contents [ 120.872151][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.872423][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.6.675'. [ 120.873100][ T6738] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.669: mark_inode_dirty error [ 120.877823][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.895221][ T6738] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.669: corrupted inode contents [ 120.897273][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.898251][ T6738] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 120.901358][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.902345][ T6738] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.669: corrupted inode contents [ 120.906384][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.907414][ T6738] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.669: mark_inode_dirty error [ 120.914445][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.915452][ T6738] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 120.917055][ T6738] EXT4-fs (loop5): Remounting filesystem read-only [ 120.921098][ T6738] EXT4-fs (loop5): 1 truncate cleaned up [ 120.922162][ T6738] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 121.309378][ T4620] EXT4-fs (loop5): unmounting filesystem. [ 121.438096][ T6765] loop0: detected capacity change from 0 to 2048 [ 121.472432][ T6765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.480970][ T6765] fs-verity: sha512 using implementation "sha512-ce" [ 121.552028][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 122.200548][ T6779] xt_NFQUEUE: number of total queues is 0 [ 122.358750][ T6784] binder: 6783:6784 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 122.366209][ T6784] binder: 6783:6784 got transaction to invalid handle, 1 [ 122.367342][ T6784] binder: 6784:6783 cannot find target node [ 122.368185][ T6784] binder: 6783:6784 transaction call to 0:0 failed 143/29201/-22, size 0-24 line 3062 [ 122.415130][ T6786] xt_NFQUEUE: number of total queues is 0 [ 122.569930][ T6792] loop4: detected capacity change from 0 to 512 [ 122.581124][ T6792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.594178][ T6792] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 122.595846][ T6792] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.598621][ T6792] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 122.600158][ T6792] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 122.612294][ T6792] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.688: Failed to acquire dquot type 1 [ 122.618534][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.626844][ T6792] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.688: corrupted inode contents [ 122.632914][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.633834][ T6792] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #16: comm syz.4.688: mark_inode_dirty error [ 122.642815][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.644056][ T6792] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.688: corrupted inode contents [ 122.646281][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.647433][ T6792] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.688: mark_inode_dirty error [ 122.649263][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.650492][ T6792] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.688: corrupted inode contents [ 122.653861][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.654937][ T6792] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 122.656655][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.657825][ T6792] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.688: corrupted inode contents [ 122.659751][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.660883][ T6792] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.688: mark_inode_dirty error [ 122.668469][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.669685][ T6792] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 122.674286][ T6792] EXT4-fs (loop4): Remounting filesystem read-only [ 122.675618][ T6792] EXT4-fs (loop4): 1 truncate cleaned up [ 122.676699][ T6792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.385488][ T6807] loop0: detected capacity change from 0 to 256 [ 123.687488][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 124.076729][ T6818] binder: 6817:6818 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 124.090599][ T6818] binder: 6817:6818 got transaction to invalid handle, 1 [ 124.091819][ T6818] binder: 6818:6817 cannot find target node [ 124.093336][ T6818] binder: 6817:6818 transaction call to 0:0 failed 145/29201/-22, size 0-24 line 3062 [ 124.139997][ T6820] xt_NFQUEUE: number of total queues is 0 [ 124.157538][ T5293] team0 (unregistering): Port device team_slave_1 removed [ 124.215768][ T6822] xt_NFQUEUE: number of total queues is 0 [ 124.402686][ T5293] team0 (unregistering): Port device team_slave_0 removed [ 124.601769][ T5293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.841930][ T5293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.234648][ T6837] loop1: detected capacity change from 0 to 512 [ 125.243839][ T6837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.253245][ T6837] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.254867][ T6837] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.273489][ T6837] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 125.275301][ T6837] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 125.276899][ T6837] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.703: Failed to acquire dquot type 1 [ 125.279717][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.300968][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.703: corrupted inode contents [ 125.304362][ T6841] syz.5.704 sent an empty control message without MSG_MORE. [ 125.314626][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.315716][ T6837] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.703: mark_inode_dirty error [ 125.317871][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.318819][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.703: corrupted inode contents [ 125.320958][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.325388][ T6843] loop5: detected capacity change from 0 to 128 [ 125.327224][ T6837] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.703: mark_inode_dirty error [ 125.329613][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.330663][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.703: corrupted inode contents [ 125.333724][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.334641][ T6837] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 125.336068][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.337040][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.703: corrupted inode contents [ 125.339232][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.340450][ T6837] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.703: mark_inode_dirty error [ 125.342829][ T6843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 125.344357][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.345335][ T6837] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 125.351138][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 125.354209][ T6837] EXT4-fs (loop1): 1 truncate cleaned up [ 125.355432][ T6837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.425841][ T4620] EXT4-fs (loop5): unmounting filesystem. [ 125.465866][ T6850] binder: 6849:6850 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 125.468666][ T6850] binder: 6849:6850 got transaction to invalid handle, 1 [ 125.469755][ T6850] binder: 6850:6849 cannot find target node [ 125.470710][ T6850] binder: 6849:6850 transaction call to 0:0 failed 147/29201/-22, size 0-24 line 3062 [ 125.555739][ T6854] xt_NFQUEUE: number of total queues is 0 [ 125.931737][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.947092][ T6859] xt_NFQUEUE: number of total queues is 0 [ 126.109944][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 126.872951][ T5293] bond0 (unregistering): Released all slaves [ 127.168517][ T6877] input: syz0 as /devices/virtual/input/input2 [ 127.242409][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 127.256387][ T6881] binder: 6880:6881 ioctl 4018620d 0 returned -22 [ 127.258057][ T6881] binder: 6880:6881 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 127.260729][ T6881] binder: 6880:6881 got transaction to invalid handle, 1 [ 127.265491][ T6881] binder: 6881:6880 cannot find target node [ 127.267372][ T6881] binder: 6880:6881 transaction async to 0:0 failed 150/29201/-22, size 0-0 line 3062 [ 127.302576][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 127.304129][ T6885] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 127.335753][ T6888] xt_NFQUEUE: number of total queues is 0 [ 127.357071][ T6891] xt_NFQUEUE: number of total queues is 0 [ 127.457483][ T6895] loop0: detected capacity change from 0 to 512 [ 127.459382][ T6895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.484286][ T6895] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 127.486071][ T6895] EXT4-fs (loop0): orphan cleanup on readonly fs [ 127.488087][ T6895] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 127.489715][ T6895] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 127.493815][ T6895] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.723: Failed to acquire dquot type 1 [ 127.497710][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.506923][ T6895] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.723: corrupted inode contents [ 127.512675][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.515873][ T6895] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.723: mark_inode_dirty error [ 127.520246][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.525336][ T6895] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.723: corrupted inode contents [ 127.529501][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.530949][ T6895] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.723: mark_inode_dirty error [ 127.538026][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.539156][ T6895] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.723: corrupted inode contents [ 127.541195][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.542375][ T6895] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 127.543979][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.545091][ T6895] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.723: corrupted inode contents [ 127.547152][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.548285][ T6895] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.723: mark_inode_dirty error [ 127.550134][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.551135][ T6895] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 127.554928][ T6895] EXT4-fs (loop0): Remounting filesystem read-only [ 127.556456][ T6895] EXT4-fs (loop0): 1 truncate cleaned up [ 127.557655][ T6895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.321980][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 128.355541][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.729'. [ 128.374499][ T6960] binder: 6959:6960 ioctl 4018620d 0 returned -22 [ 128.379403][ T6960] binder: 6959:6960 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 128.394153][ T6960] binder: 6959:6960 got transaction to invalid handle, 1 [ 128.395295][ T6960] binder: 6960:6959 cannot find target node [ 128.396285][ T6960] binder: 6959:6960 transaction async to 0:0 failed 153/29201/-22, size 0-0 line 3062 [ 128.481217][ T6967] xt_NFQUEUE: number of total queues is 0 [ 128.590222][ T6969] mmap: syz.6.731 (6969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.968835][ T6981] xt_NFQUEUE: number of total queues is 0 [ 129.286640][ T6990] loop6: detected capacity change from 0 to 512 [ 129.437281][ T6990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a81ec018, mo2=0002] [ 129.438852][ T6990] System zones: 0-2, 18-18, 34-35 [ 129.441775][ T6990] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 129.462467][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 129.487263][ T7003] loop6: detected capacity change from 0 to 512 [ 129.498319][ T7003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.502618][ T7003] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 129.504374][ T7003] EXT4-fs (loop6): orphan cleanup on readonly fs [ 129.506296][ T7003] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 129.507722][ T7003] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 129.509276][ T7003] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.743: Failed to acquire dquot type 1 [ 129.511957][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.522151][ T7003] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.743: corrupted inode contents [ 129.524266][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.525792][ T7003] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.743: mark_inode_dirty error [ 129.530080][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.535306][ T7003] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.743: corrupted inode contents [ 129.539329][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.541505][ T7003] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.743: mark_inode_dirty error [ 129.545478][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.546732][ T7003] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.743: corrupted inode contents [ 129.550629][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.552444][ T7003] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 129.554203][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.555201][ T7003] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.743: corrupted inode contents [ 129.557299][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.558307][ T7003] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.743: mark_inode_dirty error [ 129.560151][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.561123][ T7003] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 129.563235][ T7003] EXT4-fs (loop6): Remounting filesystem read-only [ 129.564625][ T7003] EXT4-fs (loop6): 1 truncate cleaned up [ 129.565658][ T7003] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 129.716043][ T7010] netlink: 156 bytes leftover after parsing attributes in process `syz.1.744'. [ 129.718951][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 129.743390][ T7012] xt_NFQUEUE: number of total queues is 0 [ 129.847170][ T7014] binder: 7013:7014 ioctl 4018620d 0 returned -22 [ 129.852795][ T7014] binder: 7013:7014 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 129.860058][ T7014] binder: 7013:7014 got transaction to invalid handle, 1 [ 129.862973][ T7014] binder: 7014:7013 cannot find target node [ 129.864099][ T7014] binder: 7013:7014 transaction async to 0:0 failed 156/29201/-22, size 0-0 line 3062 [ 130.343814][ T7038] netlink: 156 bytes leftover after parsing attributes in process `syz.0.755'. [ 130.346939][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 130.347446][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 130.389182][ T7040] xt_NFQUEUE: number of total queues is 0 [ 130.408099][ T7042] xt_NFQUEUE: number of total queues is 0 [ 130.521892][ T7045] random: crng reseeded on system resumption [ 130.694159][ T7050] binder: BINDER_SET_CONTEXT_MGR already set [ 130.695210][ T7050] binder: 7049:7050 ioctl 4018620d 20000040 returned -16 [ 130.697169][ T7050] binder: 7049:7050 got transaction to invalid handle, 1 [ 130.698867][ T7050] binder: 7050:7049 cannot find target node [ 130.699784][ T7050] binder: 7049:7050 transaction async to 0:0 failed 158/29201/-22, size 0-0 line 3062 [ 130.706149][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.857944][ T7058] loop1: detected capacity change from 0 to 256 [ 131.796354][ T7065] loop6: detected capacity change from 0 to 512 [ 131.823932][ T7065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.854690][ T7065] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 131.856455][ T7065] EXT4-fs (loop6): orphan cleanup on readonly fs [ 131.858369][ T7065] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 131.868451][ T7065] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 131.877596][ T7065] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.766: Failed to acquire dquot type 1 [ 131.889079][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 131.895636][ T7065] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.766: corrupted inode contents [ 131.907931][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 131.912347][ T7065] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.766: mark_inode_dirty error [ 131.921030][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 131.930657][ T7065] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.766: corrupted inode contents [ 131.940378][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 131.947552][ T7065] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.766: mark_inode_dirty error [ 131.955322][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 131.959700][ T7065] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.766: corrupted inode contents [ 131.984502][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 131.989935][ T7065] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 131.998391][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 132.004738][ T7065] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.766: corrupted inode contents [ 132.016783][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 132.021179][ T7065] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.766: mark_inode_dirty error [ 132.032706][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 132.037076][ T7065] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 132.045018][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 132.050852][ T7065] EXT4-fs (loop6): 1 truncate cleaned up [ 132.056736][ T7065] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 132.179935][ T7073] loop1: detected capacity change from 0 to 4096 [ 132.198441][ T7073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.200679][ T7077] binder: BINDER_SET_CONTEXT_MGR already set [ 132.209424][ T7077] binder: 7075:7077 ioctl 4018620d 20000040 returned -16 [ 132.224166][ T7077] binder: 7075:7077 got transaction to invalid handle, 1 [ 132.225473][ T7077] binder: 7077:7075 cannot find target node [ 132.226390][ T7077] binder: 7075:7077 transaction async to 0:0 failed 160/29201/-22, size 0-0 line 3062 [ 132.244225][ T4344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.246329][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.247806][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.252869][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.254441][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.255804][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.269819][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.303630][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 132.653634][ T7109] xt_NFQUEUE: number of total queues is 0 [ 132.713596][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 132.990667][ T7083] chnl_net:caif_netlink_parms(): no params data found [ 133.123531][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.128922][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.135563][ T7083] device bridge_slave_0 entered promiscuous mode [ 133.514229][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.515396][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.517036][ T7083] device bridge_slave_1 entered promiscuous mode [ 133.536681][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.540840][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.604930][ T7083] team0: Port device team_slave_0 added [ 133.606794][ T7083] team0: Port device team_slave_1 added [ 133.610677][ T7147] binder: BINDER_SET_CONTEXT_MGR already set [ 133.612775][ T7147] binder: 7146:7147 ioctl 4018620d 20000040 returned -16 [ 133.618372][ T7147] binder: 7146:7147 got transaction to invalid handle, 1 [ 133.620410][ T7147] binder: 7147:7146 cannot find target node [ 133.621255][ T7147] binder: 7146:7147 transaction async to 0:0 failed 162/29201/-22, size 0-0 line 3062 [ 133.624991][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.626120][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.630986][ T4444] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.638850][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.703494][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.704631][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.708821][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.846317][ T7159] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.847659][ T7083] device hsr_slave_0 entered promiscuous mode [ 133.892731][ T7083] device hsr_slave_1 entered promiscuous mode [ 133.899269][ T7162] loop6: detected capacity change from 0 to 512 [ 133.911711][ T7162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.935920][ T7167] xt_NFQUEUE: number of total queues is 0 [ 133.937309][ T7162] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 133.938854][ T7162] EXT4-fs (loop6): orphan cleanup on readonly fs [ 133.940509][ T7162] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 133.952747][ T7162] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 133.954203][ T7162] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.786: Failed to acquire dquot type 1 [ 133.971438][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 133.973073][ T7162] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.786: corrupted inode contents [ 133.980141][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 133.981096][ T7162] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.786: mark_inode_dirty error [ 133.987672][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 133.988763][ T7162] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.786: corrupted inode contents [ 134.003172][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.004503][ T7162] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.786: mark_inode_dirty error [ 134.015489][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.019765][ T7162] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.786: corrupted inode contents [ 134.032849][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.041289][ T7162] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 134.049329][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.053287][ T7162] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.786: corrupted inode contents [ 134.067744][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.070897][ T7162] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.786: mark_inode_dirty error [ 134.077655][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.078779][ T7162] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 134.106759][ T7162] EXT4-fs (loop6): Remounting filesystem read-only [ 134.112535][ T7162] EXT4-fs (loop6): 1 truncate cleaned up [ 134.117929][ T7162] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 134.268856][ T7083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 134.309726][ T7083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 134.331548][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 134.433374][ T7083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 134.533511][ T7083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 134.578803][ T7195] binder: 7194:7195 ioctl c0306201 0 returned -14 [ 134.583605][ T7195] binder: 7194:7195 got transaction to invalid handle, 1 [ 134.586352][ T7195] binder: 7195:7194 cannot find target node [ 134.587523][ T7195] binder: 7194:7195 transaction async to 0:0 failed 165/29201/-22, size 0-0 line 3062 [ 134.664841][ T7199] loop1: detected capacity change from 0 to 512 [ 134.688615][ T7199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.708893][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 134.755939][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 134.818256][ T7214] xt_NFQUEUE: number of total queues is 0 [ 135.688474][ T7215] device syzkaller0 entered promiscuous mode [ 135.941067][ T7240] binder: 7239:7240 ioctl c0306201 0 returned -14 [ 135.949357][ T7240] binder: 7239:7240 got transaction to invalid handle, 1 [ 135.950631][ T7240] binder: 7240:7239 cannot find target node [ 135.951793][ T7240] binder: 7239:7240 transaction async to 0:0 failed 169/29201/-22, size 0-0 line 3062 [ 136.090008][ T7248] loop6: detected capacity change from 0 to 512 [ 136.098031][ T7248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.103256][ T7248] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 136.104880][ T7248] EXT4-fs (loop6): orphan cleanup on readonly fs [ 136.106472][ T7248] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 136.107995][ T7248] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 136.109553][ T7248] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.806: Failed to acquire dquot type 1 [ 136.115293][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.116979][ T7248] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.806: corrupted inode contents [ 136.120878][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.126048][ T7248] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.806: mark_inode_dirty error [ 136.128587][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.129624][ T7248] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.806: corrupted inode contents [ 136.131775][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.132834][ T7248] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.806: mark_inode_dirty error [ 136.134631][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.135587][ T7248] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.806: corrupted inode contents [ 136.137427][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.138583][ T7248] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 136.139984][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.141050][ T7248] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.806: corrupted inode contents [ 136.143666][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.144792][ T7248] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.806: mark_inode_dirty error [ 136.159588][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.160682][ T7248] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 136.163062][ T7248] EXT4-fs (loop6): Remounting filesystem read-only [ 136.164569][ T7248] EXT4-fs (loop6): 1 truncate cleaned up [ 136.164767][ T7253] xt_NFQUEUE: number of total queues is 0 [ 136.165601][ T7248] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 136.501367][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 136.950358][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 137.152845][ T7269] loop0: detected capacity change from 0 to 256 [ 137.898775][ T7272] binder: 7271:7272 ioctl c0306201 0 returned -14 [ 137.901185][ T7272] binder: 7271:7272 got transaction to invalid handle, 1 [ 137.902948][ T7272] binder: 7272:7271 cannot find target node [ 137.903911][ T7272] binder: 7271:7272 transaction async to 0:0 failed 173/29201/-22, size 0-0 line 3062 [ 138.310314][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.816'. [ 138.343431][ T7284] xt_NFQUEUE: number of total queues is 0 [ 138.571408][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 139.028584][ T7290] loop0: detected capacity change from 0 to 512 [ 139.033828][ T7290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.049473][ T7290] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 139.051172][ T7290] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.059505][ T7290] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 139.061083][ T7290] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 139.067429][ T7290] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.819: Failed to acquire dquot type 1 [ 139.069238][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.071943][ T7290] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.819: corrupted inode contents [ 139.073957][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.074959][ T7290] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.819: mark_inode_dirty error [ 139.076706][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.077614][ T7290] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.819: corrupted inode contents [ 139.079447][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.080370][ T7290] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.819: mark_inode_dirty error [ 139.090049][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.091167][ T7290] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.819: corrupted inode contents [ 139.093470][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.094435][ T7290] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 139.095860][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.096784][ T7290] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.819: corrupted inode contents [ 139.098856][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.099863][ T7290] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.819: mark_inode_dirty error [ 139.102164][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.103139][ T7290] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 139.104601][ T7290] EXT4-fs (loop0): Remounting filesystem read-only [ 139.105817][ T7290] EXT4-fs (loop0): 1 truncate cleaned up [ 139.106785][ T7290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.889978][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 139.923457][ T7304] binder: 7303:7304 got transaction to invalid handle, 1 [ 139.924699][ T7304] binder: 7304:7303 cannot find target node [ 139.925667][ T7304] binder: 7303:7304 transaction async to 0:0 failed 177/29201/-22, size 0-0 line 3062 [ 140.652284][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 142.946638][ T7306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.993283][ T7315] xt_NFQUEUE: number of total queues is 0 [ 144.056582][ T7337] loop0: detected capacity change from 0 to 512 [ 144.071018][ T7337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.097948][ T7337] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.099587][ T7337] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.101764][ T7337] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 144.103252][ T7337] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 144.104678][ T7337] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.832: Failed to acquire dquot type 1 [ 144.106428][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.107815][ T7337] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.832: corrupted inode contents [ 144.109667][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.110685][ T7337] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.832: mark_inode_dirty error [ 144.115397][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.116352][ T7337] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.832: corrupted inode contents [ 144.118337][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.119327][ T7337] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.832: mark_inode_dirty error [ 144.121267][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.123116][ T7337] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.832: corrupted inode contents [ 144.125156][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.126168][ T7337] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 144.127668][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.128725][ T7337] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.832: corrupted inode contents [ 144.130541][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.134489][ T7337] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.832: mark_inode_dirty error [ 144.136552][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.137553][ T7337] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 144.139132][ T7337] EXT4-fs (loop0): Remounting filesystem read-only [ 144.140341][ T7337] EXT4-fs (loop0): 1 truncate cleaned up [ 144.141435][ T7337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.748486][ T7343] binder: 7342:7343 got transaction to invalid handle, 1 [ 144.749679][ T7343] binder: 7343:7342 cannot find target node [ 144.750552][ T7343] binder: 7342:7343 transaction async to 0:0 failed 181/29201/-22, size 0-0 line 3062 [ 144.877179][ T7348] loop6: detected capacity change from 0 to 256 [ 144.878710][ T7348] FAT-fs (loop6): Unrecognized mount option "obj_user=" or missing value [ 144.915083][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 144.939622][ T4321] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.017805][ T7353] xt_NFQUEUE: number of total queues is 0 [ 146.631517][ T7373] binder: 7372:7373 got transaction to invalid handle, 1 [ 146.632691][ T7373] binder: 7373:7372 cannot find target node [ 146.633651][ T7373] binder: 7372:7373 transaction async to 0:0 failed 185/29201/-22, size 0-0 line 3062 [ 146.753073][ T7378] loop6: detected capacity change from 0 to 512 [ 146.762489][ T7378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.777556][ T7378] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 146.779334][ T7378] EXT4-fs (loop6): orphan cleanup on readonly fs [ 146.781082][ T7378] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 146.784420][ T7378] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 146.785851][ T7378] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.845: Failed to acquire dquot type 1 [ 146.787796][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.789690][ T7378] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.845: corrupted inode contents [ 146.794487][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.795494][ T7378] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.845: mark_inode_dirty error [ 146.797356][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.798513][ T7378] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.845: corrupted inode contents [ 146.800485][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.802518][ T7378] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.845: mark_inode_dirty error [ 146.804652][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.805858][ T7378] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.845: corrupted inode contents [ 146.807785][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.808811][ T7378] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 146.810279][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.813997][ T7378] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.845: corrupted inode contents [ 146.815996][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.817094][ T7378] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.845: mark_inode_dirty error [ 146.819080][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.820148][ T7378] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 146.822712][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 146.824032][ T7378] EXT4-fs (loop6): 1 truncate cleaned up [ 146.825108][ T7378] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 146.923165][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 146.997124][ T7387] xt_NFQUEUE: number of total queues is 0 [ 147.960715][ T7403] binder: 7402:7403 got transaction to invalid handle, 1 [ 147.964788][ T7403] binder: 7403:7402 cannot find target node [ 147.965729][ T7403] binder: 7402:7403 transaction async to 0:0 failed 189/29201/-22, size 0-0 line 3062 [ 148.007555][ T7405] loop6: detected capacity change from 0 to 512 [ 148.020822][ T7405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.052251][ T7405] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 148.053910][ T7405] EXT4-fs (loop6): orphan cleanup on readonly fs [ 148.055664][ T7405] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 148.057152][ T7405] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 148.058471][ T7405] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.855: Failed to acquire dquot type 1 [ 148.060792][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.073373][ T5293] device hsr_slave_0 left promiscuous mode [ 148.075506][ T7405] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.855: corrupted inode contents [ 148.077470][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.078453][ T7405] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.855: mark_inode_dirty error [ 148.080378][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.085003][ T7405] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.855: corrupted inode contents [ 148.087084][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.088112][ T7405] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.855: mark_inode_dirty error [ 148.089913][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.090980][ T7405] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.855: corrupted inode contents [ 148.095811][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.096772][ T7405] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 148.098194][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.099208][ T7405] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.855: corrupted inode contents [ 148.101123][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.108897][ T5293] device hsr_slave_1 left promiscuous mode [ 148.110243][ T7405] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.855: mark_inode_dirty error [ 148.131468][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.132448][ T7405] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 148.133944][ T7405] EXT4-fs (loop6): Remounting filesystem read-only [ 148.135496][ T7405] EXT4-fs (loop6): 1 truncate cleaned up [ 148.136411][ T7405] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 148.261060][ T7412] xt_NFQUEUE: number of total queues is 0 [ 148.280952][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 148.302066][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.305289][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.307385][ T5293] device bridge_slave_1 left promiscuous mode [ 148.308432][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.334123][ T5293] device bridge_slave_0 left promiscuous mode [ 148.335214][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.385999][ T7428] binder: 7427:7428 got transaction to invalid handle, 1 [ 148.387139][ T7428] binder: 7428:7427 cannot find target node [ 148.388103][ T7428] binder: 7427:7428 transaction async to 0:0 failed 193/29201/-22, size 0-0 line 3062 [ 149.242034][ T7439] loop0: detected capacity change from 0 to 512 [ 149.255073][ T7439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.263414][ T7439] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 149.265010][ T7439] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.266749][ T7439] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 149.268160][ T7439] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 149.269616][ T7439] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.868: Failed to acquire dquot type 1 [ 149.275063][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.276610][ T7439] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.868: corrupted inode contents [ 149.278399][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.279377][ T7439] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.868: mark_inode_dirty error [ 149.281125][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.282662][ T7439] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.868: corrupted inode contents [ 149.287000][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.287925][ T7439] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.868: mark_inode_dirty error [ 149.289766][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.290704][ T7439] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.868: corrupted inode contents [ 149.297743][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.298891][ T7439] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 149.300576][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.301708][ T7439] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.868: corrupted inode contents [ 149.304007][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.305023][ T7439] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.868: mark_inode_dirty error [ 149.308661][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.309640][ T7439] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 149.314650][ T7439] EXT4-fs (loop0): Remounting filesystem read-only [ 149.315798][ T7444] xt_NFQUEUE: number of total queues is 0 [ 149.316908][ T7439] EXT4-fs (loop0): 1 truncate cleaned up [ 149.317884][ T7439] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.549181][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 150.382337][ T7464] binder: 7463:7464 got transaction to invalid handle, 1 [ 150.383499][ T7464] binder: 7464:7463 cannot find target node [ 150.384389][ T7464] binder: 7463:7464 transaction async to 0:0 failed 197/29201/-22, size 0-0 line 3062 [ 151.183077][ T5293] team0 (unregistering): Port device team_slave_1 removed [ 151.285389][ T7473] loop0: detected capacity change from 0 to 128 [ 151.299324][ T7473] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.316461][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 151.344307][ T7477] loop0: detected capacity change from 0 to 512 [ 151.354632][ T5293] team0 (unregistering): Port device team_slave_0 removed [ 151.360994][ T7477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.380932][ T7477] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 151.382769][ T7477] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.404584][ T7477] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 151.406320][ T7477] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 151.407787][ T7477] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.879: Failed to acquire dquot type 1 [ 151.409899][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.411842][ T7477] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.879: corrupted inode contents [ 151.412098][ T7481] xt_NFQUEUE: number of total queues is 0 [ 151.414691][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.415568][ T7477] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.879: mark_inode_dirty error [ 151.417622][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.418714][ T7477] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.879: corrupted inode contents [ 151.434598][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.435681][ T7477] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.879: mark_inode_dirty error [ 151.437578][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.438606][ T7477] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.879: corrupted inode contents [ 151.440474][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.441810][ T7477] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 151.443260][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.444201][ T7477] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.879: corrupted inode contents [ 151.446360][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.447270][ T7477] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.879: mark_inode_dirty error [ 151.449061][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.450059][ T7477] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 151.454838][ T7477] EXT4-fs (loop0): Remounting filesystem read-only [ 151.456021][ T7477] EXT4-fs (loop0): 1 truncate cleaned up [ 151.457181][ T7477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.554089][ T5293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.840082][ T5293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.145449][ T7490] loop1: detected capacity change from 0 to 8 [ 152.192345][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 152.302411][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.304025][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.305084][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.306197][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.307750][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.308667][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.309618][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.310511][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.311643][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.312568][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.313668][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.314695][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.315632][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.316725][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.317679][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.318262][ T7499] binder: tried to use weak ref as strong ref [ 152.318627][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.319637][ T7499] binder: 7498:7499 Acquire 1 refcount change on invalid ref 0 ret -22 [ 152.320455][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.322734][ T7499] binder: 7498:7499 got transaction to invalid handle, 1 [ 152.322783][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.323793][ T7499] binder: 7499:7498 cannot find target node [ 152.324708][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.325500][ T7499] binder: 7498:7499 transaction async to 0:0 failed 200/29201/-22, size 0-0 line 3062 [ 152.326421][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.328548][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.329514][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.330530][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.331566][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.332569][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.333549][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.334502][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.335604][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.336634][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.337684][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.339034][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.340031][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.341005][ T7493] SQUASHFS error: Failed to read block 0x4de: -5 [ 153.076891][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.078650][ T4344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.080258][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.082441][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.083802][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.085032][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.238594][ T7514] xt_NFQUEUE: number of total queues is 0 [ 153.612369][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 153.672394][ T5293] bond0 (unregistering): Released all slaves [ 153.920534][ T7521] loop1: detected capacity change from 0 to 512 [ 153.931909][ T7521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.934302][ T7523] loop0: detected capacity change from 0 to 8 [ 153.949180][ T7521] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.950820][ T7521] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.959789][ T7521] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 153.961557][ T7521] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 153.962924][ T7521] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.892: Failed to acquire dquot type 1 [ 153.967246][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.972238][ T7521] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.892: corrupted inode contents [ 153.974302][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.975353][ T7521] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.892: mark_inode_dirty error [ 153.977161][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.978346][ T7521] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.892: corrupted inode contents [ 153.981455][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.982377][ T7521] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.892: mark_inode_dirty error [ 153.988144][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.989192][ T7521] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.892: corrupted inode contents [ 153.991437][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.992516][ T7521] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 153.994605][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 153.995570][ T7521] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.892: corrupted inode contents [ 153.999301][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 154.000255][ T7521] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.892: mark_inode_dirty error [ 154.010520][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 154.012949][ T7521] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 154.018013][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.049779][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.051579][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.065568][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.071875][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 154.079080][ T7083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.086311][ T7521] EXT4-fs (loop1): 1 truncate cleaned up [ 154.087266][ T7521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.110090][ T7083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.112721][ T7533] binder: tried to use weak ref as strong ref [ 154.124742][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.126323][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.127744][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.128870][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.130276][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.133034][ T7533] binder: 7531:7533 Acquire 1 refcount change on invalid ref 0 ret -22 [ 154.134521][ T7533] binder: 7531:7533 got transaction to invalid handle, 1 [ 154.148195][ T7533] binder: 7533:7531 cannot find target node [ 154.149138][ T7533] binder: 7531:7533 transaction async to 0:0 failed 203/29201/-22, size 0-0 line 3062 [ 154.162241][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.166399][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.167511][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.168903][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.187646][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.193563][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.198292][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.205741][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.207405][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.211146][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.212833][ T7543] loop6: detected capacity change from 0 to 256 [ 154.214272][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.217313][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.219000][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.273101][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.275876][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.278372][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.338231][ T7555] xt_NFQUEUE: number of total queues is 0 [ 154.405736][ T7508] chnl_net:caif_netlink_parms(): no params data found [ 154.440339][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.443334][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.444597][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.452998][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.454392][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.460035][ T7508] device bridge_slave_0 entered promiscuous mode [ 154.471145][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.478858][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.485450][ T7508] device bridge_slave_1 entered promiscuous mode [ 154.553540][ T7508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.567528][ T7508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.824733][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 154.904565][ T7508] team0: Port device team_slave_0 added [ 154.909455][ T7508] team0: Port device team_slave_1 added [ 154.943381][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.944470][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.958489][ T7508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.963671][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.964827][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.977218][ T7508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.023410][ T7508] device hsr_slave_0 entered promiscuous mode [ 155.035103][ T7508] device hsr_slave_1 entered promiscuous mode [ 155.081528][ T7508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.082818][ T7508] Cannot create hsr debugfs directory [ 155.114357][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.116003][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.117558][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.118910][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.120342][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.125220][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.131467][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 155.143787][ T7083] device veth0_vlan entered promiscuous mode [ 155.171785][ T7083] device veth1_vlan entered promiscuous mode [ 155.225416][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.226880][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.228268][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.229759][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.284109][ T7083] device veth0_macvtap entered promiscuous mode [ 155.289533][ T7083] device veth1_macvtap entered promiscuous mode [ 155.321285][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.325724][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.327369][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.329046][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.330608][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.344787][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.346321][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.347967][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.361957][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.374921][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.376359][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.377766][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.379340][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.403991][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.405646][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.407256][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.419034][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.420461][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.422335][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.423917][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.425476][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.437895][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.441094][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.442962][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.445104][ T7508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 155.482578][ T7508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 155.533598][ T7083] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.535099][ T7083] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.536427][ T7083] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.537723][ T7083] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.665986][ T7617] binder: tried to use weak ref as strong ref [ 155.666994][ T7617] binder: 7616:7617 Acquire 1 refcount change on invalid ref 0 ret -22 [ 155.668626][ T7617] binder: 7616:7617 got transaction to invalid handle, 1 [ 155.669717][ T7617] binder: 7617:7616 cannot find target node [ 155.670616][ T7617] binder: 7616:7617 transaction async to 0:0 failed 206/29201/-22, size 0-0 line 3062 [ 155.757997][ T7621] loop6: detected capacity change from 0 to 128 [ 155.769363][ T7621] ext4: Unknown parameter 'defcontext' [ 155.789687][ T7623] loop1: detected capacity change from 0 to 512 [ 155.803267][ T7623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.813781][ T5293] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.817589][ T7508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 155.834603][ T7623] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.836257][ T7623] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.840357][ T7623] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 155.850319][ T7627] xt_NFQUEUE: number of total queues is 0 [ 155.854685][ T7623] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 155.854718][ T7508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 155.856089][ T7623] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.909: Failed to acquire dquot type 1 [ 155.863693][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.892204][ T7623] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.909: corrupted inode contents [ 155.894498][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.895423][ T7623] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.909: mark_inode_dirty error [ 155.956031][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.957088][ T7623] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.909: corrupted inode contents [ 155.959757][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.960686][ T7623] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.909: mark_inode_dirty error [ 155.963090][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.964038][ T7623] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.909: corrupted inode contents [ 155.965974][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.967457][ T7623] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 155.968944][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 155.969969][ T7623] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.909: corrupted inode contents [ 156.002226][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 156.003350][ T7623] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.909: mark_inode_dirty error [ 156.005788][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 156.006927][ T7623] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 156.009888][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 156.126251][ T5293] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.271970][ T7623] EXT4-fs (loop1): 1 truncate cleaned up [ 156.272993][ T7623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.322217][ T7633] loop6: detected capacity change from 0 to 512 [ 156.396184][ T7633] EXT4-fs (loop6): Test dummy encryption mode enabled [ 156.398850][ T7633] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.912: inode has both inline data and extents flags [ 156.401194][ T7633] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.912: couldn't read orphan inode 15 (err -117) [ 156.403374][ T5293] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.409037][ T7633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 156.413627][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.415883][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.421532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.449093][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 156.473737][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.475973][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.493984][ T5293] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.498308][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.510284][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.913'. [ 156.537979][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.542803][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.545278][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.550948][ T7508] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.577964][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.579801][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.582140][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.583240][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.589283][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.600734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.603033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.604594][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.605809][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.613377][ T7653] xt_NFQUEUE: number of total queues is 0 [ 156.614644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.624860][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 156.633837][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.676575][ T7658] binder: 7656:7658 ioctl 4018620d 0 returned -22 [ 156.688013][ T7658] binder: tried to use weak ref as strong ref [ 156.689234][ T7658] binder: 7658:7656 cannot find target node [ 156.690169][ T7658] binder: 7656:7658 transaction async to 0:0 failed 209/29201/-22, size 0-0 line 3062 [ 156.713412][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.715588][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.717420][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.722930][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.724762][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.728663][ T7508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.730143][ T7508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.733617][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.735024][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.736537][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.738231][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.747368][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.780191][ T7664] netlink: 80 bytes leftover after parsing attributes in process `syz.7.916'. [ 156.900407][ T7677] xt_NFQUEUE: number of total queues is 0 [ 157.136460][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.138048][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.141123][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.211447][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 157.567320][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.569122][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.636007][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.637515][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.639240][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.640578][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.756834][ T7508] device veth0_vlan entered promiscuous mode [ 157.760244][ T7508] device veth1_vlan entered promiscuous mode [ 157.764350][ T7713] loop0: detected capacity change from 0 to 512 [ 157.822696][ T7713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.833316][ T7508] device veth0_macvtap entered promiscuous mode [ 157.840108][ T7508] device veth1_macvtap entered promiscuous mode [ 157.850072][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.852300][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.881832][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.883624][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.885274][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.886851][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.898724][ T7718] xt_NFQUEUE: number of total queues is 0 [ 157.971439][ T7713] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 157.973235][ T7713] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.985984][ T7713] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 157.987407][ T7713] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 157.988913][ T7713] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.924: Failed to acquire dquot type 1 [ 158.008208][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.011208][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.044265][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.045734][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.047316][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.053089][ T7713] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.924: corrupted inode contents [ 158.070942][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.076299][ T7713] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.924: mark_inode_dirty error [ 158.079690][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.081098][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.082752][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.084126][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.085571][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.087067][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.088090][ T7713] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.924: corrupted inode contents [ 158.096088][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.101877][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.103125][ T7713] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.924: mark_inode_dirty error [ 158.103371][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.122206][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.124615][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.125632][ T7713] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.924: corrupted inode contents [ 158.137105][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.138115][ T7713] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 158.144151][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.145219][ T7713] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.924: corrupted inode contents [ 158.150670][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.156028][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.158078][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.159632][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.161045][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.162837][ T7713] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.924: mark_inode_dirty error [ 158.164848][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.165783][ T7713] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 158.167205][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.168704][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.170222][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.172870][ T7737] binder: 7733:7737 ioctl 4018620d 0 returned -22 [ 158.174122][ T7737] binder_user_error: 2 callbacks suppressed [ 158.174128][ T7737] binder: tried to use weak ref as strong ref [ 158.175881][ T7737] binder: 7733:7737 Acquire 1 refcount change on invalid ref 0 ret -22 [ 158.176047][ T7713] EXT4-fs (loop0): Remounting filesystem read-only [ 158.182266][ T7737] binder: 7733:7737 got transaction to invalid handle, 1 [ 158.183378][ T7737] binder: 7737:7733 cannot find target node [ 158.184326][ T7737] binder: 7733:7737 transaction async to 0:0 failed 212/29201/-22, size 0-0 line 3062 [ 158.185885][ T7713] EXT4-fs (loop0): 1 truncate cleaned up [ 158.187056][ T7713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.206148][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.207914][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.209356][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.210870][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.229560][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.297034][ T7508] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.298535][ T7508] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.299936][ T7508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.301246][ T7508] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.351767][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.353474][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.417903][ T7752] loop7: detected capacity change from 0 to 512 [ 158.425075][ T7752] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 158.465076][ T4322] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.481926][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.483191][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.487169][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.513443][ T7757] xt_NFQUEUE: number of total queues is 0 [ 158.664593][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.665912][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.667330][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.130164][ T7785] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 159.212425][ T7789] binder: 7788:7789 ioctl 4018620d 0 returned -22 [ 159.215807][ T7789] binder: tried to use weak ref as strong ref [ 159.216810][ T7789] binder: 7788:7789 Acquire 1 refcount change on invalid ref 0 ret -22 [ 159.219272][ T7789] binder: 7788:7789 got transaction to invalid handle, 1 [ 159.220257][ T7789] binder: 7789:7788 cannot find target node [ 159.221143][ T7789] binder: 7788:7789 transaction async to 0:0 failed 215/29201/-22, size 0-0 line 3062 [ 159.291655][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 159.314822][ T7793] xt_NFQUEUE: number of total queues is 0 [ 159.509802][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 159.555384][ T5293] device hsr_slave_0 left promiscuous mode [ 159.587653][ T7814] loop6: detected capacity change from 0 to 128 [ 159.601540][ T5293] device hsr_slave_1 left promiscuous mode [ 159.626115][ T7814] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 159.671915][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.673288][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.681494][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.682840][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.685157][ T5293] device bridge_slave_1 left promiscuous mode [ 159.686404][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.739455][ T5293] device bridge_slave_0 left promiscuous mode [ 159.740619][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.751742][ T7820] xt_NFQUEUE: number of total queues is 0 [ 159.758626][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 159.981558][ T5293] device veth1_macvtap left promiscuous mode [ 159.982529][ T5293] device veth0_macvtap left promiscuous mode [ 159.983465][ T5293] device veth1_vlan left promiscuous mode [ 159.984305][ T5293] device veth0_vlan left promiscuous mode [ 160.028950][ T7831] binder: 7830:7831 ioctl c0306201 0 returned -14 [ 160.030297][ T7831] binder: 7830:7831 got transaction to invalid handle, 1 [ 160.041006][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.953'. [ 160.042768][ T7831] binder: 7831:7830 cannot find target node [ 160.043741][ T7831] binder: 7830:7831 transaction async to 0:0 failed 219/29201/-22, size 0-0 line 3062 [ 160.134093][ T7838] loop6: detected capacity change from 0 to 512 [ 160.156902][ T7838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.195326][ T7838] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 160.197063][ T7838] EXT4-fs (loop6): orphan cleanup on readonly fs [ 160.198788][ T7838] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 160.200195][ T7838] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 160.220047][ T7838] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.954: Failed to acquire dquot type 1 [ 160.228455][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.231983][ T7838] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.954: corrupted inode contents [ 160.235797][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.236830][ T7838] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.954: mark_inode_dirty error [ 160.248956][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.249877][ T7838] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.954: corrupted inode contents [ 160.328245][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.333931][ T7838] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.954: mark_inode_dirty error [ 160.342823][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.344976][ T7838] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.954: corrupted inode contents [ 160.353181][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.355213][ T7838] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 160.360161][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.364375][ T7838] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.954: corrupted inode contents [ 160.369228][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.382892][ T7838] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.954: mark_inode_dirty error [ 160.408143][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.409244][ T7838] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 160.430881][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 160.440957][ T7838] EXT4-fs (loop6): 1 truncate cleaned up [ 160.446215][ T7838] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 160.603494][ T7851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.958'. [ 160.695964][ T7858] xt_NFQUEUE: number of total queues is 0 [ 161.000366][ T7867] binder: 7865:7867 ioctl c0306201 0 returned -14 [ 161.010106][ T7867] binder: 7865:7867 got transaction to invalid handle, 1 [ 161.016120][ T7867] binder: 7867:7865 cannot find target node [ 161.019687][ T7867] binder: 7865:7867 transaction async to 0:0 failed 223/29201/-22, size 0-0 line 3062 [ 161.127022][ T7875] xt_NFQUEUE: number of total queues is 0 [ 161.371386][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 161.595519][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 162.472816][ T7888] xt_NFQUEUE: number of total queues is 0 [ 162.752151][ T7897] binder: BINDER_SET_CONTEXT_MGR already set [ 162.753106][ T7897] binder: 7896:7897 ioctl 4018620d 20000040 returned -16 [ 162.754522][ T7897] binder: 7896:7897 ioctl c0306201 0 returned -14 [ 162.755601][ T7897] binder: 7896:7897 got transaction to invalid handle, 1 [ 162.756608][ T7897] binder: 7897:7896 cannot find target node [ 162.757640][ T7897] binder: 7896:7897 transaction async to 0:0 failed 226/29201/-22, size 0-0 line 3062 [ 163.188927][ T7913] loop0: detected capacity change from 0 to 512 [ 163.197476][ T7913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.234579][ T7913] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.236150][ T7913] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.238815][ T7913] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 163.240328][ T7913] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 163.245682][ T7915] loop1: detected capacity change from 0 to 4096 [ 163.257813][ T7913] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.981: Failed to acquire dquot type 1 [ 163.263117][ T7915] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.264127][ T7915] EXT4-fs: Ignoring removed nobh option [ 163.275194][ T7915] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.278473][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.295308][ T7913] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.981: corrupted inode contents [ 163.309148][ T7915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.320663][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.338584][ T7913] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.981: mark_inode_dirty error [ 163.350822][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.365028][ T7913] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.981: corrupted inode contents [ 163.376289][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.377270][ T7913] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.981: mark_inode_dirty error [ 163.379150][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.380354][ T7913] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.981: corrupted inode contents [ 163.387603][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.388560][ T7913] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 163.402904][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.403935][ T7913] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.981: corrupted inode contents [ 163.416278][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.417317][ T7913] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.981: mark_inode_dirty error [ 163.509095][ T5293] team0 (unregistering): Port device team_slave_1 removed [ 163.519558][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.520626][ T7913] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 163.531245][ T7913] EXT4-fs (loop0): Remounting filesystem read-only [ 163.542196][ T7913] EXT4-fs (loop0): 1 truncate cleaned up [ 163.543227][ T7913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.712616][ T5293] team0 (unregistering): Port device team_slave_0 removed [ 163.728727][ T7926] xt_NFQUEUE: number of total queues is 0 [ 163.794309][ T7929] Cannot find add_set index 0 as target [ 163.868343][ T7933] binder: 7932:7933 got transaction to invalid handle, 1 [ 163.869434][ T7933] binder: 7933:7932 cannot find target node [ 163.870283][ T7933] binder: 7932:7933 transaction async to 0:0 failed 230/29201/-22, size 0-0 line 3062 [ 163.921999][ T5293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.005779][ T7939] xt_NFQUEUE: number of total queues is 0 [ 164.077267][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 164.405392][ T5293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.641475][ T7949] loop7: detected capacity change from 0 to 8 [ 164.880380][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 164.907841][ T7955] xt_NFQUEUE: number of total queues is 0 [ 165.070689][ T7961] binder: 7960:7961 got transaction to invalid handle, 1 [ 165.074636][ T7961] binder: 7961:7960 cannot find target node [ 165.075503][ T7961] binder: 7960:7961 transaction async to 0:0 failed 234/29201/-22, size 0-0 line 3062 [ 165.424696][ T7980] loop8: detected capacity change from 0 to 1024 [ 165.429089][ T7980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.462459][ T7980] EXT4-fs warning (device loop8): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 165.486598][ T7982] loop6: detected capacity change from 0 to 512 [ 165.498299][ T7982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.524951][ T7985] xt_NFQUEUE: number of total queues is 0 [ 165.535424][ T7982] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 165.537054][ T7982] EXT4-fs (loop6): orphan cleanup on readonly fs [ 165.540614][ T7982] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 165.612370][ T7982] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 165.613907][ T7982] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1007: Failed to acquire dquot type 1 [ 165.630119][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.639531][ T7982] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.1007: corrupted inode contents [ 165.648620][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.652932][ T7982] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.1007: mark_inode_dirty error [ 165.697941][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.699083][ T7982] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.1007: corrupted inode contents [ 165.709822][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.710850][ T7982] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.1007: mark_inode_dirty error [ 165.725987][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.727153][ T7982] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.1007: corrupted inode contents [ 165.737853][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.739095][ T7982] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 165.745478][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.746545][ T7982] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.1007: corrupted inode contents [ 165.760911][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.762996][ T7982] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.1007: mark_inode_dirty error [ 165.765209][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.766226][ T7982] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 165.771771][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 165.775526][ T7982] EXT4-fs (loop6): 1 truncate cleaned up [ 165.776529][ T7982] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 165.786427][ T27] audit: type=1326 audit(165.770:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.8.1010" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf1781a8 code=0x7ffc0000 [ 165.794973][ T27] audit: type=1326 audit(165.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.8.1010" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffffaf1781a8 code=0x7ffc0000 [ 165.799909][ T27] audit: type=1326 audit(165.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.8.1010" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf1781a8 code=0x7ffc0000 [ 165.903952][ T7993] binder: 7992:7993 got transaction to invalid handle, 1 [ 165.909334][ T7993] binder: 7993:7992 cannot find target node [ 165.916240][ T7993] binder: 7992:7993 transaction async to 0:0 failed 238/29201/-22, size 0-0 line 3062 [ 166.183881][ T5293] bond0 (unregistering): Released all slaves [ 166.449682][ T8008] xt_NFQUEUE: number of total queues is 0 [ 166.625999][ T8017] xt_NFQUEUE: number of total queues is 0 [ 166.797356][ T8028] binder: 8027:8028 got transaction to invalid handle, 1 [ 166.798477][ T8028] binder: 8028:8027 cannot find target node [ 166.808681][ T8028] binder: 8027:8028 transaction async to 0:0 failed 242/29201/-22, size 0-0 line 3062 [ 166.839385][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1021'. [ 166.940809][ T8041] loop7: detected capacity change from 0 to 256 [ 166.974334][ T6458] EXT4-fs (loop6): unmounting filesystem. [ 167.709170][ T8076] loop8: detected capacity change from 0 to 1024 [ 167.777715][ T8076] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 167.786291][ T8076] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: comm syz.8.1030: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.835985][ T8084] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: comm syz.8.1030: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.851014][ T8083] device syzkaller0 entered promiscuous mode [ 167.870075][ T8084] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: comm syz.8.1030: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.885792][ T8083] tipc: Started in network mode [ 167.886726][ T8083] tipc: Node identity 4666c5c85da4, cluster identity 4711 [ 167.901739][ T8076] EXT4-fs error (device loop8): ext4_free_blocks:6220: comm syz.8.1030: Freeing blocks not in datazone - block = 0, count = 1 [ 167.906516][ T8083] tipc: Enabled bearer , priority 0 [ 167.927728][ T8083] tipc: Resetting bearer [ 167.961185][ T8082] tipc: Resetting bearer [ 167.968994][ T8089] xt_NFQUEUE: number of total queues is 0 [ 168.046769][ T7508] EXT4-fs (loop8): unmounting filesystem. [ 168.108108][ T8094] binder: 8091:8094 got transaction to invalid handle, 1 [ 168.115073][ T8094] binder: 8094:8091 cannot find target node [ 168.116011][ T8094] binder: 8091:8094 transaction async to 0:0 failed 246/29201/-22, size 0-0 line 3062 [ 168.145245][ T8082] tipc: Disabling bearer [ 168.282809][ T8103] binder: BINDER_SET_CONTEXT_MGR already set [ 168.283718][ T8103] binder: 8099:8103 ioctl 4018620d 20000040 returned -16 [ 168.287930][ T8103] binder: tried to use weak ref as strong ref [ 168.288851][ T8103] binder: 8099:8103 Acquire 1 refcount change on invalid ref 0 ret -22 [ 168.290275][ T8103] binder: 8099:8103 got transaction to invalid handle, 1 [ 168.348119][ T8109] loop1: detected capacity change from 0 to 512 [ 168.371625][ T8109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.417109][ T8109] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 168.431284][ T8109] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.434252][ T8109] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 168.435735][ T8109] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 168.437224][ T8109] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1035: Failed to acquire dquot type 1 [ 168.452978][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.471973][ T8109] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.1035: corrupted inode contents [ 168.474221][ T8120] xt_NFQUEUE: number of total queues is 0 [ 168.474945][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.476260][ T8109] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.1035: mark_inode_dirty error [ 168.478496][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.479514][ T8109] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.1035: corrupted inode contents [ 168.544842][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.545816][ T8109] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1035: mark_inode_dirty error [ 168.548889][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.553506][ T8109] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.1035: corrupted inode contents [ 168.557788][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.559919][ T8109] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 168.566248][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.567201][ T8109] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.1035: corrupted inode contents [ 168.573820][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.576022][ T8109] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.1035: mark_inode_dirty error [ 168.578272][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.579447][ T8109] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 168.594415][ T8134] xt_NFQUEUE: number of total queues is 0 [ 168.612370][ T8109] EXT4-fs (loop1): Remounting filesystem read-only [ 168.614724][ T8109] EXT4-fs (loop1): 1 truncate cleaned up [ 168.615792][ T8109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.781932][ T8145] binder: 8144:8145 got transaction to invalid handle, 1 [ 168.893667][ T8143] syz.6.1046 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 168.895282][ T8143] CPU: 0 PID: 8143 Comm: syz.6.1046 Not tainted syzkaller #0 [ 168.896415][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 168.897960][ T8143] Call trace: [ 168.898456][ T8143] dump_backtrace+0x1c4/0x1f0 [ 168.899132][ T8143] show_stack+0x2c/0x3c [ 168.899727][ T8143] __dump_stack+0x30/0x40 [ 168.900370][ T8143] dump_stack_lvl+0xf4/0x15c [ 168.901058][ T8143] dump_stack+0x1c/0x5c [ 168.901680][ T8143] dump_header+0xc0/0x724 [ 168.902341][ T8143] oom_kill_process+0x35c/0x660 [ 168.903096][ T8143] out_of_memory+0xbf0/0xf70 [ 168.903784][ T8143] mem_cgroup_out_of_memory+0x228/0x2d0 [ 168.904568][ T8143] try_charge_memcg+0xa4c/0x1390 [ 168.905333][ T8143] obj_cgroup_charge+0x178/0x2e4 [ 168.906068][ T8143] kmem_cache_alloc+0xc4/0x310 [ 168.906818][ T8143] copy_fs_struct+0x58/0x21c [ 168.907639][ T8143] ksys_unshare+0x2f4/0x70c [ 168.908316][ T8143] __arm64_sys_unshare+0x3c/0x50 [ 168.909064][ T8143] invoke_syscall+0x98/0x290 [ 168.909779][ T8143] el0_svc_common+0x13c/0x258 [ 168.910483][ T8143] do_el0_svc+0x5c/0x134 [ 168.911070][ T8143] el0_svc+0x58/0x128 [ 168.911661][ T8143] el0t_64_sync_handler+0x84/0xf0 [ 168.912385][ T8143] el0t_64_sync+0x18c/0x190 [ 168.965891][ T8143] memory: usage 0kB, limit 0kB, failcnt 19 [ 168.974836][ T8143] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 168.976075][ T8143] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 168.977982][ T8143] Memory cgroup stats for /syz6/test: [ 168.978433][ T8143] anon 0 [ 168.978433][ T8143] file 0 [ 168.978433][ T8143] kernel 0 [ 168.978433][ T8143] kernel_stack 0 [ 168.978433][ T8143] pagetables 0 [ 168.978433][ T8143] sec_pagetables 0 [ 168.978433][ T8143] percpu 0 [ 168.978433][ T8143] sock 0 [ 168.978433][ T8143] vmalloc 0 [ 168.978433][ T8143] shmem 0 [ 168.978433][ T8143] zswap 0 [ 168.978433][ T8143] zswapped 0 [ 168.978433][ T8143] file_mapped 0 [ 168.978433][ T8143] file_dirty 0 [ 168.978433][ T8143] file_writeback 0 [ 168.978433][ T8143] swapcached 0 [ 168.978433][ T8143] anon_thp 0 [ 168.978433][ T8143] file_thp 0 [ 168.978433][ T8143] shmem_thp 0 [ 168.978433][ T8143] inactive_anon 0 [ 168.978433][ T8143] active_anon 0 [ 168.978433][ T8143] inactive_file 0 [ 168.978433][ T8143] active_file 0 [ 168.978433][ T8143] unevictable 0 [ 168.978433][ T8143] slab_reclaimable 0 [ 168.978433][ T8143] slab_unreclaimable 0 [ 168.978433][ T8143] slab 0 [ 168.978433][ T8143] workingset_refault_anon 0 [ 169.015151][ T8143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.1046,pid=8141,uid=0 [ 169.021402][ T8143] Memory cgroup out of memory: Killed process 8141 (syz.6.1046) total-vm:102360kB, anon-rss:1380kB, file-rss:21704kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 169.698800][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 169.751251][ T8208] xt_NFQUEUE: number of total queues is 0 [ 169.964591][ T8219] binder: 8218:8219 tried to acquire reference to desc 0, got 1 instead [ 169.975468][ T8219] binder: 8218:8219 ioctl c0306201 0 returned -14 [ 169.987195][ T8219] binder: 8218:8219 got transaction with invalid data ptr [ 169.988466][ T8219] binder_debug: 4 callbacks suppressed [ 169.988477][ T8219] binder: 8218:8219 transaction call to 8218:0 failed 259/29201/-14, size 0-24 line 3350 [ 170.036195][ T113] binder: undelivered transaction 258, process died. [ 170.174568][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.175883][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.383271][ T8246] loop0: detected capacity change from 0 to 512 [ 170.396621][ T8246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.437297][ T8246] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 170.439039][ T8246] EXT4-fs (loop0): orphan cleanup on readonly fs [ 170.440946][ T8246] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 170.443832][ T8246] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 170.446522][ T8246] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1066: Failed to acquire dquot type 1 [ 170.451541][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.456117][ T8246] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.1066: corrupted inode contents [ 170.458437][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.460497][ T8246] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.1066: mark_inode_dirty error [ 170.465661][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.466569][ T8246] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.1066: corrupted inode contents [ 170.471568][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.472624][ T8246] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1066: mark_inode_dirty error [ 170.478615][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.479735][ T8246] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.1066: corrupted inode contents [ 170.500283][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.501834][ T8246] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 170.503383][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.504349][ T8246] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.1066: corrupted inode contents [ 170.508532][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.509572][ T8246] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.1066: mark_inode_dirty error [ 170.522550][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.523552][ T8246] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 170.526750][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 170.537813][ T8246] EXT4-fs (loop0): 1 truncate cleaned up [ 170.538836][ T8246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 170.551031][ T8258] xt_NFQUEUE: number of total queues is 0 [ 170.857250][ T8280] xt_NFQUEUE: number of total queues is 0 [ 170.891826][ T4343] Bluetooth: hci3: command 0x1003 tx timeout [ 170.893705][ T4344] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 171.002870][ T8287] binder: BINDER_SET_CONTEXT_MGR already set [ 171.003895][ T8287] binder: 8286:8287 ioctl 4018620d 20000040 returned -16 [ 171.008117][ T8287] binder: tried to use weak ref as strong ref [ 171.011695][ T8287] binder: 8286:8287 Acquire 1 refcount change on invalid ref 0 ret -22 [ 171.014235][ T8287] binder: 8286:8287 ioctl c0306201 0 returned -14 [ 171.018809][ T8287] binder: 8286:8287 got transaction to invalid handle, 1 [ 171.024931][ T8287] binder: 8287:8286 cannot find target node [ 171.025869][ T8287] binder: 8286:8287 transaction async to 0:0 failed 262/29201/-22, size 0-0 line 3062 [ 171.346195][ T8302] loop6: detected capacity change from 0 to 512 [ 171.350872][ T8295] null_blk: disk my_zoned_dev created [ 171.397291][ T8302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.433958][ T8302] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 171.456946][ T8302] [ 171.457419][ T8302] ====================================================== [ 171.458496][ T8302] WARNING: possible circular locking dependency detected [ 171.459662][ T8302] syzkaller #0 Not tainted [ 171.460339][ T8302] ------------------------------------------------------ [ 171.461324][ T8302] syz.6.1075/8302 is trying to acquire lock: [ 171.462216][ T8302] ffff0000f60d95a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x54/0x1c8 [ 171.463555][ T8302] [ 171.463555][ T8302] but task is already holding lock: [ 171.464664][ T8302] ffff0000e07a70e0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x720/0x160c [ 171.466088][ T8302] [ 171.466088][ T8302] which lock already depends on the new lock. [ 171.466088][ T8302] [ 171.467633][ T8302] [ 171.467633][ T8302] the existing dependency chain (in reverse order) is: [ 171.469013][ T8302] [ 171.469013][ T8302] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 171.470188][ T8302] down_write+0x5c/0x88 [ 171.470947][ T8302] ext4_map_blocks+0x720/0x160c [ 171.471694][ T8302] ext4_getblk+0x178/0x680 [ 171.472457][ T8302] ext4_bread+0x3c/0x1a8 [ 171.473290][ T8302] ext4_quota_write+0x200/0x544 [ 171.474210][ T8302] find_free_dqentry+0x55c/0xa8c [ 171.475069][ T8302] do_insert_tree+0x5c0/0xc68 [ 171.475915][ T8302] do_insert_tree+0x7dc/0xc68 [ 171.476726][ T8302] do_insert_tree+0x7dc/0xc68 [ 171.477533][ T8302] do_insert_tree+0x7dc/0xc68 [ 171.478317][ T8302] qtree_write_dquot+0x3d4/0x4e4 [ 171.479128][ T8302] v2_write_dquot+0xf0/0x180 [ 171.479875][ T8302] dquot_acquire+0x280/0x4b8 [ 171.480671][ T8302] ext4_acquire_dquot+0x270/0x420 [ 171.481486][ T8302] dqget+0x638/0xa98 [ 171.482204][ T8302] __dquot_initialize+0x2e4/0xb30 [ 171.483007][ T8302] dquot_initialize+0x24/0x34 [ 171.483752][ T8302] ext4_process_orphan+0x5c/0x2c0 [ 171.484556][ T8302] ext4_orphan_cleanup+0x964/0x1090 [ 171.485520][ T8302] ext4_fill_super+0x5af8/0x63bc [ 171.486352][ T8302] get_tree_bdev+0x35c/0x54c [ 171.487120][ T8302] ext4_get_tree+0x28/0x38 [ 171.487827][ T8302] vfs_get_tree+0x90/0x278 [ 171.488597][ T8302] do_new_mount+0x228/0x804 [ 171.489335][ T8302] path_mount+0x5ac/0xe6c [ 171.490051][ T8302] __arm64_sys_mount+0x4a0/0x5a0 [ 171.490894][ T8302] invoke_syscall+0x98/0x290 [ 171.491675][ T8302] el0_svc_common+0x13c/0x258 [ 171.492495][ T8302] do_el0_svc+0x5c/0x134 [ 171.493174][ T8302] el0_svc+0x58/0x128 [ 171.493973][ T8302] el0t_64_sync_handler+0x84/0xf0 [ 171.494932][ T8302] el0t_64_sync+0x18c/0x190 [ 171.495821][ T8302] [ 171.495821][ T8302] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 171.497207][ T8302] down_read+0x64/0x300 [ 171.497975][ T8302] v2_read_dquot+0x4c/0x118 [ 171.498754][ T8302] dquot_acquire+0x108/0x4b8 [ 171.499514][ T8302] ext4_acquire_dquot+0x270/0x420 [ 171.500389][ T8302] dqget+0x638/0xa98 [ 171.501036][ T8302] __dquot_initialize+0x2e4/0xb30 [ 171.501909][ T8302] dquot_initialize+0x24/0x34 [ 171.502658][ T8302] ext4_process_orphan+0x5c/0x2c0 [ 171.503464][ T8302] ext4_orphan_cleanup+0x964/0x1090 [ 171.504330][ T8302] ext4_fill_super+0x5af8/0x63bc [ 171.505128][ T8302] get_tree_bdev+0x35c/0x54c [ 171.505873][ T8302] ext4_get_tree+0x28/0x38 [ 171.506571][ T8302] vfs_get_tree+0x90/0x278 [ 171.507303][ T8302] do_new_mount+0x228/0x804 [ 171.508063][ T8302] path_mount+0x5ac/0xe6c [ 171.508775][ T8302] __arm64_sys_mount+0x4a0/0x5a0 [ 171.509546][ T8302] invoke_syscall+0x98/0x290 [ 171.510327][ T8302] el0_svc_common+0x13c/0x258 [ 171.511065][ T8302] do_el0_svc+0x5c/0x134 [ 171.511785][ T8302] el0_svc+0x58/0x128 [ 171.512499][ T8302] el0t_64_sync_handler+0x84/0xf0 [ 171.513238][ T8302] el0t_64_sync+0x18c/0x190 [ 171.514129][ T8302] [ 171.514129][ T8302] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 171.515375][ T8302] __lock_acquire+0x2808/0x6634 [ 171.516251][ T8302] lock_acquire+0x20c/0x638 [ 171.516975][ T8302] __mutex_lock_common+0x1a0/0x1f3c [ 171.517845][ T8302] mutex_lock_nested+0x38/0x44 [ 171.518689][ T8302] dquot_commit+0x54/0x1c8 [ 171.519650][ T8302] ext4_write_dquot+0x1b4/0x320 [ 171.520609][ T8302] ext4_mark_dquot_dirty+0xe8/0x150 [ 171.521467][ T8302] mark_all_dquot_dirty+0x108/0x424 [ 171.522335][ T8302] __dquot_alloc_space+0x564/0xcfc [ 171.523137][ T8302] ext4_mb_new_blocks+0xd40/0x4244 [ 171.524016][ T8302] ext4_ext_map_blocks+0x1330/0x563c [ 171.524893][ T8302] ext4_map_blocks+0x7b0/0x160c [ 171.525695][ T8302] ext4_alloc_file_blocks+0x274/0x8b4 [ 171.526548][ T8302] ext4_fallocate+0x77c/0x1b4c [ 171.527292][ T8302] vfs_fallocate+0x4a4/0x5fc [ 171.528195][ T8302] __arm64_sys_fallocate+0xc4/0x114 [ 171.529141][ T8302] invoke_syscall+0x98/0x290 [ 171.529959][ T8302] el0_svc_common+0x13c/0x258 [ 171.530812][ T8302] do_el0_svc+0x5c/0x134 [ 171.531547][ T8302] el0_svc+0x58/0x128 [ 171.532211][ T8302] el0t_64_sync_handler+0x84/0xf0 [ 171.533188][ T8302] el0t_64_sync+0x18c/0x190 [ 171.533966][ T8302] [ 171.533966][ T8302] other info that might help us debug this: [ 171.533966][ T8302] [ 171.535479][ T8302] Chain exists of: [ 171.535479][ T8302] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 171.535479][ T8302] [ 171.537674][ T8302] Possible unsafe locking scenario: [ 171.537674][ T8302] [ 171.538840][ T8302] CPU0 CPU1 [ 171.539667][ T8302] ---- ---- [ 171.540478][ T8302] lock(&ei->i_data_sem/2); [ 171.541174][ T8302] lock(&s->s_dquot.dqio_sem); [ 171.542290][ T8302] lock(&ei->i_data_sem/2); [ 171.543366][ T8302] lock(&dquot->dq_lock); [ 171.543998][ T8302] [ 171.543998][ T8302] *** DEADLOCK *** [ 171.543998][ T8302] [ 171.545149][ T8302] 4 locks held by syz.6.1075/8302: [ 171.545967][ T8302] #0: ffff0000f7f80460 (sb_writers#3){.+.+}-{0:0}, at: vfs_fallocate+0x434/0x5fc [ 171.547401][ T8302] #1: ffff0000e07a7258 (&sb->s_type->i_mutex_key#10){++++}-{3:3}, at: ext4_fallocate+0x1e0/0x1b4c [ 171.548980][ T8302] #2: ffff0000e07a70e0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x720/0x160c [ 171.550370][ T8302] #3: ffff80001568caa8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 171.551721][ T8302] [ 171.551721][ T8302] stack backtrace: [ 171.552637][ T8302] CPU: 1 PID: 8302 Comm: syz.6.1075 Not tainted syzkaller #0 [ 171.553668][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 171.555040][ T8302] Call trace: [ 171.555512][ T8302] dump_backtrace+0x1c4/0x1f0 [ 171.556173][ T8302] show_stack+0x2c/0x3c [ 171.556723][ T8302] __dump_stack+0x30/0x40 [ 171.557356][ T8302] dump_stack_lvl+0xf4/0x15c [ 171.558051][ T8302] dump_stack+0x1c/0x5c [ 171.558746][ T8302] print_circular_bug+0x148/0x1b0 [ 171.559514][ T8302] check_noncircular+0x264/0x2f8 [ 171.560313][ T8302] __lock_acquire+0x2808/0x6634 [ 171.561047][ T8302] lock_acquire+0x20c/0x638 [ 171.561690][ T8302] __mutex_lock_common+0x1a0/0x1f3c [ 171.562440][ T8302] mutex_lock_nested+0x38/0x44 [ 171.563113][ T8302] dquot_commit+0x54/0x1c8 [ 171.563783][ T8302] ext4_write_dquot+0x1b4/0x320 [ 171.564477][ T8302] ext4_mark_dquot_dirty+0xe8/0x150 [ 171.565216][ T8302] mark_all_dquot_dirty+0x108/0x424 [ 171.565971][ T8302] __dquot_alloc_space+0x564/0xcfc [ 171.566766][ T8302] ext4_mb_new_blocks+0xd40/0x4244 [ 171.567608][ T8302] ext4_ext_map_blocks+0x1330/0x563c [ 171.568448][ T8302] ext4_map_blocks+0x7b0/0x160c [ 171.569201][ T8302] ext4_alloc_file_blocks+0x274/0x8b4 [ 171.570021][ T8302] ext4_fallocate+0x77c/0x1b4c [ 171.570755][ T8302] vfs_fallocate+0x4a4/0x5fc [ 171.571425][ T8302] __arm64_sys_fallocate+0xc4/0x114 [ 171.572202][ T8302] invoke_syscall+0x98/0x290 [ 171.572898][ T8302] el0_svc_common+0x13c/0x258 [ 171.573557][ T8302] do_el0_svc+0x5c/0x134 [ 171.574165][ T8302] el0_svc+0x58/0x128 [ 171.574758][ T8302] el0t_64_sync_handler+0x84/0xf0 [ 171.575520][ T8302] el0t_64_sync+0x18c/0x190 [ 171.591247][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 171.619789][ T6458] EXT4-fs (loop6): unmounting filesystem.