last executing test programs: 2m19.129062032s ago: executing program 0 (id=1537): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m18.71178339s ago: executing program 0 (id=1540): r0 = fsopen(&(0x7f0000000400)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000005c0)='sec\x00', &(0x7f0000000600)='krb5i\x00', 0x0) 2m17.970194806s ago: executing program 0 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 2m17.754004416s ago: executing program 0 (id=1544): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@grpjquota}, {@norecovery}, {@nolazytime}]}, 0x5, 0x4be, &(0x7f0000000540)="$eJzs3c1rG2caAPBnpNixHW++dlmSLGwCWch+EMsfLLF397Kn3T0Elg3sZRdS11bc1LLlWnIamxyc9pZDD6WlhdJD7/0LemlODYXSc3svPZSUNnWhLRRUNJISf8lVG0cCz+8HE70z70TP+0Z5XmZezWgCyKxz9T+SiOGI+DAijjVWt+5wrvGy8eDWTH1Jola78kWS7ldfb+3a+ntHImI9IgYi4j//iHg62Rm3sro2P10qFZeb64XqwlKhsrp28frC9Fxxrrg4NnlpampydGJ8at/6euelZ+9cfudf/W9/8+L9ey+/9269WcPNus392E+NrvfFiU3bDkXE355EsB7IN/sz2OuG8LPUP79fRsT5NP+PRT79NIEsqNVqte9rh9tVr9eAAyuXHgMnuZGIaJRzuZGRxjH8r2IoVypXqn+6Vl5ZnG0cKx+Pvty166XiaPNc4Xj0JfX1sbT8aH182/pERHoM/Ep+MF0fmSmXZrs71AHbHNmW/1/nG/kPZIRTfsgu+Q/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/yGT/n35cn2pte5/n72xujJfvnFxtliZH1lYmRmZKS8vjcyVy3PpPTsLP/Z+pXJ5aezPsXKzUC1WqoXK6trVhfLKYvVqel//1WJfV3oFdOLE2bsfJxGx/pfBdKnrb9bJVTjYarUken0PMtAb+eY4sHG0xwMR0HWm/iC7nOMDu/xE7xYD7SqW9r8tQHfket0AoGcunP5p3/8919XWAU9S3iEAZJb5f8gu8/+A+X/IHif/kF3DbZ7/9YtNz+4ajYijEfFRvu9w61lfwEGQ+yxpHv9fOPa74e21/cm36S0C/RHx/BtXXrs5Xa0uj9W3f/lwe/X15vbxXrQf6FQrT1t5DABk18aDWzOtpZtxP/974yKEnfEPNecmB9LvKIc2ki3XKiT7dO3C+u2IOLVb/KT5vPPGNx9DG/kd8U82X5PGW6TtPZQ+N7078U9viv/bTfHPPPa/CmTD3fr4M7pb/uXSnI6H+bd1/Bnep2sn2o9/uYfjX77N+He2wxjPvPnCp23j3444s2v8VryBNNb2+PW2Xegw/v3///fX7epqbzXeZ7f4LfVSobqwVKisrl1Mf0durrg4NnlpampydGJ8qpDOURdaM9U7/fXUB/f26v9Qm/h79b++7Q8d9v+737z/v3N7xP/9+d0//5N7xB+MiD92GP+r8U+ealdXjz/bpv+5PeLXt010GL/y6j8Pd7grANAFldW1+elSqbisoNCukCQd79z6f9XzNis8ZqG34xLw5D1K+l63BAAAAAAAAAAAAOhUNy4n7nUfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgh8CAAD//07H03A=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 2m17.132821242s ago: executing program 0 (id=1546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x1, 0x81, 0xfffff024}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @local}}, 0x0, 0x40, 0x100, 0x7, 0x8, 0x6, 0xc}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e24, 0x161d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}}}, 0x84) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m16.387652243s ago: executing program 0 (id=1550): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 2m15.821702227s ago: executing program 32 (id=1550): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 9.643641869s ago: executing program 3 (id=2365): unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.342022489s ago: executing program 3 (id=2371): socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100003040000000000000000000074", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03080000000020"}}}}, 0x3f) 7.82694882s ago: executing program 3 (id=2378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0183}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) 7.057448517s ago: executing program 2 (id=2381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x140, 0x16, 0x19, 0x70bd26, 0x25dfdbfb, {{{@in6=@mcast1, @in6=@loopback, 0x4e23, 0xfffa, 0x4e22, 0x6, 0xa, 0x0, 0x20, 0x32}, {@in6=@empty, 0x4d2, 0x32}, @in=@local, {0x9, 0x8, 0x8, 0x2, 0xf2, 0x8000000000000000, 0x0, 0x2}, {0x0, 0x1, 0x3, 0x40000000000}, {0x1, 0x8, 0x7}, 0x70bd2b, 0x3500, 0x2, 0x4, 0xc, 0x88}, 0x2f3b, 0xef0f}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt-generic)\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 6.958690849s ago: executing program 3 (id=2395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0xfdfffffffffffffc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, r2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x1c7, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x400, 0xb0, 0x7f, 0x1, 0x6, 0x3, 0x7ff}]}, 0x58) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x80, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@loopback, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x17c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) dup2(r5, r0) getdents64(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) 6.785667958s ago: executing program 2 (id=2385): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r5, 0x186a0, 0x0) lseek(r5, 0x249f0, 0x0) 4.308095174s ago: executing program 2 (id=2389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x32}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 4.306496725s ago: executing program 3 (id=2390): socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100003040000000000000000000074", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03080000000020"}}}}, 0x3f) 3.876488889s ago: executing program 2 (id=2393): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x4, 0x700000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @local}}, 0x0, 0x40, 0x100, 0x7, 0x8, 0x6, 0xc}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e24, 0x161d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}}}, 0x84) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.527814303s ago: executing program 2 (id=2398): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x733, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 3.133546017s ago: executing program 2 (id=2401): unshare(0x40000000) r0 = socket$rds(0x15, 0x5, 0x0) close(r0) unshare(0x40000000) r1 = socket$rds(0x15, 0x5, 0x0) close(r1) unshare(0x40000000) r2 = socket$rds(0x15, 0x5, 0x0) close(r2) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 2.117035397s ago: executing program 5 (id=2412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000007000000000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) 1.894818658s ago: executing program 4 (id=2414): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040000) 1.630421483s ago: executing program 6 (id=2416): chdir(0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) 1.627896132s ago: executing program 1 (id=2417): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.523001338s ago: executing program 4 (id=2418): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2a84690a11096732193848444db7cf13d7677ef138f2a9f85001d1fb6ce8880fc832ae54a779e35121c1a6ae91a95ae2164897bab7a692744c09b03e3870041056453bf8d619636990bd12b693fd360f97eb0e73fdcab7f374f71bf716f0a2eb828c4907555a0af8a53acb7179e557a08ec6bf979734ff4d787e363b8f7d21ad291466593a94cb43fcfd332b141c89f0ebd4b98aab6400d964eeaf9f799390d8430532ac684ff24e8b98bc55576734e25418b7f7164f34fe2b84ac30ca3aad58a142f90dcdb063360939f776f837700d52f2116159f3496fbb51d549a5c35f4b090c4a654e6809ac3cee0398ad738995ab11b6d69e54030d9e420e017a677b125897eeee431636199d8f3c137426f52d657ba8ea4de927dc77907042a748514f282b844e992ce09154ac1f5002ce13c9f6bd0b2dc1b4744f8b28c0b5de4b55411698aaaebf878bbe6ba329e15f278f1b998f177daf7eb2429c9280d33b360f0da1d6d5048524e91210de5a3ff8104403ea333c1e9570eb50c59fa3d3a44abb348c749723a2943ad78ea0840d2f134182c94f1eaa2813fc6990c709f8407c335ae6c4df52da9ce08e661176c1921a46e3f52aa550fc87ebc974a259ae5126376fb86927f01481c8156980d8d6a0b2ec0f31a80af80ffc8e6c40307c6c63254e9bdddf68122381cda624b371379811a0300a3ce58a56cf14cc8b68a9eda5a341ab18a74933cfd4cda03d7d10544a954abe77d99e0e52b08018d7b9b0a1212380d95aa8bfaf604d787ca93f4343edb61579b761ac05366ef170310fd861b144b5aff8e77a13f8d358dbb76554b9de903a9b0b653325c923a46728d5e73f5fb63cb9a00399298717b1cb7be4d6cd8a0b4ae7751fc70ef62f1d3914e1dac62881200c359888e49779c20d126b4e347cff2dd17d232e4eca340886e03fdebc7e332398c80447f5c38c7d8c26a37e9cf5778ccb46f437dc1c928f558681098cb13405c86f3f31fbaa068090034013d294a8c7c6357800bf2514ce40939fbc6854c26015249702458cda3f8b6a735b9189ec163a7097691377245a3195d452eaca29e9e3353ce94eda491d9f6547bd0055da8695c4cf9e608204d2f925eaaddb8ef7eeec0171e76bbeb6e78952cf30a8d89230d2cb6b0a19a2aabc33ce7e89e8074d011f8601c7fa6e401a2e5f34a786d43ad961c1aebd1867fce1f71dc667ce205aa29333f954773b003d41f764e95b6654e3a23549ede712aef3295bec267e15dc5a7312f96e603ad7c071e63332dc953c4a17c941c649980cc84d35d2212c80d240446928d2eed555f274290a203ee40d4fbd28df82f77375ce191fa776b9d305852da11bf9bd0006a49f33e0c1019df537effbab5dc76c96574530a713b81c4fdc533acc9ba2535fec5ce018adec7c9644296542412b588943cf52746b9c0ebc47fcfe4fea43b057b3c1430b96e404100cde0edb8de5d5c5129142bef60f268c4a3ffeebc0b3e14a193b7afdc04e8d7b0720940b69f6684d2327bace3b94ce272d0eb1337e2d9a7051e1e63fb522f9a77e0c5c6b8b1ec9820da59608214d2a15e6f2090be28ded359d1e752e1ab2646b191a6dd107a727bb1815fba8060a7fe62e3d4bf4f84e358a2b9c689f3014352b5612d5beffa5cf2c47f181be95e3214aec43fe4454be1df1e87fb38a8b00bcba6d4ba99d4d9b117abd1b4a104980f421c7efc1c1090a0e25414afef67400c41eedfa4d6929f0ec1d40b8810ea7ea82bd026d888390f5402ea369b17edc90b74a205a76691b65d75ce6cd9cbfd52b1fa02f0c2ead3705b7d6166a72d11160149b888df0362c07d540ac39434d98471909d87c1d3fd738ec555615d155908ab7ed5280b7ffaae5c8af8baddb36661510ed912bb79750f6d1a7d88e9a1560c481e4619da61b47f552f4a2e6b6392a804be38bb34846ba6667e62272ed54087728b0abaac2a76c6492c02ec208230aa9a953571a8b543dc65e0f456ae42c50de9cb0b8f9a9550d9bf8f1befa1bf2873762364adc139cb86ee5e95aa6252945691efbacadf1bc5dbcbaffe906461b59ac5a5f4da045fe14899c4fbcb580336cafd5d8c4fc38afa91bb9024e9d3624", 0x5da}], 0x1}}], 0x1, 0x6064040) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) 1.46613491s ago: executing program 5 (id=2419): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffff", 0x41}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r5, 0x186a0, 0x0) lseek(r5, 0x249f0, 0x0) 1.439756267s ago: executing program 6 (id=2420): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r2, 0x2) close(r2) close(0xffffffffffffffff) close(r1) 1.412221591s ago: executing program 1 (id=2421): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x14, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {0x3, 0xe22, 0x14, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1.125358088s ago: executing program 1 (id=2422): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x3, 0xac0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) 1.074100724s ago: executing program 4 (id=2423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008010) 1.057841366s ago: executing program 5 (id=2424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 1.020924868s ago: executing program 6 (id=2425): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) listen(r0, 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 889.488848ms ago: executing program 4 (id=2426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x4, 0x700000000000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d3000000014001680100001800c000700000000000b00000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x48080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) 772.724062ms ago: executing program 1 (id=2427): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000010000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 764.731033ms ago: executing program 4 (id=2428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 584.880595ms ago: executing program 6 (id=2429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080430900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500"], 0x100}}, 0x0) 584.679465ms ago: executing program 5 (id=2430): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040000) 584.472435ms ago: executing program 4 (id=2431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000007000000000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) 583.254707ms ago: executing program 3 (id=2432): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 522.16464ms ago: executing program 1 (id=2433): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 390.093558ms ago: executing program 6 (id=2434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) 341.997522ms ago: executing program 5 (id=2435): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x14, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {0x3, 0xe22, 0x14, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 137.00648ms ago: executing program 1 (id=2436): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffff", 0x41}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r5, 0x186a0, 0x0) lseek(r5, 0x249f0, 0x0) 101.897402ms ago: executing program 6 (id=2437): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r2, 0x2) close(r2) close(0xffffffffffffffff) close(r1) 0s ago: executing program 5 (id=2438): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 0> [ 180.645086][ T7267] tipc: Disabling bearer [ 180.749899][ T7308] loop2: detected capacity change from 0 to 128 [ 181.409550][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 181.605018][ T5867] usb 4-1: device descriptor read/64, error -71 [ 181.710480][ T7331] syzkaller0: entered promiscuous mode [ 181.715983][ T7331] syzkaller0: entered allmulticast mode [ 181.860252][ T5867] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.158895][ T5867] usb 4-1: device descriptor read/64, error -71 [ 182.279354][ T5867] usb usb4-port1: attempt power cycle [ 182.679051][ T5867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.709584][ T5867] usb 4-1: device descriptor read/8, error -71 [ 182.959822][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.990654][ T5867] usb 4-1: device descriptor read/8, error -71 [ 183.109209][ T5867] usb usb4-port1: unable to enumerate USB device [ 184.602163][ T7359] tipc: Enabling of bearer rejected, failed to enable media [ 184.862202][ T7383] loop5: detected capacity change from 0 to 128 [ 187.284220][ T5955] wlan1: Trigger new scan to find an IBSS to join [ 188.366237][ T7435] tipc: Started in network mode [ 188.371729][ T7435] tipc: Node identity 760a6293f19, cluster identity 4711 [ 188.383407][ T7435] tipc: Enabled bearer , priority 0 [ 188.392460][ T7438] syzkaller0: entered promiscuous mode [ 188.398695][ T7438] syzkaller0: entered allmulticast mode [ 188.615517][ T7438] tipc: Resetting bearer [ 188.657365][ T7488] loop3: detected capacity change from 0 to 512 [ 188.699882][ T7488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 188.752128][ T7438] tipc: Disabling bearer [ 188.752741][ T7488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.837277][ T7488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.512: bg 0: block 425: padding at end of block bitmap is not set [ 188.888220][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 188.889375][ C0] EXT4-fs (loop3): initial error at time 1785185930: ext4_validate_block_bitmap:440 [ 188.906195][ C0] EXT4-fs (loop3): last error at time 1785185930: ext4_validate_block_bitmap:440 [ 188.934534][ T7488] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 188.988648][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 189.015897][ T7488] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #11: comm syz.3.512: attempt to clear invalid blocks 983260 len 1 [ 189.043993][ T7488] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.046923][ T7488] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.512: Invalid inode table block 0 in block_group 0 [ 189.234449][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 189.537345][ T7488] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 189.919810][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 189.936996][ T7488] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 189.993884][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 190.028957][ T7488] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.512: Invalid inode table block 0 in block_group 0 [ 190.157405][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 190.159544][ T7488] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 190.215766][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 190.216318][ T7488] EXT4-fs error (device loop3): ext4_truncate:4691: inode #11: comm syz.3.512: mark_inode_dirty error [ 190.248918][ T7488] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 190.251242][ T7488] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 190.291114][ T7488] loop3: lost filesystem error report for type 5 error -117 [ 190.292227][ T7488] EXT4-fs (loop3): 1 truncate cleaned up [ 190.309986][ T1108] wlan1: Trigger new scan to find an IBSS to join [ 190.350213][ T7488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.377986][ T7522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.524'. [ 190.651811][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.742930][ T7530] syzkaller0: entered promiscuous mode [ 190.748568][ T7530] syzkaller0: entered allmulticast mode [ 192.105846][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 192.309410][ T139] wlan1: Trigger new scan to find an IBSS to join [ 193.270481][ T1157] wlan1: Trigger new scan to find an IBSS to join [ 193.687259][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.694052][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.184748][ T37] wlan1: Creating new IBSS network, BSSID 4a:29:3c:56:0e:58 [ 194.356234][ T7551] tipc: Enabling of bearer rejected, failed to enable media [ 194.933282][ T7590] overlay: Unknown parameter 'seclabel' [ 195.572032][ T7230] wlan1: Trigger new scan to find an IBSS to join [ 195.627767][ T7601] IPv6: sit1: Disabled Multicast RS [ 195.716838][ T7592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.544'. [ 196.914212][ T7610] loop1: detected capacity change from 0 to 512 [ 196.959198][ T7610] EXT4-fs: Ignoring removed oldalloc option [ 197.000313][ T7610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.050430][ T7610] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 197.110518][ T7610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 197.121907][ T7614] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 197.151262][ T7610] EXT4-fs (loop1): orphan cleanup on readonly fs [ 197.189277][ T7610] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 197.234979][ T7610] EXT4-fs warning (device loop1): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 197.411408][ T7610] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 197.472294][ T7620] loop4: detected capacity change from 0 to 1764 [ 197.499961][ T13] wlan1: Creating new IBSS network, BSSID d6:c0:bc:6d:65:a2 [ 197.525043][ T7610] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.550: bg 0: block 40: padding at end of block bitmap is not set [ 197.570040][ T7610] loop1: lost filesystem error report for type 5 error -117 [ 197.577473][ T7610] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 197.584906][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 197.584939][ C0] EXT4-fs (loop1): initial error at time 1785185939: ext4_validate_block_bitmap:440 [ 197.584982][ C0] EXT4-fs (loop1): last error at time 1785185939: ext4_validate_block_bitmap:440 [ 197.647831][ T7610] loop1: lost filesystem error report for type 5 error -117 [ 197.651989][ T7610] EXT4-fs (loop1): 1 truncate cleaned up [ 197.683203][ T7610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.723882][ T7610] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.550: bad symlink. [ 197.766858][ T7610] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.550: bad symlink. [ 197.977329][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.461388][ T7643] overlay: Unknown parameter 'seclabel' [ 199.313763][ T7653] loop1: detected capacity change from 0 to 256 [ 201.149456][ T7695] overlay: Unknown parameter 'seclabel' [ 201.190220][ T7696] tipc: Started in network mode [ 201.213411][ T7696] tipc: Node identity 3adc9137361e, cluster identity 4711 [ 201.239641][ T7696] tipc: Enabled bearer , priority 0 [ 201.277696][ T7691] syzkaller0: entered promiscuous mode [ 201.298550][ T7691] syzkaller0: entered allmulticast mode [ 201.346893][ T7696] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 202.422462][ T7237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.099161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 203.469503][ T5860] tipc: Node number set to 214077751 [ 203.500444][ T7696] tipc: Resetting bearer [ 203.670322][ T7686] tipc: Resetting bearer [ 203.756484][ T7686] tipc: Disabling bearer [ 203.831603][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 204.161252][ T7717] loop0: detected capacity change from 0 to 1764 [ 204.207406][ T7719] Unsupported ieee802154 address type: 0 [ 205.017650][ T7737] loop3: detected capacity change from 0 to 256 [ 205.059413][ T7737] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.144840][ T7737] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.852019][ T7752] loop2: detected capacity change from 0 to 128 [ 205.967476][ T7752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.077069][ T7752] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.405704][ T5636] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.471327][ T7765] erspan0: entered allmulticast mode [ 206.519520][ T7764] erspan0: left allmulticast mode [ 206.696735][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.609'. [ 207.105239][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 207.384133][ T7789] netlink: 'syz.2.615': attribute type 27 has an invalid length. [ 207.668717][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.676591][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.847343][ T7797] loop3: detected capacity change from 0 to 4096 [ 207.898142][ T7797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.971310][ T7797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.044831][ T31] audit: type=1800 audit(1785185949.942:3): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.619" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 208.352219][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.378138][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.427037][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.833135][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.881760][ T7171] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.976582][ T7171] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.020431][ T7171] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.274429][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.631'. [ 210.379406][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.593319][ T7846] netlink: 300 bytes leftover after parsing attributes in process `syz.0.636'. [ 210.650621][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 211.052434][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.060392][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.203032][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.223051][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.428417][ T7849] geneve3: entered promiscuous mode [ 213.195278][ T7899] loop5: detected capacity change from 0 to 128 [ 213.381026][ T7899] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.492839][ T7899] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.461166][ T5637] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.460597][ T7952] syzkaller0: entered promiscuous mode [ 215.472617][ T7952] syzkaller0: entered allmulticast mode [ 216.385299][ T7923] infiniband syz0: set down [ 216.404389][ T7923] infiniband syz0: added batadv_slave_1 [ 216.487394][ T7923] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 216.504391][ T7923] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 216.524820][ T7923] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 216.624989][ T7923] RDS/IB: syz0: added [ 216.643549][ T7923] smc: adding ib device syz0 with port count 1 [ 216.668228][ T7923] smc: ib device syz0 port 1 has no pnetid [ 216.771647][ T7963] netlink: 80 bytes leftover after parsing attributes in process `syz.4.681'. [ 216.804340][ T7963] netlink: 80 bytes leftover after parsing attributes in process `syz.4.681'. [ 217.133849][ T7976] netlink: 44 bytes leftover after parsing attributes in process `syz.2.684'. [ 217.820106][ T7998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.696'. [ 217.860030][ T8000] sctp: [Deprecated]: syz.5.697 (pid 8000) Use of int in maxseg socket option. [ 217.860030][ T8000] Use struct sctp_assoc_value instead [ 218.034602][ T8004] syzkaller0: entered promiscuous mode [ 218.058962][ T8004] syzkaller0: entered allmulticast mode [ 220.264847][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.712'. [ 220.310260][ T8040] loop3: detected capacity change from 0 to 764 [ 221.004124][ T8048] loop0: detected capacity change from 0 to 1764 [ 221.402502][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 221.410327][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 221.416429][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 221.422555][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 221.429261][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 221.772037][ T8053] tipc: Started in network mode [ 221.784441][ T8053] tipc: Node identity 220ef333a82f, cluster identity 4711 [ 221.810512][ T8053] tipc: Enabled bearer , priority 0 [ 221.842098][ T8053] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 221.918444][ T8052] tipc: Disabling bearer [ 221.943148][ T7237] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 222.441269][ T8071] syzkaller0: entered promiscuous mode [ 222.447132][ T8071] syzkaller0: entered allmulticast mode [ 223.379830][ T8104] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 224.087983][ T8112] syzkaller0: entered promiscuous mode [ 224.096514][ T8112] syzkaller0: entered allmulticast mode [ 224.263731][ T8117] loop0: detected capacity change from 0 to 1024 [ 224.308098][ T8118] loop1: detected capacity change from 0 to 1024 [ 224.330481][ T8118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.333210][ T8117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.359084][ T8117] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.379552][ T8117] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.743: bg 0: block 112: padding at end of block bitmap is not set [ 224.427351][ T8118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.460306][ T8118] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.507997][ T8118] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.742: bg 0: block 112: padding at end of block bitmap is not set [ 224.526145][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.539441][ T8118] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 224.688374][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.820552][ T8134] netlink: 'syz.5.748': attribute type 5 has an invalid length. [ 224.838850][ T8063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.852148][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 225.120998][ T8140] loop1: detected capacity change from 0 to 512 [ 225.188691][ T8140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.202085][ T8140] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.237637][ T31] audit: type=1800 audit(1785185967.132:4): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.750" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 225.286758][ T5867] kernel read not supported for file /vcs (pid: 5867 comm: kworker/0:8) [ 225.733493][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.063302][ T8170] tipc: Enabled bearer , priority 0 [ 226.073582][ T8170] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 226.076288][ T8166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.762'. [ 226.194890][ T8168] tipc: Disabling bearer [ 226.585345][ T7237] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 227.568063][ T8213] loop5: detected capacity change from 0 to 512 [ 227.581481][ T7171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.654941][ T8213] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.704393][ T8213] EXT4-fs (loop5): 1 truncate cleaned up [ 227.732594][ T8213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.904555][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.098412][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.787'. [ 228.306065][ T8235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.790'. [ 229.538927][ T8183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.471509][ T8276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.807'. [ 230.519056][ T8276] unsupported nlmsg_type 40 [ 230.927782][ T8287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.812'. [ 232.045116][ T8303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.118096][ T8305] loop5: detected capacity change from 0 to 128 [ 233.647459][ T8326] loop1: detected capacity change from 0 to 128 [ 233.754509][ T8326] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.804073][ T8326] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.025155][ T5624] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.299871][ T8344] netlink: 32 bytes leftover after parsing attributes in process `syz.5.836'. [ 234.506286][ T7171] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 234.595471][ T8362] loop3: detected capacity change from 0 to 1024 [ 234.620526][ T8362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.659214][ T7237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.706635][ T8362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.745498][ T8362] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.851825][ T8362] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.840: bg 0: block 112: padding at end of block bitmap is not set [ 234.867405][ T8362] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 234.934909][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.854118][ T8406] netlink: 32 bytes leftover after parsing attributes in process `syz.5.858'. [ 237.394129][ T8354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.539350][ T8443] overlay: Unknown parameter 'seclabel' [ 238.906611][ T8449] syzkaller0: entered promiscuous mode [ 238.929164][ T8449] syzkaller0: entered allmulticast mode [ 238.978432][ T8449] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 239.001221][ T7237] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 239.482051][ T8461] loop2: detected capacity change from 0 to 4096 [ 239.514505][ T8461] EXT4-fs: Ignoring removed bh option [ 239.553473][ T8461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.593501][ T8461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.595686][ T8466] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.792414][ T8461] EXT4-fs error (device loop2): ext4_get_first_dir_block:3548: inode #12: comm syz.2.879: directory missing '.' [ 240.062065][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.873401][ T8451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.176487][ T8492] overlay: Unknown parameter 'seclabel' [ 242.921795][ T8497] syzkaller0: entered promiscuous mode [ 242.942883][ T8497] syzkaller0: entered allmulticast mode [ 242.986457][ T8499] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 243.469712][ T8514] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.909764][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.903'. [ 244.095590][ T1108] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 244.353595][ T8543] overlay: Unknown parameter 'seclabel' [ 244.578521][ T8547] loop5: detected capacity change from 0 to 512 [ 244.648308][ T8547] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 244.954593][ T8549] loop1: detected capacity change from 0 to 512 [ 244.961257][ T7230] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 245.018852][ T8549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.122050][ T8549] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.210187][ T8549] RDS: rds_bind could not find a transport for 0:0:625f:6f70::, load rds_tcp or rds_rdma? [ 245.358298][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.437766][ T8562] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.600826][ T8599] overlay: Unknown parameter 'seclabel' [ 246.969287][ T8530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.812602][ T8615] loop3: detected capacity change from 0 to 1024 [ 247.871226][ T8615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.973151][ T8615] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.142936][ T8633] loop2: detected capacity change from 0 to 256 [ 248.231975][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.364706][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 251.158535][ T8636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.490853][ T8686] loop1: detected capacity change from 0 to 512 [ 251.581233][ T8686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.673934][ T8686] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.835600][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.098084][ T8724] syzkaller0: entered promiscuous mode [ 253.105011][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.973'. [ 253.118950][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.974'. [ 253.121411][ T8724] syzkaller0: entered allmulticast mode [ 253.186262][ T8731] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 253.395766][ T8738] loop5: detected capacity change from 0 to 256 [ 254.216165][ T8760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.988'. [ 254.228350][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 254.591150][ T8777] syzkaller0: entered promiscuous mode [ 254.619900][ T8777] syzkaller0: entered allmulticast mode [ 254.650488][ T8777] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 254.736336][ T8780] loop0: detected capacity change from 0 to 4096 [ 254.758497][ T8780] EXT4-fs: Ignoring removed bh option [ 254.805883][ T8780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.884244][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.118988][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.130628][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.206440][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.483784][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 255.495333][ T8804] Unsupported ieee802154 address type: 0 [ 255.507795][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1006'. [ 255.825318][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 255.855939][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 256.194139][ T8818] syzkaller0: entered promiscuous mode [ 256.235315][ T8818] syzkaller0: entered allmulticast mode [ 256.292470][ T8828] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 256.369286][ T8827] loop2: detected capacity change from 0 to 4096 [ 256.388657][ T8827] EXT4-fs: Ignoring removed bh option [ 256.427287][ T8827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.511439][ T8827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.526067][ T8833] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 256.526067][ T8833] program syz.0.1019 not setting count and/or reply_len properly [ 256.842574][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.860916][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 257.805109][ T8866] syzkaller0: entered promiscuous mode [ 257.830735][ T8866] syzkaller0: entered allmulticast mode [ 257.838226][ T8862] loop0: detected capacity change from 0 to 8192 [ 257.855688][ T8866] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 257.918810][ T31] audit: type=1800 audit(1785185999.812:5): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1033" name="file1" dev="loop0" ino=1048626 res=0 errno=0 [ 258.005071][ T8870] loop2: detected capacity change from 0 to 4096 [ 258.035940][ T8870] EXT4-fs: Ignoring removed bh option [ 258.083259][ T8870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.179480][ T8870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.433354][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.601371][ T7241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.724600][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 258.776452][ T8891] netlink: 'syz.2.1040': attribute type 8 has an invalid length. [ 259.150481][ T8899] loop0: detected capacity change from 0 to 1024 [ 259.165156][ T8898] loop2: detected capacity change from 0 to 1024 [ 259.192136][ T8901] loop5: detected capacity change from 0 to 1024 [ 259.213087][ T8898] EXT4-fs (loop2): invalid inodes per group: 204800 [ 259.213087][ T8898] [ 259.225226][ T8899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.313750][ T8901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.332136][ T8899] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.394585][ T8901] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.553130][ T8909] loop1: detected capacity change from 0 to 1024 [ 259.586087][ T8909] EXT4-fs: Ignoring removed bh option [ 259.621232][ T8909] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.657213][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.686476][ T8909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 259.705676][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.718981][ T8909] System zones: 0-1, 3-12 [ 259.747280][ T8911] loop2: detected capacity change from 0 to 512 [ 259.845991][ T8911] EXT4-fs: Ignoring removed bh option [ 259.854140][ T8909] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.1046: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.904986][ T8911] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 259.937187][ T8909] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.938755][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 259.954470][ C0] EXT4-fs (loop1): initial error at time 1785186001: ext4_map_blocks:833: inode 3: block 1 [ 259.964591][ C0] EXT4-fs (loop1): last error at time 1785186001: ext4_map_blocks:833: inode 3: block 1 [ 260.000550][ T8911] EXT4-fs (loop2): 1 truncate cleaned up [ 260.001096][ T8909] EXT4-fs (loop1): Remounting filesystem read-only [ 260.017741][ T8911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.046704][ T8909] Quota error (device loop1): write_blk: dquota write failed [ 260.086550][ T8909] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 260.133726][ T8909] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 260.186663][ T8909] EXT4-fs (loop1): 1 orphan inode deleted [ 260.202913][ T8911] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 260.257650][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.449220][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.545923][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.799405][ T5892] kernel read not supported for file /rfkill (pid: 5892 comm: kworker/1:7) [ 260.969310][ T8939] loop0: detected capacity change from 0 to 512 [ 261.043342][ T8939] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.1056: corrupted xattr block 95: invalid header [ 261.160491][ T8939] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.164888][ T8939] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.1056: bg 0: block 7: invalid block bitmap [ 261.174256][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 261.174289][ C1] EXT4-fs (loop0): initial error at time 1785186003: ext4_expand_extra_isize_ea:2810: inode 11 [ 261.174349][ C1] EXT4-fs (loop0): last error at time 1785186003: ext4_expand_extra_isize_ea:2810: inode 11 [ 261.258454][ T8938] loop1: detected capacity change from 0 to 8192 [ 261.294193][ T8939] loop0: lost filesystem error report for type 5 error -117 [ 261.318119][ T8939] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 261.349593][ T31] audit: type=1800 audit(1785186003.252:6): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1055" name="file1" dev="loop1" ino=1048627 res=0 errno=0 [ 261.361232][ T8939] loop0: lost filesystem error report for type 5 error -117 [ 261.415734][ T8939] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.1056: corrupted xattr block 95: invalid header [ 261.481507][ T8939] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.487331][ T8939] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 261.529606][ T8939] EXT4-fs (loop0): 1 orphan inode deleted [ 261.554562][ T8939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.177006][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.310188][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 264.016695][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 264.865359][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 265.149836][ T8993] 9p: Bad value for 'rfdno' [ 265.497326][ T9003] loop3: detected capacity change from 0 to 1024 [ 265.516454][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1081'. [ 265.624889][ T9014] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 265.624889][ T9014] program syz.2.1083 not setting count and/or reply_len properly [ 265.644862][ T9003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 265.658651][ T9003] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.670519][ T7171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.801259][ T9019] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1086'. [ 265.897410][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 266.467809][ T9037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.536557][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 266.658151][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 267.198510][ T9060] loop3: detected capacity change from 0 to 1024 [ 267.396546][ T9060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.424442][ T9060] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.566874][ T5642] kernel read not supported for file /rfkill (pid: 5642 comm: kworker/0:4) [ 267.584253][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.072369][ T9088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.296540][ T9089] loop1: detected capacity change from 0 to 8192 [ 268.674239][ T9114] loop1: detected capacity change from 0 to 1024 [ 269.152639][ T9127] loop3: detected capacity change from 0 to 1024 [ 269.190304][ T9127] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 269.230548][ T9127] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 269.256508][ T9127] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 269.314907][ T9127] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.1124: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 269.340367][ T9129] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1125'. [ 269.369156][ T9127] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 269.371040][ T9127] EXT4-fs (loop3): no journal found [ 269.380185][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 269.380216][ C1] EXT4-fs (loop3): initial error at time 1785186011: ext4_ext_check_inode:521: inode 3 [ 269.380272][ C1] EXT4-fs (loop3): last error at time 1785186011: ext4_ext_check_inode:521: inode 3 [ 269.412055][ T9127] EXT4-fs (loop3): can't get journal size [ 269.487802][ T9127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.846258][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.066527][ T9153] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 270.174389][ T9157] loop3: detected capacity change from 0 to 1024 [ 270.184468][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 270.202006][ T31] audit: type=1326 audit(1785186012.082:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.270374][ T9157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.276220][ T31] audit: type=1326 audit(1785186012.082:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.337308][ T31] audit: type=1326 audit(1785186012.092:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.362867][ T9157] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.363713][ T31] audit: type=1326 audit(1785186012.102:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.400910][ T31] audit: type=1326 audit(1785186012.102:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0879d5e6ce code=0x7ffc0000 [ 270.673293][ T31] audit: type=1326 audit(1785186012.102:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0879d5e6ce code=0x7ffc0000 [ 270.701421][ T31] audit: type=1326 audit(1785186012.102:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.738842][ T31] audit: type=1326 audit(1785186012.102:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.777116][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 270.805673][ T31] audit: type=1326 audit(1785186012.102:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 270.831688][ T31] audit: type=1326 audit(1785186012.102:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.4.1138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f0879d9de99 code=0x7ffc0000 [ 271.452253][ T9187] rdma_rxe: rxe_newlink: failed to add lo [ 271.674679][ T9187] smc: removing ib device syz0 [ 271.683285][ T9191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 271.752372][ T9204] syz0: rxe_newlink: already configured on batadv_slave_1 [ 271.997246][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 272.035403][ T9187] smbdirect: ib_dev[syz0] removed [ 272.223670][ T9212] PM: suspend entry (deep) [ 272.223810][ T9214] loop1: detected capacity change from 0 to 1024 [ 272.566162][ T7237] Filesystems sync: 0.306 seconds [ 272.872505][ T9225] loop3: detected capacity change from 0 to 4096 [ 272.988065][ T9212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.047967][ T9212] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 273.244356][ T9230] syzkaller1: entered promiscuous mode [ 273.254279][ T9230] syzkaller1: entered allmulticast mode [ 273.273362][ T9212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.312940][ T9212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 273.404770][ T9212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.422579][ T9212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.483970][ T9212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.501545][ T9212] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 273.581698][ T9212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.587925][ T9212] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 273.599564][ T9242] loop3: detected capacity change from 0 to 512 [ 273.617776][ T9242] EXT4-fs: Ignoring removed oldalloc option [ 273.666542][ T9242] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.1167: invalid block [ 273.683144][ T9212] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 273.700691][ T9242] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.703331][ T9212] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 273.712607][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 273.712642][ C0] EXT4-fs (loop3): initial error at time 1785186015: ext4_get_branch:178: inode 13: block 1024 [ 273.712710][ C0] EXT4-fs (loop3): last error at time 1785186015: ext4_get_branch:178: inode 13: block 1024 [ 273.726814][ T9248] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 273.767541][ T9242] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1167: invalid indirect mapped block 1024 (level 0) [ 273.784163][ T9242] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.807715][ T9242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1167: bg 0: block 35: padding at end of block bitmap is not set [ 273.877907][ T9212] Freezing user space processes [ 273.891436][ T9242] loop3: lost filesystem error report for type 5 error -117 [ 273.894604][ T9242] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 273.920761][ T9242] loop3: lost filesystem error report for type 5 error -117 [ 273.921526][ T9242] EXT4-fs (loop3): 1 truncate cleaned up [ 273.973945][ T9242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.708812][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 274.966762][ T9212] Freezing user space processes completed (elapsed 1.040 seconds) [ 274.975682][ T9212] OOM killer disabled. [ 274.981826][ T9212] Freezing remaining freezable tasks [ 274.996122][ T9212] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 275.005050][ T9212] printk: Suspending console(s) (use no_console_suspend to debug) [ 275.221006][ T9212] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 275.221094][ T9212] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 275.221174][ T9212] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 275.221251][ T9212] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 275.221331][ T9212] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 275.221411][ T9212] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 275.221540][ T9212] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 275.221620][ T9212] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 275.221697][ T9212] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 275.221775][ T9212] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 275.221858][ T9212] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 275.221936][ T9212] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 275.222015][ T9212] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 275.222093][ T9212] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 275.222172][ T9212] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 275.277783][ T49] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 275.348807][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 275.428855][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 275.508807][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 275.588932][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 275.748957][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 275.971262][ T9212] ACPI: PM: Preparing to enter system sleep state S3 [ 275.972172][ T9212] ACPI: PM: Saving platform NVS memory [ 275.973666][ T9212] Disabling non-boot CPUs ... [ 276.004057][ T9212] smpboot: CPU 1 is now offline [ 276.032774][ T9212] ACPI: PM: Low-level resume complete [ 276.032828][ T9212] ACPI: PM: Restoring platform NVS memory [ 276.063753][ T9212] Enabling non-boot CPUs ... [ 276.065899][ T9212] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 276.088909][ T9212] CPU1 is up [ 276.089766][ T9212] ACPI: PM: Waking up from system sleep state S3 [ 276.229425][ T37] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 276.673179][ T9212] OOM killer enabled. [ 276.673864][ T9212] Restarting tasks: Starting [ 276.740000][ T9212] Restarting tasks: Done [ 276.761995][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 276.786061][ T9212] random: crng reseeded on system resumption [ 276.798881][ T9212] PM: suspend exit [ 276.818216][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 276.905369][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.961428][ T9309] loop2: detected capacity change from 0 to 1024 [ 277.086288][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 277.088455][ T9309] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.173095][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.323888][ T9318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1173'. [ 277.458360][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 277.538368][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 277.618644][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 277.708143][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 277.871571][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 279.064021][ T9351] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.086008][ T9354] loop1: detected capacity change from 0 to 1024 [ 279.922950][ T9382] loop1: detected capacity change from 0 to 256 [ 280.088806][ T9348] infiniband syz0: set active [ 280.092505][ T9348] infiniband syz0: added batadv_slave_1 [ 280.105119][ T9348] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 280.121381][ T9348] infiniband syz0: Couldn't open port 1 [ 280.143398][ T9348] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 280.152723][ T9348] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 280.159189][ T9348] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 280.267320][ T9393] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.294931][ T9348] RDS/IB: syz0: added [ 280.301751][ T9348] smc: adding ib device syz0 with port count 1 [ 280.308582][ T9348] smc: ib device syz0 port 1 has no pnetid [ 280.332464][ T9396] loop0: detected capacity change from 0 to 1024 [ 280.397517][ T9396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.416185][ T9396] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.644207][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.540703][ T9433] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.539532][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 282.550877][ T9458] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 283.235621][ T9472] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.593565][ T9477] syzkaller0: entered promiscuous mode [ 283.594478][ T9477] syzkaller0: entered allmulticast mode [ 283.598612][ T9477] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 285.501338][ T9509] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.857296][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 286.096720][ T9523] loop2: detected capacity change from 0 to 128 [ 286.136252][ T9523] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 286.154161][ T9523] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.183091][ T9523] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 286.437605][ T5636] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.040855][ T9541] loop2: detected capacity change from 0 to 1764 [ 287.767295][ T9536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'. [ 288.020768][ T9545] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.711526][ T9570] overlay: Unknown parameter 'seclabel' [ 290.751344][ T9589] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.058792][ T9632] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 293.306802][ T9634] loop2: detected capacity change from 0 to 1764 [ 294.664614][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 295.018294][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 296.385478][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1319'. [ 296.482958][ T9697] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 296.658501][ T9701] /dev/sg0: Can't lookup blockdev [ 296.721693][ T9701] random: crng reseeded on system resumption [ 296.790516][ T9701] Restarting kernel threads ... [ 296.846667][ T9701] Done restarting kernel threads. [ 296.942144][ T9709] gadgetfs: bound to dummy_udc driver [ 297.180034][ T5795] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 297.204129][ T5867] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 297.249084][ C0] gadgetfs: connected [ 297.254069][ T5867] gadgetfs: disconnected [ 297.394299][ T5795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.408515][ C0] gadgetfs: connected [ 297.414377][ T5867] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 297.434401][ T5795] usb 4-1: config 0 has no interfaces? [ 297.435731][ T5867] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 297.453991][ T5795] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.484202][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.486612][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.562772][ T5795] usb 4-1: config 0 descriptor?? [ 297.564948][ C0] gadgetfs: configuration #1 [ 297.727943][ T9733] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.977750][ T5867] usb 4-1: USB disconnect, device number 6 [ 298.046243][ T9700] gadgetfs: suspended from state 3 [ 298.085188][ T9700] gadgetfs: disconnected [ 298.092039][ T5860] usb 1-1: USB disconnect, device number 2 [ 298.279116][ T9742] loop2: detected capacity change from 0 to 1024 [ 298.306685][ T9742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.381374][ T9742] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.1339: lblock 1 mapped to illegal pblock 1 (length 1) [ 298.410457][ T9742] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 298.412662][ T9742] __quota_error: 5 callbacks suppressed [ 298.412686][ T9742] Quota error (device loop2): write_blk: dquota write failed [ 298.421848][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 298.421900][ C1] EXT4-fs (loop2): initial error at time 1785186040: ext4_map_blocks:833: inode 3: block 1 [ 298.421965][ C1] EXT4-fs (loop2): last error at time 1785186040: ext4_map_blocks:833: inode 3: block 1 [ 298.511250][ T9742] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 298.579853][ T9742] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.1339: Failed to acquire dquot type 0 [ 298.628852][ T9742] loop2: lost filesystem error report for type 5 error -117 [ 298.629344][ T9742] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.1339: Freeing blocks not in datazone - block = 0, count = 4096 [ 298.682822][ T9742] loop2: lost filesystem error report for type 5 error -117 [ 298.689685][ T9742] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1339: Invalid inode bitmap blk 0 in block_group 0 [ 298.720753][ T9298] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:69: lblock 1 mapped to illegal pblock 1 (length 1) [ 298.774727][ T9742] loop2: lost filesystem error report for type 5 error -117 [ 298.787968][ T9298] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 298.805833][ T9742] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 298.838207][ T9742] loop2: lost filesystem error report for type 5 error -117 [ 298.839218][ T9742] EXT4-fs (loop2): 1 orphan inode deleted [ 298.840860][ T9298] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 298.911322][ T9742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.923667][ T9298] EXT4-fs error (device loop2): ext4_release_dquot:7075: comm kworker/u8:69: Failed to release dquot type 0 [ 299.190782][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.194388][ T9295] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:66: lblock 1 mapped to illegal pblock 1 (length 1) [ 299.228350][ T9295] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 299.232916][ T9295] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 299.250755][ T9295] EXT4-fs error (device loop2): ext4_release_dquot:7075: comm kworker/u8:66: Failed to release dquot type 0 [ 299.262590][ T9295] loop2: lost filesystem error report for type 5 error -117 [ 302.312396][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'. [ 302.373280][ T9856] overlay: Unknown parameter 'seclabel' [ 303.430460][ T9868] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 303.507388][ T9868] bond3: (slave macvlan2): making interface the new active one [ 303.550650][ T9868] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 303.612705][ T9875] IPv6: sit1: Disabled Multicast RS [ 304.174295][ T5867] bond_slave_0: entered promiscuous mode [ 304.181406][ T5867] bond_slave_1: entered promiscuous mode [ 304.472701][ T9893] /dev/sg0: Can't lookup blockdev [ 304.507871][ T9893] random: crng reseeded on system resumption [ 304.593495][ T9896] gadgetfs: bound to dummy_udc driver [ 304.879644][ T5860] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 304.887400][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 304.911925][ C0] gadgetfs: connected [ 304.923636][ T5860] gadgetfs: disconnected [ 304.956947][ T9908] overlay: Unknown parameter 'seclabel' [ 305.305813][ C0] gadgetfs: connected [ 305.384511][ T5860] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 305.495341][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.519543][ T5860] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 305.600747][ T5867] usb 3-1: config 0 has no interfaces? [ 305.608204][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.628125][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.654188][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.665543][ C0] gadgetfs: configuration #1 [ 305.719328][ T5867] usb 3-1: config 0 descriptor?? [ 305.860618][ T9914] rdma_rxe: rxe_newlink: failed to add lo [ 305.970689][ T9914] smc: removing ib device syz0 [ 306.044295][ T9914] smbdirect: ib_dev[syz0] removed [ 306.189335][ T5867] usb 3-1: USB disconnect, device number 2 [ 306.252791][ T9892] gadgetfs: suspended from state 3 [ 306.283267][ T9892] gadgetfs: disconnected [ 306.288941][ T5629] usb 1-1: USB disconnect, device number 3 [ 306.781772][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1416'. [ 307.409999][ T9956] overlay: Unknown parameter 'seclabel' [ 307.464756][ T7241] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.016654][ T9979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.051252][ T9979] bond3: (slave macvlan2): making interface the new active one [ 309.068999][ T9979] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 309.537711][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 310.162116][T10004] overlay: Unknown parameter 'seclabel' [ 310.417106][ T9948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.913248][T10028] bridge0: port 3(dummy0) entered blocking state [ 311.946427][T10028] bridge0: port 3(dummy0) entered disabled state [ 311.982584][T10028] dummy0: entered allmulticast mode [ 312.079081][T10028] dummy0: entered promiscuous mode [ 312.115611][T10028] bridge0: port 3(dummy0) entered blocking state [ 312.122172][T10028] bridge0: port 3(dummy0) entered forwarding state [ 312.215681][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 314.037660][ T9294] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 314.102129][T10089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.380091][T10103] lo speed is unknown, defaulting to 1000 [ 314.411876][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1474'. [ 314.461801][T10103] lo speed is unknown, defaulting to 1000 [ 314.804579][T10103] lo speed is unknown, defaulting to 1000 [ 315.299820][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.306295][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.462993][T10131] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 315.621024][T10134] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 315.786111][T10103] infiniband syz0: set active [ 315.786208][ T5629] lo speed is unknown, defaulting to 1000 [ 315.802330][T10103] infiniband syz0: added lo [ 315.826887][T10103] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 315.835854][T10103] infiniband syz0: Couldn't open port 1 [ 315.886049][T10103] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 315.946217][T10103] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 315.983997][T10103] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 316.151071][T10103] RDS/IB: syz0: added [ 316.163747][T10149] IPv6: sit1: Disabled Multicast RS [ 316.170677][T10103] smc: adding ib device syz0 with port count 1 [ 316.203157][T10103] smc: ib device syz0 port 1 has no pnetid [ 316.251521][ T5629] lo speed is unknown, defaulting to 1000 [ 316.254953][T10103] lo speed is unknown, defaulting to 1000 [ 317.529600][T10167] syzkaller0: entered promiscuous mode [ 317.564523][T10167] syzkaller0: entered allmulticast mode [ 317.985373][T10184] loop1: detected capacity change from 0 to 512 [ 318.136482][T10103] lo speed is unknown, defaulting to 1000 [ 318.909172][T10205] loop3: detected capacity change from 0 to 1764 [ 319.905999][T10215] loop2: detected capacity change from 0 to 512 [ 319.966694][T10215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 320.012339][T10215] System zones: 1-12 [ 320.044352][T10215] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.1525: error while reading EA inode 32 err=-116 [ 320.090539][T10215] loop2: lost filesystem error report for type 5 error -117 [ 320.098308][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 320.112142][ C1] EXT4-fs (loop2): initial error at time 1785186062: ext4_xattr_inode_iget:444 [ 320.121152][ C1] EXT4-fs (loop2): last error at time 1785186062: ext4_xattr_inode_iget:444 [ 320.130226][T10215] EXT4-fs (loop2): Remounting filesystem read-only [ 320.141949][T10215] EXT4-fs warning (device loop2): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 320.158714][T10215] EXT4-fs (loop2): 1 orphan inode deleted [ 320.175557][T10215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.222630][T10215] EXT4-fs (loop2): shut down requested (0) [ 320.604263][T10103] lo speed is unknown, defaulting to 1000 [ 320.648031][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.124120][T10234] loop2: detected capacity change from 0 to 128 [ 321.211349][T10234] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 321.224592][T10234] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.373821][ T5636] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.789440][T10103] lo speed is unknown, defaulting to 1000 [ 322.878932][T10262] syzkaller0: entered promiscuous mode [ 322.907908][T10262] syzkaller0: entered allmulticast mode [ 322.938691][T10267] loop0: detected capacity change from 0 to 512 [ 322.993306][T10267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.073705][T10267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.120610][T10267] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.475057][ T5635] Quota error (device loop0): do_check_range: Getting block 33554435 out of range 1-5 [ 323.498206][ T5635] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 323.520451][ T5635] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz-executor: Failed to acquire dquot type 1 [ 323.881112][T10103] lo speed is unknown, defaulting to 1000 [ 324.339699][ T9298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.561729][ T9298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.752594][ T9298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.818861][T10103] lo speed is unknown, defaulting to 1000 [ 325.342704][T10299] loop3: detected capacity change from 0 to 1764 [ 325.903913][ T9298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.990742][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.005888][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.013623][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 326.023591][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.033142][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.043106][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.327211][T10311] syzkaller0: entered promiscuous mode [ 326.352697][T10311] syzkaller0: entered allmulticast mode [ 326.416763][T10313] loop2: detected capacity change from 0 to 4096 [ 326.432042][T10313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.474847][T10313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.911498][T10329] loop3: detected capacity change from 0 to 512 [ 326.934231][T10329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.969145][T10329] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.037169][T10329] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 327.105866][T10329] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 327.225581][T10329] EXT4-fs (loop3): 1 truncate cleaned up [ 327.269211][T10329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.331184][T10329] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.1563: lblock 0 mapped to illegal pblock 4 (length 1) [ 327.392570][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.402344][T10329] EXT4-fs (loop3): Remounting filesystem read-only [ 327.558969][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.581648][ T9298] dummy0: left allmulticast mode [ 327.632349][ T9298] dummy0: left promiscuous mode [ 327.678968][ T9298] bridge0: port 3(dummy0) entered disabled state [ 327.824713][ T9298] bridge_slave_1: left allmulticast mode [ 327.884095][ T9298] bridge_slave_1: left promiscuous mode [ 327.915780][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.026998][ T9298] bridge_slave_0: left allmulticast mode [ 328.057380][ T9298] bridge_slave_0: left promiscuous mode [ 328.098554][ T5631] Bluetooth: hci3: command tx timeout [ 328.115650][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.367669][T10376] loop2: detected capacity change from 0 to 2048 [ 328.399621][ T9298] bond_slave_0: left promiscuous mode [ 328.416640][ T9298] bond_slave_1: left promiscuous mode [ 328.475157][T10376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.533777][T10383] loop1: detected capacity change from 0 to 512 [ 328.540669][T10376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 328.590412][T10376] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 328.632666][T10376] EXT4-fs (loop2): This should not happen!! Data will be lost [ 328.632666][T10376] [ 328.654424][T10376] EXT4-fs (loop2): Total free blocks count 0 [ 328.660857][T10376] EXT4-fs (loop2): Free/Dirty block details [ 328.689679][T10376] EXT4-fs (loop2): free_blocks=4096 [ 328.697654][T10376] EXT4-fs (loop2): dirty_blocks=48 [ 328.721554][T10376] EXT4-fs (loop2): Block reservation details [ 328.747539][T10376] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 328.827189][ T9253] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 328.887348][T10376] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz.2.1570: data will be lost [ 329.128932][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 329.234946][ T9298] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 329.314989][ T9298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.364861][ T9298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.384542][ T9298] bond0 (unregistering): Released all slaves [ 329.421613][ T9298] bond1 (unregistering): Released all slaves [ 329.493874][ T9298] bond2 (unregistering): Released all slaves [ 329.551903][ T9298] bond3 (unregistering): Released all slaves [ 329.630127][ T9298] bond4 (unregistering): Released all slaves [ 329.649781][T10342] tipc: Enabling of bearer rejected, failed to enable media [ 329.781134][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 329.918027][T10420] rdma_rxe: rxe_newlink: failed to add lo [ 329.964332][T10422] loop3: detected capacity change from 0 to 256 [ 329.987215][T10411] syzkaller0: entered promiscuous mode [ 330.009778][T10411] syzkaller0: entered allmulticast mode [ 330.180334][ T5631] Bluetooth: hci3: command tx timeout [ 330.734549][T10443] rdma_rxe: rxe_newlink: failed to add veth0 [ 332.258868][ T5631] Bluetooth: hci3: command tx timeout [ 332.588598][T10453] tipc: Enabling of bearer rejected, failed to enable media [ 332.810920][T10303] lo speed is unknown, defaulting to 1000 [ 333.514104][T10513] loop5: detected capacity change from 0 to 512 [ 333.567490][T10513] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1601: iget: bad i_size value: 38620345925642 [ 333.593110][T10513] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.594606][T10513] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1601: couldn't read orphan inode 15 (err -117) [ 333.603881][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 333.603914][ C1] EXT4-fs (loop5): initial error at time 1785186075: ext4_orphan_get:1399: inode 15 [ 333.603969][ C1] EXT4-fs (loop5): last error at time 1785186075: ext4_orphan_get:1399: inode 15 [ 333.646501][T10513] loop5: lost filesystem error report for type 5 error -117 [ 333.661500][T10513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.790059][T10515] loop1: detected capacity change from 0 to 4096 [ 333.842846][T10513] EXT4-fs (loop5): shut down requested (1) [ 334.082756][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.132079][T10530] syzkaller0: entered promiscuous mode [ 334.162127][T10530] syzkaller0: entered allmulticast mode [ 334.339447][ T5631] Bluetooth: hci3: command tx timeout [ 334.356718][T10512] rdma_rxe: rxe_newlink: failed to add lo [ 334.705180][T10555] loop2: detected capacity change from 0 to 128 [ 334.721944][T10545] tipc: Enabling of bearer rejected, failed to enable media [ 334.783391][T10548] syzkaller0: entered promiscuous mode [ 334.820954][T10548] syzkaller0: entered allmulticast mode [ 334.935773][T10539] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 335.309192][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 335.552177][T10580] loop5: detected capacity change from 0 to 1024 [ 335.558765][ T9298] hsr_slave_0: left promiscuous mode [ 335.569147][T10580] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 335.578585][ T9298] hsr_slave_1: left promiscuous mode [ 335.579494][T10580] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 335.591106][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.596771][T10580] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 335.634818][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.665594][T10580] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 335.679590][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.707991][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.715691][T10580] EXT4-fs (loop5): invalid journal inode [ 335.715784][T10580] EXT4-fs (loop5): can't get journal size [ 335.723525][T10580] EXT4-fs error (device loop5): __ext4_fill_super:5600: inode #2: comm syz.5.1619: iget: bad extra_isize 65535 (inode size 1024) [ 335.738980][T10585] rdma_rxe: rxe_newlink: failed to add lo [ 335.753672][T10580] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 335.754021][T10580] EXT4-fs (loop5): get root inode failed [ 335.763726][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 335.763756][ C0] EXT4-fs (loop5): initial error at time 1785186077: __ext4_fill_super:5600: inode 2 [ 335.763802][ C0] EXT4-fs (loop5): last error at time 1785186077: __ext4_fill_super:5600: inode 2 [ 335.798637][T10580] EXT4-fs (loop5): mount failed [ 335.802255][ T9298] veth1_macvtap: left promiscuous mode [ 335.829533][T10585] smc: removing ib device syz0 [ 335.836144][ T9298] veth0_macvtap: left promiscuous mode [ 335.857555][ T9298] veth1_vlan: left promiscuous mode [ 335.874092][ T9298] veth0_vlan: left promiscuous mode [ 335.949177][T10585] smbdirect: ib_dev[syz0] removed [ 336.413441][T10603] overlay: Unknown parameter 'seclabel' [ 337.081769][T10621] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 337.592505][ T9298] team0 (unregistering): Port device team_slave_1 removed [ 337.668859][ T9298] team0 (unregistering): Port device team_slave_0 removed [ 338.424140][T10623] bond3: option mode: unable to set because the bond device has slaves [ 338.921081][T10630] geneve2: left promiscuous mode [ 338.943610][T10630] geneve2: left allmulticast mode [ 338.983272][T10641] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1638'. [ 338.991565][T10630] geneve3: left promiscuous mode [ 339.029987][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 339.074692][T10640] syzkaller0: entered promiscuous mode [ 339.105482][T10640] syzkaller0: entered allmulticast mode [ 339.142863][ T9255] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.175721][ T9255] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.315449][ T9253] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.373542][ T9253] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.856025][T10664] loop2: detected capacity change from 0 to 512 [ 339.873554][T10664] EXT4-fs: Ignoring removed orlov option [ 339.976599][T10664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.021351][T10664] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.031922][T10670] overlay: Unknown parameter 'seclabel' [ 340.484762][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.567036][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1649'. [ 341.032944][T10303] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.042360][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.050055][T10303] bridge_slave_0: entered allmulticast mode [ 341.059432][T10303] bridge_slave_0: entered promiscuous mode [ 341.069478][T10303] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.076750][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.089261][T10303] bridge_slave_1: entered allmulticast mode [ 341.110885][T10303] bridge_slave_1: entered promiscuous mode [ 341.227003][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 341.308168][T10303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.352154][T10303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.587358][T10303] team0: Port device team_slave_0 added [ 341.609020][T10716] rdma_rxe: rxe_newlink: failed to add lo [ 341.628492][T10303] team0: Port device team_slave_1 added [ 341.738924][T10713] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1656'. [ 341.815580][T10680] infiniband syz0: set down [ 341.831744][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 341.859557][T10680] infiniband syz0: added batadv_slave_1 [ 341.887990][T10303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.920765][T10680] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 341.929071][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.964708][T10680] infiniband syz0: Couldn't open port 1 [ 341.976818][T10680] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 342.002930][T10680] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 342.038723][T10303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.062865][T10680] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 342.158913][T10303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.206947][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.309106][T10303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.334912][T10747] overlay: Unknown parameter 'seclabel' [ 342.920452][T10748] loop2: detected capacity change from 0 to 512 [ 342.961528][T10680] RDS/IB: syz0: added [ 342.974259][T10748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 342.991299][T10748] System zones: 1-12 [ 342.995437][T10680] smc: adding ib device syz0 with port count 1 [ 343.037771][T10748] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.1664: error while reading EA inode 32 err=-116 [ 343.053462][T10680] smc: ib device syz0 port 1 has no pnetid [ 343.130673][T10748] loop2: lost filesystem error report for type 5 error -117 [ 343.131179][T10748] EXT4-fs (loop2): Remounting filesystem read-only [ 343.138720][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 343.138760][ C1] EXT4-fs (loop2): initial error at time 1785186085: ext4_xattr_inode_iget:444 [ 343.138803][ C1] EXT4-fs (loop2): last error at time 1785186085: ext4_xattr_inode_iget:444 [ 343.198283][T10303] hsr_slave_0: entered promiscuous mode [ 343.212134][T10303] hsr_slave_1: entered promiscuous mode [ 343.261582][T10748] EXT4-fs warning (device loop2): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 343.310504][T10748] EXT4-fs (loop2): 1 orphan inode deleted [ 343.384542][T10748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.475662][T10748] EXT4-fs (loop2): shut down requested (0) [ 343.624382][T10763] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1665'. [ 343.632785][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.109807][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 344.133976][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 344.914667][T10795] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1677'. [ 344.962499][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 345.080443][T10801] syzkaller0: entered promiscuous mode [ 345.086146][T10801] syzkaller0: entered allmulticast mode [ 345.226519][T10801] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 345.495452][ T9255] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.589796][ T9255] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.750571][ T9294] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.779079][ T9294] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.995605][T10818] loop5: detected capacity change from 0 to 512 [ 346.035476][T10818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 346.053936][T10818] System zones: 1-12 [ 346.067211][T10818] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.1682: error while reading EA inode 32 err=-116 [ 346.112052][T10818] loop5: lost filesystem error report for type 5 error -117 [ 346.115845][T10818] EXT4-fs (loop5): Remounting filesystem read-only [ 346.123529][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 346.123562][ C1] EXT4-fs (loop5): initial error at time 1785186088: ext4_xattr_inode_iget:444 [ 346.123606][ C1] EXT4-fs (loop5): last error at time 1785186088: ext4_xattr_inode_iget:444 [ 346.154784][T10818] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 346.168073][T10818] EXT4-fs (loop5): 1 orphan inode deleted [ 346.179650][T10818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.197742][T10818] EXT4-fs (loop5): shut down requested (0) [ 346.280293][T10303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.312342][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.316064][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.346679][T10303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.377477][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.402122][T10303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.445509][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.456318][T10303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.588767][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.774955][T10839] xt_bpf: check failed: parse error [ 346.993424][T10840] loop5: detected capacity change from 0 to 1764 [ 347.836187][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.874270][T10303] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.916892][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.924114][ T9298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.006519][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.013765][ T9298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.157418][T10859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1692'. [ 348.208961][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 348.222069][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 348.703768][T10875] loop3: detected capacity change from 0 to 512 [ 348.768952][T10875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 348.831215][T10875] System zones: 1-12 [ 348.854937][T10875] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: comm syz.3.1695: error while reading EA inode 32 err=-116 [ 348.869216][T10875] loop3: lost filesystem error report for type 5 error -117 [ 348.883460][T10875] EXT4-fs (loop3): Remounting filesystem read-only [ 348.890848][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 348.890882][ C1] EXT4-fs (loop3): initial error at time 1785186090: ext4_xattr_inode_iget:444 [ 348.890923][ C1] EXT4-fs (loop3): last error at time 1785186090: ext4_xattr_inode_iget:444 [ 348.976582][T10875] EXT4-fs warning (device loop3): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 349.030250][T10875] EXT4-fs (loop3): 1 orphan inode deleted [ 349.048800][T10875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.247003][T10891] loop5: detected capacity change from 0 to 128 [ 349.282945][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.417903][ T31] audit: type=1800 audit(1785186091.355:22): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1699" name="file2" dev="loop5" ino=1048630 res=0 errno=0 [ 349.965117][T10907] loop2: detected capacity change from 0 to 1764 [ 350.872386][T10920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1706'. [ 351.154753][T10303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.403065][T10941] loop3: detected capacity change from 0 to 128 [ 351.816218][T10937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.848813][T10937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.916988][T10937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.994071][T10937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.029836][T10937] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.070603][T10937] 8021q: adding VLAN 0 to HW filter on device eth0 [ 352.115282][T10937] 8021q: adding VLAN 0 to HW filter on device eth1 [ 352.167370][T10937] 8021q: adding VLAN 0 to HW filter on device eth2 [ 352.255107][T10937] 8021q: adding VLAN 0 to HW filter on device eth3 [ 352.765660][T10963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.968510][T10960] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 352.994724][T10965] syzkaller0: entered promiscuous mode [ 353.055664][T10965] syzkaller0: entered allmulticast mode [ 353.416229][T10963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.750726][T10963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.984398][T10303] veth0_vlan: entered promiscuous mode [ 354.067097][ T31] audit: type=1326 audit(1785186096.005:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.5.1739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de499de99 code=0x7ffc0000 [ 354.146251][T10963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.147196][ T31] audit: type=1326 audit(1785186096.005:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.5.1739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de499de99 code=0x7ffc0000 [ 354.450803][T10303] veth1_vlan: entered promiscuous mode [ 354.499791][ T31] audit: type=1326 audit(1785186096.005:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.5.1739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2de499de99 code=0x7ffc0000 [ 354.525748][ T31] audit: type=1326 audit(1785186096.005:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.5.1739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de499de99 code=0x7ffc0000 [ 354.824811][T11041] loop2: detected capacity change from 0 to 1764 [ 355.434246][T10303] veth0_macvtap: entered promiscuous mode [ 355.616689][T10303] veth1_macvtap: entered promiscuous mode [ 355.662101][ T9296] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.697434][T11052] loop5: detected capacity change from 0 to 128 [ 355.783905][T11052] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.877278][T11052] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.914667][T11048] syzkaller0: entered promiscuous mode [ 355.933989][T11048] syzkaller0: entered allmulticast mode [ 355.955425][T11055] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 356.014039][ T9296] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.093945][ T5637] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.184585][ T9298] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.241628][ T9253] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.274245][T10303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.341668][T10303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.420820][ T9253] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.464380][ T9253] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.508781][ T9253] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.541118][ T9253] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.652423][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 356.665377][T11075] loop5: detected capacity change from 0 to 256 [ 357.472175][T11093] loop1: detected capacity change from 0 to 1764 [ 358.152082][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1754'. [ 358.196682][ T9298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.227245][ T9298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.322168][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 358.546121][ T9255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.581158][ T9255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.835996][T11107] loop5: detected capacity change from 0 to 512 [ 358.930087][T11107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.949300][T11107] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.054702][T11107] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1759: corrupted xattr block 33: invalid ea_ino [ 359.252136][T11107] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 359.342172][T11107] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.1759: corrupted xattr block 33: invalid ea_ino [ 359.415148][T11107] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 359.432505][T11107] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 359.719971][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.921757][T11131] loop5: detected capacity change from 0 to 256 [ 359.956800][T11133] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.096519][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 360.747787][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1774'. [ 360.798606][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 361.809032][T11180] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 362.083410][T11189] loop6: detected capacity change from 0 to 4096 [ 362.192818][T11189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.783732][T11203] loop5: detected capacity change from 0 to 1764 [ 363.484305][T10303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.881539][T11239] loop5: detected capacity change from 0 to 512 [ 365.132695][T11239] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 365.154273][T11239] System zones: 1-12 [ 365.185059][T11239] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.1809: error while reading EA inode 32 err=-116 [ 365.431438][T11246] loop2: detected capacity change from 0 to 1764 [ 365.669429][T11239] loop5: lost filesystem error report for type 5 error -117 [ 365.678077][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 365.692012][ C0] EXT4-fs (loop5): initial error at time 1785186107: ext4_xattr_inode_iget:444 [ 365.701011][ C0] EXT4-fs (loop5): last error at time 1785186107: ext4_xattr_inode_iget:444 [ 365.814601][T11239] EXT4-fs (loop5): Remounting filesystem read-only [ 365.883026][T11239] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 365.970964][T11239] EXT4-fs (loop5): 1 orphan inode deleted [ 366.015507][T11239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.136008][T11239] EXT4-fs (loop5): shut down requested (0) [ 366.450642][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.683699][T11254] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 367.061272][T11264] loop1: detected capacity change from 0 to 2048 [ 367.246653][T11264] loop1: detected capacity change from 2048 to 0 [ 367.268741][ C0] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 367.561422][T11277] ieee802154 phy0 wpan0: encryption failed: -90 [ 367.593303][T11276] loop2: detected capacity change from 0 to 1024 [ 367.657696][T11281] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 367.657696][T11281] program syz.1.1825 not setting count and/or reply_len properly [ 367.660598][T11280] loop5: detected capacity change from 0 to 512 [ 367.691829][ T31] audit: type=1326 audit(1785186109.625:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 367.706160][T11276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.740137][ T31] audit: type=1326 audit(1785186109.625:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 367.766070][ T31] audit: type=1326 audit(1785186109.665:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 367.799581][T11280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 367.799732][T11280] System zones: 1-12 [ 367.811725][ T31] audit: type=1326 audit(1785186109.665:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 367.867145][T11280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.1826: error while reading EA inode 32 err=-116 [ 367.911503][ T31] audit: type=1326 audit(1785186109.665:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 367.960508][ T31] audit: type=1326 audit(1785186109.665:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 367.970416][T11280] loop5: lost filesystem error report for type 5 error -117 [ 368.060541][ T31] audit: type=1326 audit(1785186109.665:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 368.114549][T11280] EXT4-fs (loop5): Remounting filesystem read-only [ 368.119663][ T31] audit: type=1326 audit(1785186109.665:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 368.121165][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 368.152713][ C1] EXT4-fs (loop5): initial error at time 1785186110: ext4_xattr_inode_iget:444 [ 368.161797][ C1] EXT4-fs (loop5): last error at time 1785186110: ext4_xattr_inode_iget:444 [ 368.198545][T11280] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 368.209173][ T31] audit: type=1326 audit(1785186109.665:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.6.1827" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2d9d19de99 code=0x7ffc0000 [ 368.269188][T11280] EXT4-fs (loop5): 1 orphan inode deleted [ 368.299866][T11280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.329853][ T31] audit: type=1800 audit(1785186109.975:36): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1823" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 368.386178][T11280] EXT4-fs (loop5): shut down requested (0) [ 368.391727][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.586957][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.588602][T11299] netlink: 'syz.4.1834': attribute type 4 has an invalid length. [ 368.821966][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1837'. [ 369.041997][T11311] bond6: entered promiscuous mode [ 369.063928][T11311] 8021q: adding VLAN 0 to HW filter on device bond6 [ 369.373748][T11325] loop3: detected capacity change from 0 to 4096 [ 369.420202][T11325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.465205][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1845'. [ 369.502384][T11325] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 369.724409][T11325] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.1842: Failed to acquire dquot type 1 [ 369.894881][T11339] loop1: detected capacity change from 0 to 1024 [ 369.915543][T11341] loop5: detected capacity change from 0 to 512 [ 369.944035][T11341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 369.963545][T11341] System zones: 1-12 [ 369.991358][T11341] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.1849: error while reading EA inode 32 err=-116 [ 370.054979][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.118758][T11341] loop5: lost filesystem error report for type 5 error -117 [ 370.128635][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 370.142440][ C0] EXT4-fs (loop5): initial error at time 1785186112: ext4_xattr_inode_iget:444 [ 370.151449][ C0] EXT4-fs (loop5): last error at time 1785186112: ext4_xattr_inode_iget:444 [ 370.163097][T11341] EXT4-fs (loop5): Remounting filesystem read-only [ 370.179082][T11341] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 370.231050][T11341] EXT4-fs (loop5): 1 orphan inode deleted [ 370.272309][T11341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.365747][T11341] EXT4-fs (loop5): shut down requested (0) [ 370.642478][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.015003][T11363] loop1: detected capacity change from 0 to 1764 [ 372.095187][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1859'. [ 372.203122][T11386] syzkaller0: entered promiscuous mode [ 373.023642][T11386] syzkaller0: entered allmulticast mode [ 373.215206][T11401] loop1: detected capacity change from 0 to 512 [ 374.399960][T11420] loop5: detected capacity change from 0 to 256 [ 375.079512][T11440] syz0: rxe_newlink: already configured on batadv_slave_1 [ 375.126700][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 375.259745][T11445] loop2: detected capacity change from 0 to 512 [ 375.325233][T11445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 375.359067][T11445] System zones: 1-12 [ 375.406429][T11445] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.1888: error while reading EA inode 32 err=-116 [ 375.442582][T11445] loop2: lost filesystem error report for type 5 error -117 [ 375.448088][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 375.461923][ C0] EXT4-fs (loop2): initial error at time 1785186117: ext4_xattr_inode_iget:444 [ 375.470967][ C0] EXT4-fs (loop2): last error at time 1785186117: ext4_xattr_inode_iget:444 [ 375.480262][T11445] EXT4-fs (loop2): Remounting filesystem read-only [ 375.487501][T11445] EXT4-fs warning (device loop2): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 375.503392][T11445] EXT4-fs (loop2): 1 orphan inode deleted [ 375.515926][T11445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.915123][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.495912][T11467] loop6: detected capacity change from 0 to 1764 [ 377.071274][T11451] syzkaller0: entered promiscuous mode [ 377.112615][T11451] syzkaller0: entered allmulticast mode [ 377.730294][T11483] loop5: detected capacity change from 0 to 256 [ 378.048916][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.055829][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.302788][T11499] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 378.457116][T11503] loop5: detected capacity change from 0 to 512 [ 378.499666][T11503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 378.517936][T11503] System zones: 1-12 [ 378.524021][T11505] mmap: syz.2.1904 (11505) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 378.538855][T11503] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.1903: error while reading EA inode 32 err=-116 [ 378.552697][T11503] loop5: lost filesystem error report for type 5 error -117 [ 378.558087][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 378.572026][ C0] EXT4-fs (loop5): initial error at time 1785186120: ext4_xattr_inode_iget:444 [ 378.581039][ C0] EXT4-fs (loop5): last error at time 1785186120: ext4_xattr_inode_iget:444 [ 378.590566][T11503] EXT4-fs (loop5): Remounting filesystem read-only [ 378.599142][T11503] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 378.610285][T11503] EXT4-fs (loop5): 1 orphan inode deleted [ 378.618937][T11503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.751165][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.504501][T11521] loop5: detected capacity change from 0 to 1764 [ 380.322589][T11526] loop5: detected capacity change from 0 to 512 [ 380.337949][T11526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.347613][T11526] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 380.432112][T11526] EXT4-fs (loop5): 1 truncate cleaned up [ 380.454141][T11526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.758875][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.673041][T11541] syz0: rxe_newlink: already configured on batadv_slave_1 [ 381.811340][T11543] netlink: 'syz.6.1917': attribute type 35 has an invalid length. [ 382.733048][T11564] loop1: detected capacity change from 0 to 1764 [ 382.791147][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1924'. [ 385.312166][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 385.464090][T11579] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1930'. [ 385.591994][T11573] vlan3: entered allmulticast mode [ 385.617639][T11573] bridge1: entered allmulticast mode [ 385.648967][T11575] bridge1: port 1(erspan0) entered blocking state [ 385.678531][T11575] bridge1: port 1(erspan0) entered disabled state [ 385.702355][T11575] erspan0: entered allmulticast mode [ 385.736237][T11575] erspan0: entered promiscuous mode [ 386.117651][T11603] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 386.291911][T11593] syzkaller0: entered promiscuous mode [ 386.320759][T11593] syzkaller0: entered allmulticast mode [ 387.135053][T11618] loop1: detected capacity change from 0 to 1764 [ 387.538182][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1937'. [ 388.044225][T11634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.269703][T11646] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 389.177636][T11613] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 389.191918][T11628] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 389.227965][T11628] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 389.605907][T11658] loop1: detected capacity change from 0 to 256 [ 390.010563][T11666] loop3: detected capacity change from 0 to 1764 [ 391.052264][T11688] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 391.127303][T11690] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.163090][T11683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'. [ 391.173710][T11690] bond4: (slave macvlan2): making interface the new active one [ 391.194811][T11690] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 391.230598][ T5867] bond_slave_0: entered promiscuous mode [ 391.236366][ T5867] bond_slave_1: entered promiscuous mode [ 391.355031][T11702] loop3: detected capacity change from 0 to 256 [ 391.480584][T11687] syzkaller0: entered promiscuous mode [ 391.506683][T11687] syzkaller0: entered allmulticast mode [ 393.134111][T11732] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 393.249411][T11735] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 393.328481][T11735] bond1: (slave macvlan3): making interface the new active one [ 393.367803][T11735] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 393.515669][T11741] loop6: detected capacity change from 0 to 2048 [ 393.605747][T11741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.639788][T11741] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.755008][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1990'. [ 393.795536][T11749] loop1: detected capacity change from 0 to 2048 [ 393.810196][T11741] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.1989: bg 0: block 345: padding at end of block bitmap is not set [ 394.864611][T11741] EXT4-fs (loop6): Remounting filesystem read-only [ 395.541671][T10303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.915613][T11764] syzkaller0: entered promiscuous mode [ 395.944353][T11764] syzkaller0: entered allmulticast mode [ 396.142392][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 396.218918][T11772] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 396.387002][T11773] vlan2: entered allmulticast mode [ 396.436648][T11773] bridge1: entered allmulticast mode [ 396.472713][T11775] bridge1: port 1(erspan0) entered blocking state [ 396.511689][T11775] bridge1: port 1(erspan0) entered disabled state [ 396.521948][T11775] erspan0: entered allmulticast mode [ 396.534986][T11775] erspan0: entered promiscuous mode [ 396.557754][T11750] kthread_run failed with err -4 [ 397.055734][T11792] tipc: Started in network mode [ 397.071181][T11792] tipc: Node identity 5e55d093e279, cluster identity 4711 [ 397.088838][T11792] tipc: Enabled bearer , priority 0 [ 397.114030][T11797] syzkaller0: entered promiscuous mode [ 397.139992][T11797] syzkaller0: entered allmulticast mode [ 397.218857][T11792] tipc: Resetting bearer [ 397.279632][T11791] tipc: Resetting bearer [ 397.353538][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2010'. [ 397.380886][T11791] tipc: Disabling bearer [ 397.622747][T11807] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 397.912973][T11827] loop3: detected capacity change from 0 to 256 [ 398.044321][T11814] syzkaller0: entered promiscuous mode [ 398.069368][T11814] syzkaller0: entered allmulticast mode [ 398.181560][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2020'. [ 398.679105][T11845] loop6: detected capacity change from 0 to 512 [ 398.694484][ T5757] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.737930][T11845] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 398.748538][T11845] EXT4-fs (loop6): invalid journal inode [ 398.754310][T11845] EXT4-fs (loop6): can't get journal size [ 398.780651][T11845] EXT4-fs error (device loop6): ext4_protect_reserved_inode:179: inode #2: comm syz.6.2024: blocks 4-4 from inode overlap system zone [ 398.805365][T11845] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 398.808388][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 398.815368][ T5757] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.817504][ C0] EXT4-fs (loop6): initial error at time 1785186140: ext4_protect_reserved_inode:179: inode 2 [ 398.843767][ C0] EXT4-fs (loop6): last error at time 1785186140: ext4_protect_reserved_inode:179: inode 2 [ 398.854896][T11845] EXT4-fs (loop6): failed to initialize system zone (-117) [ 398.863993][T11845] EXT4-fs (loop6): mount failed [ 399.094662][T11847] fido_id[11847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 400.692556][T11838] vlan2: entered allmulticast mode [ 400.697767][T11838] bridge1: entered allmulticast mode [ 400.705743][T11840] bridge1: port 1(erspan0) entered blocking state [ 400.719364][T11840] bridge1: port 1(erspan0) entered disabled state [ 400.747250][T11840] erspan0: entered allmulticast mode [ 400.773067][T11840] erspan0: entered promiscuous mode [ 400.795468][T11840] bridge1: port 1(erspan0) entered blocking state [ 400.802288][T11840] bridge1: port 1(erspan0) entered forwarding state [ 400.857546][T11852] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 400.897018][T11866] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 401.061732][T11872] loop6: detected capacity change from 0 to 256 [ 401.725900][T11899] syzkaller0: entered promiscuous mode [ 401.752819][T11899] syzkaller0: entered allmulticast mode [ 401.783142][T11903] tipc: Enabling of bearer rejected, failed to enable media [ 402.267642][T11922] loop5: detected capacity change from 0 to 256 [ 402.508124][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 402.649015][ T5892] usb 3-1: device descriptor read/64, error -71 [ 403.318152][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 403.880051][ T5892] usb 3-1: device descriptor read/64, error -71 [ 403.988806][ T5892] usb usb3-port1: attempt power cycle [ 404.096644][T11961] syzkaller1: entered promiscuous mode [ 404.105979][T11961] syzkaller1: entered allmulticast mode [ 404.338123][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 404.387191][ T5892] usb 3-1: device descriptor read/8, error -71 [ 404.448880][T11969] tipc: Enabling of bearer rejected, failed to enable media [ 404.617532][T11974] syzkaller0: entered promiscuous mode [ 404.648243][T11974] syzkaller0: entered allmulticast mode [ 404.655913][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 404.708894][ T5892] usb 3-1: device descriptor read/8, error -71 [ 404.856129][ T5892] usb usb3-port1: unable to enumerate USB device [ 404.874678][T11986] loop3: detected capacity change from 0 to 256 [ 406.956064][T12021] syzkaller1: entered promiscuous mode [ 406.975398][T12021] syzkaller1: entered allmulticast mode [ 407.265732][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 408.756146][T12040] tipc: Enabled bearer , priority 0 [ 408.796313][T12029] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 408.807522][T12042] syzkaller0: entered promiscuous mode [ 408.871559][T12042] syzkaller0: entered allmulticast mode [ 408.997055][T12067] loop3: detected capacity change from 0 to 256 [ 409.045410][T12057] tipc: Resetting bearer [ 409.229727][T12057] tipc: Disabling bearer [ 410.325186][T12069] loop1: detected capacity change from 0 to 131072 [ 412.612464][ T9296] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.885248][ T9253] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.048992][T12112] tipc: Enabled bearer , priority 0 [ 413.081039][T12112] syzkaller0: entered promiscuous mode [ 413.100247][T12112] syzkaller0: entered allmulticast mode [ 413.126692][T12112] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 413.371769][T12105] syzkaller1: entered promiscuous mode [ 413.381850][T12105] syzkaller1: entered allmulticast mode [ 413.411816][T12123] tipc: Resetting bearer [ 413.505961][T12128] loop6: detected capacity change from 0 to 256 [ 413.515933][T12111] tipc: Resetting bearer [ 413.574961][T12111] tipc: Disabling bearer [ 414.936529][T12133] loop3: detected capacity change from 0 to 131072 [ 414.951991][T12133] F2FS-fs (loop3): invalid crc value [ 415.037756][T12133] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 415.057322][T12133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 415.444069][T12166] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 415.459859][T12166] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 415.743476][T12173] loop6: detected capacity change from 0 to 256 [ 416.266359][T12180] tipc: Enabling of bearer rejected, failed to enable media [ 416.365822][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2135'. [ 416.669347][T12188] vlan2: entered allmulticast mode [ 416.711881][T12188] bridge1: entered allmulticast mode [ 416.773286][T12191] bridge1: port 1(erspan0) entered blocking state [ 416.816040][T12191] bridge1: port 1(erspan0) entered disabled state [ 417.020886][T12191] erspan0: entered allmulticast mode [ 417.104058][T12191] erspan0: entered promiscuous mode [ 417.137701][T12191] bridge1: port 1(erspan0) entered blocking state [ 417.144362][T12191] bridge1: port 1(erspan0) entered forwarding state [ 418.985886][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 419.273572][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 419.395619][T12245] vlan3: entered allmulticast mode [ 419.406438][T12245] bridge2: entered allmulticast mode [ 419.976206][T12244] erspan0: left allmulticast mode [ 419.992400][T12244] erspan0: left promiscuous mode [ 420.008551][T12244] bridge1: port 1(erspan0) entered disabled state [ 420.080484][T12244] bridge2: port 1(erspan0) entered blocking state [ 420.116241][T12244] bridge2: port 1(erspan0) entered disabled state [ 420.129875][T12244] erspan0: entered allmulticast mode [ 420.164510][T12244] erspan0: entered promiscuous mode [ 420.198326][T12244] bridge2: port 1(erspan0) entered blocking state [ 420.205007][T12244] bridge2: port 1(erspan0) entered forwarding state [ 420.777585][T12266] loop5: detected capacity change from 0 to 512 [ 420.836142][T12266] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 421.162571][T12266] EXT4-fs (loop5): 1 truncate cleaned up [ 421.195596][T12266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.939966][T12274] loop3: detected capacity change from 0 to 128 [ 422.151254][T12281] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2165'. [ 422.282796][T12279] syzkaller1: entered promiscuous mode [ 422.328849][T12279] syzkaller1: entered allmulticast mode [ 422.602024][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 422.890036][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 422.916323][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 422.950000][ T5637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.571551][T12325] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2187'. [ 424.635159][T12325] syzkaller1: entered promiscuous mode [ 424.683169][T12325] syzkaller1: entered allmulticast mode [ 424.840051][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2184'. [ 426.120633][T12375] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2208'. [ 426.152514][T12375] syzkaller1: entered promiscuous mode [ 426.173243][T12375] syzkaller1: entered allmulticast mode [ 426.791368][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'. [ 427.079327][ T9296] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 427.186675][T12402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.675611][T12422] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 427.726003][T12422] bond3: (slave macvlan5): Enslaving as an active interface with an up link [ 427.761814][T12427] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2226'. [ 427.816629][T12424] syzkaller1: entered promiscuous mode [ 427.832003][T12424] syzkaller1: entered allmulticast mode [ 428.657160][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2236'. [ 429.273896][T12472] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2246'. [ 429.327918][T12472] syzkaller1: entered promiscuous mode [ 429.347164][T12472] syzkaller1: entered allmulticast mode [ 429.733537][T12477] loop1: detected capacity change from 0 to 1764 [ 430.194947][T12474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.276980][T12474] bond4: (slave macvlan2): making interface the new active one [ 430.323364][T12474] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 430.535819][ T29] bond_slave_0: entered promiscuous mode [ 430.541589][ T29] bond_slave_1: entered promiscuous mode [ 430.624671][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 430.784159][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2253'. [ 430.996525][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'. [ 431.767014][T12523] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 432.431231][T12525] loop5: detected capacity change from 0 to 1764 [ 432.542349][T12523] bond3: (slave macvlan6): Enslaving as an active interface with an up link [ 432.862122][T12531] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2269'. [ 432.896151][T12531] syzkaller1: entered promiscuous mode [ 433.749504][T12531] syzkaller1: entered allmulticast mode [ 434.227763][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2275'. [ 434.600383][T12568] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 436.072179][T12586] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2292'. [ 436.119071][T12586] syzkaller1: entered promiscuous mode [ 436.141846][T12586] syzkaller1: entered allmulticast mode [ 436.328846][T12596] tmpfs: Bad value for 'mpol' [ 436.741782][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2300'. [ 437.316143][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2297'. [ 438.705862][T12653] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2312'. [ 438.726876][T12653] syzkaller1: entered promiscuous mode [ 438.732913][T12653] syzkaller1: entered allmulticast mode [ 439.052192][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 439.465861][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.483146][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.291413][T12681] loop2: detected capacity change from 0 to 512 [ 440.516730][T12681] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 441.671961][T12681] EXT4-fs (loop2): 1 truncate cleaned up [ 442.523533][T12681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.914833][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.117567][T12701] netlink: 'syz.6.2326': attribute type 1 has an invalid length. [ 443.324798][T12709] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2329'. [ 443.355634][T12710] netlink: 'syz.6.2326': attribute type 10 has an invalid length. [ 443.383338][T12710] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2326'. [ 443.417108][T12701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.828374][T12721] overlay: Unknown parameter 'seclabel' [ 445.020761][T12705] bond1: (slave gretap1): making interface the new active one [ 445.072005][T12705] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 445.169407][T12706] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 445.276781][T12710] dummy0: entered promiscuous mode [ 445.302245][T12710] bond1: (slave dummy0): Releasing active interface [ 445.391429][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 445.962151][T12734] loop3: detected capacity change from 0 to 8192 [ 446.200663][T12750] loop2: detected capacity change from 0 to 1764 [ 448.330361][T12772] overlay: Unknown parameter 'seclabel' [ 448.658520][T12778] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2350'. [ 448.722852][T12778] syzkaller1: entered promiscuous mode [ 448.753493][T12778] syzkaller1: entered allmulticast mode [ 450.144670][T12800] loop3: detected capacity change from 0 to 1764 [ 450.516873][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2355'. [ 450.586435][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'. [ 450.644696][T12811] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2360'. [ 450.655470][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'. [ 450.718687][T12789] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 452.178244][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 452.306921][T12836] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2371'. [ 452.318751][T12836] syzkaller1: entered promiscuous mode [ 452.324290][T12836] syzkaller1: entered allmulticast mode [ 452.552302][T12842] overlay: Unknown parameter 'seclabel' [ 453.686430][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2377'. [ 454.972558][T12866] loop3: detected capacity change from 0 to 131072 [ 454.986315][T12866] F2FS-fs (loop3): invalid crc value [ 455.095500][T12866] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 455.111971][T12866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 455.768091][T12879] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 457.145672][T12903] loop2: detected capacity change from 0 to 164 [ 457.203020][T12903] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 458.151790][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2408'. [ 458.584654][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2412'. [ 458.752398][T12942] vlan2: entered allmulticast mode [ 458.811105][T12942] bridge1: entered allmulticast mode [ 459.521858][T12963] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2390'. [ 459.544206][T12963] syzkaller1: entered promiscuous mode [ 459.611989][T12963] syzkaller1: entered allmulticast mode [ 460.040822][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2429'. [ 460.146970][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'. [ 460.377509][T12992] vlan4: entered allmulticast mode [ 460.393871][T12992] bridge3: entered allmulticast mode [ 460.482511][T12990] [ 460.486158][T12990] ============================= [ 460.491114][T12990] WARNING: suspicious RCU usage [ 460.495990][T12990] syzkaller #0 Not tainted [ 460.502076][T12990] ----------------------------- [ 460.506970][T12990] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 460.515233][T12990] [ 460.515233][T12990] other info that might help us debug this: [ 460.515233][T12990] [ 460.525996][T12990] [ 460.525996][T12990] rcu_scheduler_active = 2, debug_locks = 1 [ 460.534187][T12990] 1 lock held by syz.3.2432/12990: [ 460.539723][T12990] #0: ffff88807dd74390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 460.550454][T12990] [ 460.550454][T12990] stack backtrace: [ 460.556545][T12990] CPU: 1 UID: 0 PID: 12990 Comm: syz.3.2432 Not tainted syzkaller #0 PREEMPT(full) [ 460.556590][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 460.556612][T12990] Call Trace: [ 460.556625][T12990] [ 460.556639][T12990] dump_stack_lvl+0x100/0x190 [ 460.556686][T12990] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 460.556753][T12990] xfrm_do_migrate_state+0x2463/0x2f10 [ 460.556828][T12990] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 460.556876][T12990] ? __asan_memset+0x23/0x50 [ 460.556929][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.556975][T12990] ? __nla_validate_parse+0x1e7/0x28b0 [ 460.557021][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557067][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557140][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557185][T12990] ? __nla_parse+0x40/0x60 [ 460.557223][T12990] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 460.557276][T12990] ? xfrm_user_rcv_msg+0x483/0xd80 [ 460.557313][T12990] xfrm_user_rcv_msg+0x483/0xd80 [ 460.557363][T12990] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 460.557403][T12990] ? lockdep_hardirqs_on+0x78/0x100 [ 460.557450][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557495][T12990] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 460.557547][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557596][T12990] ? rcu_is_watching+0x12/0xc0 [ 460.557699][T12990] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 460.557742][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557835][T12990] ? lockdep_hardirqs_on+0x78/0x100 [ 460.557881][T12990] ? __mutex_lock+0x82c/0x1bd0 [ 460.557926][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.557971][T12990] ? __mutex_lock+0x26d/0x1bd0 [ 460.558027][T12990] netlink_rcv_skb+0x159/0x420 [ 460.558071][T12990] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 460.558115][T12990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.558177][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.558232][T12990] xfrm_netlink_rcv+0x71/0x90 [ 460.558268][T12990] netlink_unicast+0x585/0x850 [ 460.558315][T12990] ? __pfx_netlink_unicast+0x10/0x10 [ 460.558371][T12990] netlink_sendmsg+0x8b0/0xda0 [ 460.558418][T12990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.558467][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.558511][T12990] ? apparmor_socket_sendmsg+0x15b/0x270 [ 460.558558][T12990] ____sys_sendmsg+0xa4d/0xbe0 [ 460.558594][T12990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.558641][T12990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.558684][T12990] ? kasan_quarantine_put+0x104/0x240 [ 460.558742][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.558794][T12990] ? lockdep_hardirqs_on+0x78/0x100 [ 460.558840][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.558885][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.558931][T12990] ? find_held_lock+0x2b/0x80 [ 460.558992][T12990] ___sys_sendmsg+0x190/0x1e0 [ 460.559037][T12990] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.559074][T12990] ? __lock_acquire+0x49f/0x1a40 [ 460.559139][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.559218][T12990] __sys_sendmsg+0x160/0x210 [ 460.559272][T12990] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.559322][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.559385][T12990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.559439][T12990] do_syscall_64+0x115/0x870 [ 460.559493][T12990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.559532][T12990] RIP: 0033:0x7f38b819de99 [ 460.559563][T12990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.559599][T12990] RSP: 002b:00007f38b9048028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.559635][T12990] RAX: ffffffffffffffda RBX: 00007f38b8426090 RCX: 00007f38b819de99 [ 460.559660][T12990] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 460.559684][T12990] RBP: 00007f38b8233eaf R08: 0000000000000000 R09: 0000000000000000 [ 460.559707][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.559731][T12990] R13: 00007f38b8426128 R14: 00007f38b8426090 R15: 00007fff66025e18 [ 460.559786][T12990]