last executing test programs: 52.926363625s ago: executing program 4 (id=451): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) userfaultfd(0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 52.764867436s ago: executing program 4 (id=454): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 52.13531275s ago: executing program 4 (id=458): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r0, &(0x7f00000001c0), 0x8) 51.945036324s ago: executing program 4 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 51.540015642s ago: executing program 4 (id=461): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 49.908112156s ago: executing program 4 (id=464): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) userfaultfd(0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 48.873663428s ago: executing program 32 (id=464): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) userfaultfd(0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 9.856191492s ago: executing program 3 (id=683): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) pwritev2(r0, &(0x7f0000000880)=[{&(0x7f0000000d80)='K', 0x1}], 0x1, 0x9, 0xfffffffe, 0x7) 8.579958581s ago: executing program 3 (id=691): openat$tun(0xffffffffffffff9c, 0x0, 0x48080, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1020802, &(0x7f00000001c0)=ANY=[], 0x1, 0x25a, &(0x7f0000001040)="$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") syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) prctl$PR_SET_SECCOMP(0x52, 0x1, 0x0) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) getsockopt$MRT(r2, 0x0, 0xd1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r5, &(0x7f0000000140)=""/25, 0x19, 0x4) 7.141727531s ago: executing program 3 (id=700): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00800, &(0x7f0000000100)={[{@nobarrier}]}, 0x11, 0xbac, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffcb, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) 5.44789574s ago: executing program 3 (id=713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989c56, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 4.508207445s ago: executing program 3 (id=724): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xffffffffffffff20, 0x0}) 2.138378651s ago: executing program 3 (id=749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@local, 0x3, 0x2, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in=@empty, {0x5a, 0xb400, 0xe25c, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x20200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x70bd2c, 0x0, 0x2, 0x2, 0x0, 0x39}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 2.01300716s ago: executing program 0 (id=751): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS2(r0, 0x5434, 0x0) 2.01294026s ago: executing program 5 (id=752): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 1.801656944s ago: executing program 33 (id=749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@local, 0x3, 0x2, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in=@empty, {0x5a, 0xb400, 0xe25c, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x20200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x70bd2c, 0x0, 0x2, 0x2, 0x0, 0x39}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 1.795451985s ago: executing program 0 (id=754): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x3, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000041) 1.794571234s ago: executing program 2 (id=756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x9d85, @remote, 0xfffffff0}}, 0xffc, 0x3}, &(0x7f00000002c0)=0x90) 1.750812937s ago: executing program 2 (id=757): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r1, &(0x7f0000000200)='./file0\x00') 1.696928631s ago: executing program 1 (id=758): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x0) 1.696777122s ago: executing program 5 (id=759): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(0x0, 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) mq_notify(r0, 0x0) r1 = memfd_create(&(0x7f0000000000)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2) finit_module(r1, 0x0, 0x0) 1.637050066s ago: executing program 2 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 1.57857502s ago: executing program 1 (id=761): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0xa1) 1.333065667s ago: executing program 2 (id=762): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8000002, 0x200, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.238850773s ago: executing program 5 (id=763): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.132281061s ago: executing program 1 (id=764): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000200)={[{@noauto_da_alloc}, {@grpquota}]}, 0x4, 0x4ee, &(0x7f0000000f80)="$eJzs3c9vVF0ZAOD3Tju0lIGCslCjgoiiIUx/AA3BhbDRGEJiJK5cQG2HpukM03RapGMXZeneRBJX+ie4c2HCyoU7d7pzgwsT1EZDTVyMuXeGdmg7TP1oOx+d50lO7z3nDPOeM8M9Z+6B6Qmgb12MiPWIOBERjyJitFWetFLcaab0cW821mY2N9Zmkmg0HvwjyerTsmj7M6lTreccjogffDfix8nuuLXV+sJ0uVxaauXHliuLY7XV+rX5XKtkcmpiavzW9ZuTB9bXC5XfvP7O/L0f/u63X3r1x/Vv/jRtVuFnp7O69n4cpGbX81FoKxuMiHuHEaxHBlt/f/j4pFfbZyLiUnb9j8ZA9m4CAMdZozEajdH2PABw3KX3/4VIcsXWWkAhcrlisbmGdz5GcuVqbfnqaHXlyWxka1hnI597PF8ujbfWCs9GPknzE9n5dn5yR/56RJyLiJ8PnczyxZlqebaXH3wAoI+d2jH//3uoOf8DAMfccK8bAAAcOfM/APQf8z8A9J//Y/737UAAOCbc/wNA/zH/A0D/6Tr/Pz+adgAAR+L79++nqbHZ+v3Xs09XV75VeHpttlRbKFZWZooz1aXF4ly1OlcuFWcajW7PV65WFydubGVrq/WHlerKk+WH85XpudLDUv6Q+wMAdHfuwss/JxGxfvtklqJtLwdzNRxvuV43AOiZgV43AOgZ3+eB/rWPe3zLAHDM7bFF7zs6/hehFzZ/hY/Vlc9b/4d+Zf0f+tcnW///9oG3Azh61v+hfzUaiT3/AaDPWOMHPujf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBPFbKU5IrZXuDr6c9csRhxOiLORj55PF8ujUfEmYj401B+KM1P9LrRAMAHyv0tae3/dWX0cmFn7YnkP0PZMSJ+8ssHv3g2vby8NJGW/3OrfPlFq3zyRC86AAC0u7O7qDlPt45tN/JvNtZm3qajbOLru83NRdO4m63UrBmMwew4HPmIGPlX0so3pZ9XBg4g/vrziPjcdv+ftUUoZGsgzZ1Pd8ZPY58+hPjbr//O+Ll34ueyuvSYz16Lz3YLZKNn2OXl3eY4+WZj7e3NS+v6y8XF7Lj39T+cjVAf7u34t7lr/MttjX8Du+In2TV/cSv//pa8vvH77+0qbIw2655HfGFwr/jJVvykw/h7eZ99/MsXv3ypU13jVxFXYu/4TZVsmB1briyO1Vbr1+Yr03OludKTycmpianxW9dvTo5la9TNn3/YK8bfb1890yl+2v+RDvGHu/T/a/vs/6//++hHX3lP/G98de/3//x74qfD+df3GX965E7H7bvT+LMd+t/t/b+6z/iv/lqf3edDAYAjUFutL0yXy6WlLifpZ81uj3HyEZ4MRD3WI3rdDCeftpNej0zAYdu+6HvdEgAAAAAAAAAAAAAAoJPaan1hKA7360S97iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADH1/8CAAD//0EMy0s=") 993.642531ms ago: executing program 5 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0xb, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x202, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x6, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xf, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x2, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 938.126164ms ago: executing program 0 (id=766): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 912.554626ms ago: executing program 0 (id=767): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@data_ordered}, {@stripe}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") mkdir(&(0x7f0000000100)='./file0\x00', 0x57) 541.019242ms ago: executing program 5 (id=768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="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", 0xbe8}, {&(0x7f0000000580)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934", 0xa5}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994", 0x74}], 0x7}}], 0x1, 0x8800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 519.723684ms ago: executing program 1 (id=769): socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 470.367187ms ago: executing program 2 (id=770): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x0) 413.044661ms ago: executing program 5 (id=771): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xffff, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040841, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x40008c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 406.457891ms ago: executing program 1 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4004000) 314.078548ms ago: executing program 0 (id=773): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x484, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x400000000000007}}, {@dioread_lock}]}, 0x3, 0x44c, &(0x7f0000000200)="$eJzs3MtvG0UYAPBv13bfJaEqjz6AQEFUPJImLaUHLiCQOICEBIdyDElalboNaoJEqwIFoXJElbgjjkj8BZzggoATEle4o0oV6qWFk9Hau43t2m4eTlzw7yetM7M7zszn3bFnduIEMLTGsockYkdE/B4RI41sa4Gxxo+b1y/O/H394kwStdqbfyX1cjeuX5wpihbP215kyhHpZ0ns61DvwvkLp6er1blzeX5i8cx7EwvnLzx76sz0ybmTc2enjh07cnjy+aNTz/UlziyuG3s/mt+/59W3r7w+c/zKOz9/mxTxt8XRJ2O9Dj5Rq/W5usHa2ZROygNsCCtSanTTqNT7/0iUYunkjcQrn/Z67paNaCCwbmq1Wu3+7ocv1YD/sSQG3QJgMIoP+mz+W2wbNPS4K1x7sTEByuK+mW+NI+VI8zKVtvltP41FxPFL/3yVbbE+9yEAAFp8n41/nuk0/kuj+b7QPfkaymhE3BsRuyLiaETsjoj7IuplH4iIB1dYf/siye3jn/TqqgJbpmz890K+ttU6/itGfzFaynM76/FXkhOnqnOH8tfkYFQ2Z/nJHnX88PJvX3Q71jz+y7as/mIsmLfjanlz63Nmpxen1xJzs2ufROwtd4o/ubUSkETEnojYu8o6Tj31zf5ux+4cfw99WGeqfR3xZOP8X4q2+AtJ7/XJiS1RnTs0UVwVt/vl18tvdKt/TfH3QXb+t3W8/m/FP5o0r9curLyOy3983nVOs9rrf1PyVsu+D6YXF89NRmxKXms0eml/6dxUW7mppfJZ/AcPdO7/u2LpldgXEdlF/FBEPBwRj+RtfzQiHouIAz3i/+mlx99dffzrK4t/dkXnfymxKdr3NCcqUewpnf7xu5ZKR1cSf3b+j9RTB/M9y3n/696u1sRaXz8AAAD4L0gjYkck6fitdJqOjzf+hn93bEur8wuLT5+Yf//sbOM7AqNRSYs7XSNN90Mn82l9kZ9qyx/O7xt/Wdpaz4/PzFdnBx08DLntXfp/5s/SoFsHrLvVraOlfW8HsPF8XxOGl/4Pw0v/h+HVof9vHUQ7gI3X6fP/4wG0A9h45abH/H+CAUPC/B+Gl/4Pw0v/h6G0sDXu/CV5CYnbEpGu7fd8mEYsp/BIfqXeBSEPVWLAb0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB98m8AAAD///Dg4RM=") r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 259.362372ms ago: executing program 2 (id=774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000001, 0x0, 0x111, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 225.677234ms ago: executing program 1 (id=775): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 0s ago: executing program 0 (id=776): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") kernel console output (not intermixed with test programs): [ 59.150739][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.158566][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.166607][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.180262][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.189822][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.199834][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.210986][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.218147][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.238053][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.261909][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.271759][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.281495][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.284921][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 59.289642][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 59.301958][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 59.309342][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.319786][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 59.326577][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 59.339402][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.365406][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.382457][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.391877][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.401233][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.410168][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.420082][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.429786][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.438998][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.449339][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.459041][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.467979][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.491059][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.502692][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.518201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.532917][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.544050][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.562113][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.571371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.580402][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.589743][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.599821][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.611845][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.621266][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.656093][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.666217][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.677655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.698518][ T4185] device veth0_vlan entered promiscuous mode [ 59.721098][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.735761][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.744200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.759211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.790885][ T4185] device veth1_vlan entered promiscuous mode [ 59.801004][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.809779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.839286][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.863492][ T4187] device veth0_vlan entered promiscuous mode [ 59.888613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.905713][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.937075][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.947078][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.961615][ T4187] device veth1_vlan entered promiscuous mode [ 59.999793][ T4185] device veth0_macvtap entered promiscuous mode [ 60.018011][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.030509][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.042171][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.054334][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.068572][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.079611][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.089039][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.105709][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.116753][ T4185] device veth1_macvtap entered promiscuous mode [ 60.161919][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.185751][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.197456][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.207675][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.217546][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.226556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.240748][ T4187] device veth0_macvtap entered promiscuous mode [ 60.254176][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.273129][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.283241][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.293907][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.303860][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.313227][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.323086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.334270][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.346401][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.379046][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.388559][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.399169][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.409346][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.421928][ T4187] device veth1_macvtap entered promiscuous mode [ 60.429685][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.438425][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.448686][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.463744][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.474156][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.517914][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.531657][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.543184][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.552751][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.598609][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.609084][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.618787][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.627430][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.638833][ T4188] device veth0_vlan entered promiscuous mode [ 60.649680][ T4194] device veth0_vlan entered promiscuous mode [ 60.660871][ T4186] device veth0_vlan entered promiscuous mode [ 60.676966][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.687776][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.703144][ T4188] device veth1_vlan entered promiscuous mode [ 60.721543][ T4186] device veth1_vlan entered promiscuous mode [ 60.746139][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.758526][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.770474][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.780216][ T4194] device veth1_vlan entered promiscuous mode [ 60.787754][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.799025][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.808649][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.817550][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.826012][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.835216][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.844128][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.883582][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.897152][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.909455][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.937766][ T4188] device veth0_macvtap entered promiscuous mode [ 60.949998][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.960088][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.964968][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.979105][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.988691][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.998323][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.008529][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.018733][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.043091][ T4188] device veth1_macvtap entered promiscuous mode [ 61.054422][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.064186][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.073501][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.083603][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.122284][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.124242][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.131662][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.142115][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.156593][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.166047][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.200619][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.214679][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.225845][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.237435][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.255803][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.264756][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.274038][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.291580][ T4186] device veth0_macvtap entered promiscuous mode [ 61.305141][ T4194] device veth0_macvtap entered promiscuous mode [ 61.325329][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.340951][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.352323][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.367101][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 61.381941][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 61.389204][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 61.392917][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.407421][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 61.419057][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 61.423453][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.438453][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.451336][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.463984][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.477605][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.486964][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.503547][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.505898][ T4265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.515315][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.548033][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.557881][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.568834][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.591303][ T4186] device veth1_macvtap entered promiscuous mode [ 61.612032][ T4194] device veth1_macvtap entered promiscuous mode [ 61.726125][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.737107][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.747377][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.758205][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.769398][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.780338][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.793459][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.818566][ T4269] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7'. [ 61.829188][ T4269] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 61.846459][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.865652][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.895705][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.909515][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.927238][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.927254][ T4273] loop0: detected capacity change from 0 to 512 [ 61.946738][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.962209][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.974696][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.985246][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.997543][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.012876][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.032393][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.040471][ T4273] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 62.047887][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.070023][ T4273] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.074210][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.109666][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.120503][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.125557][ T4273] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.9: corrupted inode contents [ 62.131925][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.151809][ T4273] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.9: mark_inode_dirty error [ 62.153843][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.174060][ T4273] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.9: corrupted inode contents [ 62.177194][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.193824][ T4273] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.9: mark_inode_dirty error [ 62.199810][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.221219][ T4279] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.9: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 62.221781][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.250084][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.259455][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.268735][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.298806][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.315069][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.321136][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.340840][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.350453][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.359521][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.369203][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.379107][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.419424][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.432969][ T4283] loop0: detected capacity change from 0 to 164 [ 62.439982][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.453029][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.473118][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.488856][ T4283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.490351][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.513006][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.513313][ T4283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.529149][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.537244][ T4283] Symlink component flag not implemented [ 62.545473][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.556552][ T4283] Symlink component flag not implemented [ 62.564138][ T4283] Symlink component flag not implemented (7) [ 62.570595][ T4283] Symlink component flag not implemented (116) [ 62.596186][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.609158][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.631232][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.649589][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.666049][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.676723][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.724910][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.732850][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.738282][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.750250][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.810589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.827772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.885511][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.890908][ T4286] loop0: detected capacity change from 0 to 4096 [ 62.893762][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.929425][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.006970][ T4286] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.019794][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.042975][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.070379][ T4290] netlink: 16194 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.098567][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.111096][ T4291] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.0.11: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 63.146056][ T4291] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.11: directory missing '..' [ 63.179826][ T4286] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.11: corrupted inode contents [ 63.192654][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.192679][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.193174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.384513][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.417118][ T4286] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #15: comm syz.0.11: mark_inode_dirty error [ 63.446047][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 63.452656][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 63.459433][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 63.466111][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 63.472313][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 63.480161][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.492329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.575454][ T4301] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 63.575454][ T4301] program syz.1.12 not setting count and/or reply_len properly [ 64.056205][ T4286] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.11: corrupted inode contents [ 64.082421][ T4286] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.11: mark_inode_dirty error [ 64.096229][ T4286] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.11: corrupted inode contents [ 64.177104][ T4286] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.11: mark_inode_dirty error [ 64.232220][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 64.255861][ T4286] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.11: corrupted inode contents [ 64.294082][ T4312] loop2: detected capacity change from 0 to 512 [ 64.327158][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.343718][ T4286] EXT4-fs error (device loop0): ext4_truncate:4279: inode #15: comm syz.0.11: mark_inode_dirty error [ 64.346522][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.374055][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.394702][ T4312] EXT4-fs (loop2): Ignoring removed nobh option [ 64.401376][ T4312] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.535506][ T4312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.557116][ T4312] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.579668][ T4312] EXT4-fs (loop2): 1 truncate cleaned up [ 64.855674][ T4312] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: none. [ 65.499578][ T4327] loop2: detected capacity change from 0 to 512 [ 65.607946][ T4327] EXT4-fs (loop2): Ignoring removed orlov option [ 65.647142][ T4327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.727324][ T4327] EXT4-fs (loop2): 1 orphan inode deleted [ 65.733186][ T4327] EXT4-fs (loop2): 1 truncate cleaned up [ 65.741679][ T4327] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 65.940203][ T4327] EXT4-fs error (device loop2): ext4_check_all_de:667: inode #12: block 7: comm syz.2.20: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 65.949067][ T4342] loop3: detected capacity change from 0 to 256 [ 66.036347][ T4343] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 66.036347][ T4343] program syz.0.24 not setting count and/or reply_len properly [ 66.141234][ T4342] ======================================================= [ 66.141234][ T4342] WARNING: The mand mount option has been deprecated and [ 66.141234][ T4342] and is ignored by this kernel. Remove the mand [ 66.141234][ T4342] option from the mount to silence this warning. [ 66.141234][ T4342] ======================================================= [ 66.689405][ T4342] FAT-fs (loop3): Directory bread(block 64) failed [ 66.725906][ T4342] FAT-fs (loop3): Directory bread(block 65) failed [ 66.732699][ T4342] FAT-fs (loop3): Directory bread(block 66) failed [ 66.739774][ T4342] FAT-fs (loop3): Directory bread(block 67) failed [ 66.760460][ T4342] FAT-fs (loop3): Directory bread(block 68) failed [ 66.773159][ T4342] FAT-fs (loop3): Directory bread(block 69) failed [ 66.780529][ T4342] FAT-fs (loop3): Directory bread(block 70) failed [ 66.810911][ T4342] FAT-fs (loop3): Directory bread(block 71) failed [ 66.844748][ T4342] FAT-fs (loop3): Directory bread(block 72) failed [ 66.851406][ T4342] FAT-fs (loop3): Directory bread(block 73) failed [ 67.015321][ T4371] 9pnet: Insufficient options for proto=fd [ 67.035157][ T26] audit: type=1800 audit(1775695172.771:2): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="bus" dev="loop3" ino=1048590 res=0 errno=0 [ 67.073040][ T26] audit: type=1804 audit(1775695172.781:3): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.26" name="/newroot/3/file1/bus" dev="loop3" ino=1048590 res=1 errno=0 [ 68.018869][ T4384] loop0: detected capacity change from 0 to 4096 [ 68.366637][ T4384] EXT4-fs (loop0): Test dummy encryption mode enabled [ 68.374659][ T4384] EXT4-fs (loop0): Ignoring removed oldalloc option [ 68.390080][ T4384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 68.401094][ T4384] System zones: 0-5 [ 68.438620][ T4384] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 69.672185][ T4349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.879997][ T4416] loop0: detected capacity change from 0 to 2048 [ 70.297773][ T4416] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.813086][ T4430] loop3: detected capacity change from 0 to 4096 [ 70.849035][ T156] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 70.891910][ T156] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.907108][ T156] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.907108][ T156] [ 70.920098][ T156] EXT4-fs (loop0): Total free blocks count 0 [ 70.929912][ T4430] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.946945][ T4430] EXT4-fs (loop3): Ignoring removed oldalloc option [ 70.955955][ T156] EXT4-fs (loop0): Free/Dirty block details [ 70.963001][ T156] EXT4-fs (loop0): free_blocks=2415919504 [ 70.971104][ T156] EXT4-fs (loop0): dirty_blocks=32 [ 70.981950][ T156] EXT4-fs (loop0): Block reservation details [ 70.988585][ T156] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 70.998247][ T156] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 71.017574][ T4430] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 71.122387][ T156] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.122387][ T156] [ 71.134950][ T4430] System zones: 0-5 [ 71.154927][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 71.880080][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.886859][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.028722][ T4447] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.077038][ T4451] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 72.849716][ T4451] bond0: (slave bond_slave_0): Releasing backup interface [ 73.169924][ T4476] loop1: detected capacity change from 0 to 512 [ 73.487930][ T4476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.742558][ T4476] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.765606][ T7] cfg80211: failed to load regulatory.db [ 78.943761][ T4534] loop4: detected capacity change from 0 to 4096 [ 79.103881][ T4534] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.164593][ T4534] EXT4-fs (loop4): Ignoring removed oldalloc option [ 79.204435][ T4534] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 79.234241][ T4534] System zones: 0-5 [ 79.309737][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 80.418760][ T4553] loop3: detected capacity change from 0 to 512 [ 80.687739][ T4558] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 80.687739][ T4558] program syz.0.88 not setting count and/or reply_len properly [ 81.013290][ T4553] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.034659][ T4553] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.527622][ T4612] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 84.527622][ T4612] program syz.1.102 not setting count and/or reply_len properly [ 85.020263][ T4620] loop0: detected capacity change from 0 to 512 [ 85.108673][ T4618] loop4: detected capacity change from 0 to 4096 [ 85.307484][ T4618] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.338996][ T4618] EXT4-fs (loop4): Ignoring removed oldalloc option [ 85.443834][ T4618] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 85.477374][ T4620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.480732][ T4618] System zones: [ 85.488873][ T4620] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.501322][ T4618] 0-5 [ 85.549373][ T4618] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 86.766829][ T4596] Bluetooth: hci5: Frame reassembly failed (-90) [ 86.782638][ T4645] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.839253][ T4653] capability: warning: `syz.2.118' uses 32-bit capabilities (legacy support in use) [ 88.121950][ T4664] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 88.121950][ T4664] program syz.1.120 not setting count and/or reply_len properly [ 88.805210][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 88.812004][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 89.183892][ T4676] loop0: detected capacity change from 0 to 1024 [ 89.270304][ T4676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.333592][ T26] audit: type=1800 audit(1775695195.121:4): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.126" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 89.736217][ T4685] loop0: detected capacity change from 0 to 8192 [ 89.878969][ T4185] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 89.900920][ T4185] FAT-fs (loop0): Filesystem has been set read-only [ 90.495204][ T4697] loop2: detected capacity change from 0 to 4096 [ 90.576103][ T4699] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 90.576103][ T4699] program syz.1.132 not setting count and/or reply_len properly [ 90.684671][ T4697] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.756579][ T4697] EXT4-fs (loop2): Ignoring removed oldalloc option [ 90.885785][ T4261] Bluetooth: hci5: command 0x1001 tx timeout [ 90.896735][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 91.037167][ T4697] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 91.103432][ T4697] System zones: 0-5 [ 91.121383][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 91.321493][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 91.401020][ T4708] loop4: detected capacity change from 0 to 512 [ 91.839681][ T4708] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.892262][ T4708] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.911433][ T4715] loop0: detected capacity change from 0 to 1024 [ 92.089079][ T4715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.573609][ T4715] EXT4-fs warning (device loop0): ext4_resize_fs:1981: can't read last block, resize aborted [ 92.964724][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 93.238866][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'. [ 93.373712][ T4743] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 93.373712][ T4743] program syz.4.145 not setting count and/or reply_len properly [ 94.497269][ T4756] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 94.497269][ T4756] program syz.2.149 not setting count and/or reply_len properly [ 94.749605][ T4760] loop4: detected capacity change from 0 to 512 [ 94.777457][ T4762] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 94.777457][ T4762] program syz.1.152 not setting count and/or reply_len properly [ 95.014143][ T4760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.077132][ T4760] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.564090][ T4780] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 97.568629][ T4800] loop3: detected capacity change from 0 to 2048 [ 97.662098][ T4800] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 97.688075][ T4800] capability: warning: `syz.3.164' uses deprecated v2 capabilities in a way that may be insecure [ 97.987600][ T4819] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 97.987600][ T4819] program syz.4.163 not setting count and/or reply_len properly [ 98.646876][ T26] audit: type=1800 audit(1775695204.441:5): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.164" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 98.718870][ T26] audit: type=1800 audit(1775695204.441:6): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 99.934951][ T4832] loop3: detected capacity change from 0 to 4096 [ 100.006025][ T4835] loop4: detected capacity change from 0 to 4096 [ 100.032886][ T4834] loop2: detected capacity change from 0 to 8192 [ 100.058516][ T4835] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.098814][ T4834] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.100001][ T4832] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.128096][ T4835] EXT4-fs (loop4): Ignoring removed oldalloc option [ 100.159101][ T4832] EXT4-fs (loop3): Ignoring removed oldalloc option [ 100.182022][ T4835] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 100.212596][ T4834] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 100.251684][ T4832] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 100.254793][ T4835] System zones: 0-5 [ 100.260125][ T4834] FAT-fs (loop2): Filesystem has been set read-only [ 100.300751][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 100.311575][ T4832] System zones: 0-5 [ 100.328531][ T4834] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 100.336909][ T4834] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 100.354861][ T4832] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 103.475852][ T4873] loop4: detected capacity change from 0 to 512 [ 103.582543][ T4873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.603417][ T4873] EXT4-fs (loop4): 1 truncate cleaned up [ 103.695087][ T4873] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.880743][ T26] audit: type=1800 audit(1775695209.671:7): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.187" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 106.840995][ T4917] loop4: detected capacity change from 0 to 2048 [ 106.920715][ T4917] loop4: p3 < > p4 < > [ 106.929607][ T4917] loop4: partition table partially beyond EOD, truncated [ 106.987392][ T4917] loop4: p3 start 4284289 is beyond EOD, truncated [ 107.050047][ T3562] loop4: p3 < > p4 < > [ 107.060151][ T3562] loop4: partition table partially beyond EOD, truncated [ 107.089373][ T3562] loop4: p3 start 4284289 is beyond EOD, truncated [ 108.117451][ T4495] udevd[4495]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 109.659090][ T4952] loop1: detected capacity change from 0 to 1024 [ 110.367476][ T4952] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,init_itable,nogrpid,jqfmt=vfsv0,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,user_xattr,,errors=continue. Quota mode: writeback. [ 110.540042][ T4952] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.632891][ T4952] device syzkaller0 entered promiscuous mode [ 111.583144][ T4983] loop3: detected capacity change from 0 to 512 [ 111.632483][ T4985] xt_hashlimit: size too large, truncated to 1048576 [ 111.653816][ T4988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.813178][ T4983] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 114.009829][ T5017] loop2: detected capacity change from 0 to 1024 [ 114.063399][ T5017] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,init_itable,nogrpid,jqfmt=vfsv0,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,user_xattr,,errors=continue. Quota mode: writeback. [ 114.144745][ T5017] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.080258][ T5033] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.430894][ T5036] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 115.430894][ T5036] program syz.0.241 not setting count and/or reply_len properly [ 115.484231][ T5038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.242'. [ 115.548164][ T5039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.242'. [ 116.852397][ T5057] loop1: detected capacity change from 0 to 512 [ 116.953358][ T5059] loop3: detected capacity change from 0 to 1024 [ 117.060457][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 117.098669][ T5059] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,init_itable,nogrpid,jqfmt=vfsv0,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,user_xattr,,errors=continue. Quota mode: writeback. [ 117.145378][ T5059] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.164659][ T5057] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.247871][ T5059] device syzkaller0 entered promiscuous mode [ 117.364153][ T5057] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.249: invalid size [ 118.048567][ T5072] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 118.864117][ T5076] loop1: detected capacity change from 0 to 1024 [ 118.928188][ T5076] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 118.965658][ T5076] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.973257][ T5076] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.254: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.040075][ T5076] EXT4-fs (loop1): Remounting filesystem read-only [ 119.079075][ T5076] EXT4-fs (loop1): 1 orphan inode deleted [ 119.130508][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 119.521266][ T5085] loop0: detected capacity change from 0 to 128 [ 119.865429][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.381329][ T5085] FAT-fs (loop0): Filesystem has been set read-only [ 120.452445][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.482632][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.533245][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.563540][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.586335][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.614553][ T5085] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.649425][ T26] audit: type=1800 audit(1775695226.441:8): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="file2" dev="loop0" ino=1048603 res=0 errno=0 [ 120.672526][ T5085] syz.0.257 (5085) used greatest stack depth: 20144 bytes left [ 121.909559][ T5102] loop2: detected capacity change from 0 to 1024 [ 122.016523][ T5104] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 122.450410][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,init_itable,nogrpid,jqfmt=vfsv0,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,user_xattr,,errors=continue. Quota mode: writeback. [ 122.578968][ T5102] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.603300][ T5109] netlink: 60 bytes leftover after parsing attributes in process `syz.0.264'. [ 122.618551][ T5102] device syzkaller0 entered promiscuous mode [ 122.690645][ T5109] netlink: 60 bytes leftover after parsing attributes in process `syz.0.264'. [ 122.974577][ T5120] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 122.974577][ T5120] program syz.1.265 not setting count and/or reply_len properly [ 125.494611][ T5152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.278'. [ 125.565517][ T5153] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 125.605470][ T5152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.278'. [ 126.358490][ T5158] loop1: detected capacity change from 0 to 512 [ 126.861944][ T5168] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 126.861944][ T5168] program syz.2.282 not setting count and/or reply_len properly [ 127.132826][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 127.180924][ T5158] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.462017][ T5179] loop0: detected capacity change from 0 to 512 [ 127.592668][ T5185] device syzkaller0 entered promiscuous mode [ 127.883921][ T5179] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.128757][ T5179] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.407205][ T5195] netlink: 104 bytes leftover after parsing attributes in process `syz.3.294'. [ 129.638438][ T5210] loop3: detected capacity change from 0 to 256 [ 129.767837][ T5209] syz.1.298 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 129.819026][ T5210] FAT-fs (loop3): Directory bread(block 64) failed [ 129.862761][ T5213] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 129.862761][ T5213] program syz.4.299 not setting count and/or reply_len properly [ 129.921121][ T5210] FAT-fs (loop3): Directory bread(block 65) failed [ 130.094102][ T5210] FAT-fs (loop3): Directory bread(block 66) failed [ 130.277495][ T5210] FAT-fs (loop3): Directory bread(block 67) failed [ 130.409961][ T5210] FAT-fs (loop3): Directory bread(block 68) failed [ 130.427380][ T5210] FAT-fs (loop3): Directory bread(block 69) failed [ 130.441971][ T5210] FAT-fs (loop3): Directory bread(block 70) failed [ 130.475463][ T5210] FAT-fs (loop3): Directory bread(block 71) failed [ 130.534780][ T5210] FAT-fs (loop3): Directory bread(block 72) failed [ 130.541385][ T5210] FAT-fs (loop3): Directory bread(block 73) failed [ 130.735800][ T5210] attempt to access beyond end of device [ 130.735800][ T5210] loop3: rw=524288, want=1164, limit=256 [ 130.749004][ T5210] attempt to access beyond end of device [ 130.749004][ T5210] loop3: rw=0, want=1164, limit=256 [ 130.762307][ T26] audit: type=1800 audit(1775695236.551:9): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.300" name="file0" dev="loop3" ino=1048604 res=0 errno=0 [ 131.528727][ T26] audit: type=1326 audit(1775695237.321:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz.1.309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36aed2819 code=0x0 [ 131.554661][ T5234] loop3: detected capacity change from 0 to 512 [ 131.652968][ T5234] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.664870][ T5234] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.603416][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.613118][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.561600][ T5262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.315'. [ 134.646597][ T5262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.315'. [ 134.707094][ T5265] loop6: detected capacity change from 0 to 8 [ 134.707189][ T5267] loop3: detected capacity change from 0 to 128 [ 134.754891][ T5265] loop_set_status: loop6 (o§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>´{fiö½¹Ä) has still dirty pages (nrpages=1) [ 135.812000][ T5275] loop1: detected capacity change from 0 to 1024 [ 135.867132][ T5284] loop4: detected capacity change from 0 to 512 [ 135.880833][ T5275] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.329423][ T5275] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 136.547159][ T5284] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.742878][ T5284] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.944287][ T5275] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 138.390713][ T5308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.329'. [ 138.491710][ T5308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.329'. [ 138.500409][ T5312] loop0: detected capacity change from 0 to 512 [ 138.573976][ T5316] loop2: detected capacity change from 0 to 256 [ 138.614910][ T5312] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.665968][ T5316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.827986][ T5316] FAT-fs (loop2): Directory bread(block 64) failed [ 138.845725][ T5312] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.331: bad orphan inode 131083 [ 138.874725][ T5316] FAT-fs (loop2): Directory bread(block 65) failed [ 138.954664][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,init_itable,data_err=ignore,,errors=continue. Quota mode: none. [ 138.970993][ T5316] FAT-fs (loop2): Directory bread(block 66) failed [ 139.020150][ T5316] FAT-fs (loop2): Directory bread(block 67) failed [ 139.060792][ T5316] FAT-fs (loop2): Directory bread(block 68) failed [ 139.116931][ T5316] FAT-fs (loop2): Directory bread(block 69) failed [ 139.124255][ T5312] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 139.185468][ T5316] FAT-fs (loop2): Directory bread(block 70) failed [ 139.214865][ T5316] FAT-fs (loop2): Directory bread(block 71) failed [ 139.225110][ T5316] FAT-fs (loop2): Directory bread(block 72) failed [ 139.264842][ T5316] FAT-fs (loop2): Directory bread(block 73) failed [ 139.606335][ T5327] loop1: detected capacity change from 0 to 1024 [ 140.754472][ C0] sched: RT throttling activated [ 140.758981][ T5329] loop2: detected capacity change from 0 to 4096 [ 140.793679][ T5327] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 141.031622][ T5327] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.057049][ T5327] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.336: Freeing blocks not in datazone - block = 0, count = 4096 [ 141.100569][ T5327] EXT4-fs (loop1): Remounting filesystem read-only [ 141.109931][ T5329] EXT4-fs (loop2): Test dummy encryption mode enabled [ 141.117276][ T5327] EXT4-fs (loop1): 1 orphan inode deleted [ 141.133274][ T5329] EXT4-fs (loop2): Ignoring removed oldalloc option [ 141.141437][ T5327] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 141.236930][ T5329] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 141.282326][ T5342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 141.307393][ T5329] System zones: 0-5 [ 141.330094][ T5329] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 141.640138][ T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 142.169708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 143.605874][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 145.202112][ T5363] loop0: detected capacity change from 0 to 2048 [ 145.446613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 145.454826][ T23] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 145.469875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 145.479036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 145.502426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 145.518088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 145.573014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 145.600046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 145.609141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 145.646541][ T5363] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.964945][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 145.973461][ T23] usb 5-1: can't read configurations, error -71 [ 146.037847][ T5363] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 146.160608][ T5363] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 146.210046][ T5363] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.210046][ T5363] [ 146.240642][ T5363] EXT4-fs (loop0): Total free blocks count 0 [ 146.278828][ T5363] EXT4-fs (loop0): Free/Dirty block details [ 146.330195][ T5363] EXT4-fs (loop0): free_blocks=66060288 [ 146.340224][ T5363] EXT4-fs (loop0): dirty_blocks=48 [ 146.369378][ T5363] EXT4-fs (loop0): Block reservation details [ 146.430059][ T5363] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 146.527279][ T5377] syz.1.350 uses obsolete (PF_INET,SOCK_PACKET) [ 148.204623][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 148.236577][ T5401] loop0: detected capacity change from 0 to 512 [ 148.307297][ T5403] loop2: detected capacity change from 0 to 4096 [ 148.339048][ T5401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.379701][ T5403] EXT4-fs (loop2): Test dummy encryption mode enabled [ 148.391865][ T5403] EXT4-fs (loop2): Ignoring removed oldalloc option [ 148.420937][ T5401] EXT4-fs (loop0): 1 truncate cleaned up [ 148.429454][ T5401] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fb,stripe=0x000000000000000c,noblock_validity,,errors=continue. Quota mode: none. [ 148.463383][ T5409] loop1: detected capacity change from 0 to 512 [ 148.480335][ T5403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 148.506314][ T5403] System zones: 0-5 [ 148.523524][ T5403] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 148.587972][ T5413] loop3: detected capacity change from 0 to 1024 [ 148.617156][ T5409] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 148.699162][ T5409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803c198, mo2=0002] [ 148.818057][ T5413] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.849732][ T5409] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.362: corrupted in-inode xattr [ 148.961529][ T5413] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.008873][ T5409] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.362: couldn't read orphan inode 15 (err -117) [ 149.074362][ T5413] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.373: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.158166][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,nomblk_io_submit,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 149.329660][ T5413] EXT4-fs (loop3): Remounting filesystem read-only [ 149.463307][ T5413] EXT4-fs (loop3): 1 orphan inode deleted [ 149.560021][ T5413] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 151.894790][ T23] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 152.114661][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 152.122468][ T23] usb 5-1: can't read configurations, error -71 [ 152.184288][ T5422] ODEBUG: Out of memory. ODEBUG disabled [ 152.357827][ T5430] loop1: detected capacity change from 0 to 512 [ 152.403560][ T5428] loop4: detected capacity change from 0 to 4096 [ 152.459109][ T5430] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 152.476007][ T5428] EXT4-fs (loop4): Test dummy encryption mode enabled [ 152.510099][ T5428] EXT4-fs (loop4): Ignoring removed oldalloc option [ 152.725828][ T5428] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 152.941816][ T5428] System zones: 0-5 [ 153.297728][ T5428] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 153.653932][ T5450] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 153.653932][ T5450] program syz.1.372 not setting count and/or reply_len properly [ 155.555465][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 159.932331][ T5564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'. [ 159.954133][ T5566] loop2: detected capacity change from 0 to 2048 [ 160.151764][ T5566] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 160.405130][ T4233] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 160.793909][ T5591] sg_write: data in/out 1713772022/2642 bytes for SCSI command 0x49-- guessing data in; [ 160.793909][ T5591] program syz.2.399 not setting count and/or reply_len properly [ 160.945277][ T5588] loop4: detected capacity change from 0 to 128 [ 161.458963][ T4233] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.657915][ T4233] usb 1-1: can't read configurations, error -71 [ 161.955713][ T5596] loop2: detected capacity change from 0 to 256 [ 162.040362][ T26] audit: type=1800 audit(1775695267.831:11): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.402" name="file2" dev="loop4" ino=1048606 res=0 errno=0 [ 162.175555][ T5588] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 162.274577][ T5588] FAT-fs (loop4): Filesystem has been set read-only [ 162.400100][ T5600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.556799][ T5600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.590695][ T5606] loop2: detected capacity change from 0 to 512 [ 162.639287][ T5606] process 'syz.2.407' launched './file0' with NULL argv: empty string added [ 162.701267][ T5600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.818097][ T5600] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.848114][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 162.907842][ T5610] device team_slave_0 entered promiscuous mode [ 162.914549][ T5610] device team_slave_1 entered promiscuous mode [ 162.927556][ T5610] device macvtap1 entered promiscuous mode [ 162.933543][ T5610] device team0 entered promiscuous mode [ 162.982535][ T5610] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 163.207488][ T5600] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.240947][ T5600] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.321134][ T5600] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.436501][ T5600] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.700317][ T1325] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 165.835424][ T5630] loop3: detected capacity change from 0 to 128 [ 166.088958][ T5635] loop4: detected capacity change from 0 to 256 [ 166.101066][ T26] audit: type=1800 audit(1775695271.891:12): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.417" name="file2" dev="loop3" ino=1048608 res=0 errno=0 [ 166.140402][ T5630] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 166.157498][ T5630] FAT-fs (loop3): Filesystem has been set read-only [ 166.764392][ T5639] loop0: detected capacity change from 0 to 512 [ 166.846095][ T1325] usb 1-1: device descriptor read/all, error -71 [ 166.873049][ T5645] loop1: detected capacity change from 0 to 512 [ 166.920137][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.419: corrupted inode contents [ 166.954617][ T5639] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.419: mark_inode_dirty error [ 166.998697][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.419: corrupted inode contents [ 167.071732][ T5639] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.419: mark_inode_dirty error [ 167.122214][ T5639] Quota error (device loop0): write_blk: dquota write failed [ 167.154205][ T5639] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 167.190969][ T5639] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.419: Failed to acquire dquot type 0 [ 167.232302][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.419: corrupted inode contents [ 167.260058][ T5660] loop2: detected capacity change from 0 to 512 [ 167.289621][ T5639] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.419: mark_inode_dirty error [ 167.319795][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.419: corrupted inode contents [ 167.363163][ T5639] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.419: mark_inode_dirty error [ 167.380237][ T5660] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 167.403320][ T5668] loop4: detected capacity change from 0 to 1024 [ 167.416767][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.419: corrupted inode contents [ 167.440175][ T5639] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 167.456714][ T5660] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.459031][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.419: corrupted inode contents [ 167.520762][ T5639] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.419: mark_inode_dirty error [ 167.539938][ T5668] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.428: lblock 2 mapped to illegal pblock 2 (length 1) [ 167.603722][ T5639] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 167.618822][ T5668] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 167.628253][ T5668] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.428: lblock 0 mapped to illegal pblock 48 (length 1) [ 167.646179][ T5668] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 167.659222][ T5668] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.428: Failed to acquire dquot type 0 [ 167.672527][ T5668] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 167.678322][ T5660] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.426: corrupted inode contents [ 167.700392][ T5639] EXT4-fs (loop0): 1 truncate cleaned up [ 167.701587][ T5668] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.428: mark_inode_dirty error [ 167.717729][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 167.727605][ T5660] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #16: comm syz.2.426: mark_inode_dirty error [ 167.739744][ T5639] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 167.745980][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 167.760279][ T5639] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.826173][ T5668] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 167.836882][ T5660] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.426: corrupted inode contents [ 167.882931][ T5668] EXT4-fs (loop4): 1 orphan inode deleted [ 167.889918][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 167.899164][ T5488] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.934680][ T5668] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,delalloc,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 167.954668][ T5660] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.426: mark_inode_dirty error [ 168.023640][ T5673] loop3: detected capacity change from 0 to 4096 [ 168.048511][ T5488] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 168.065553][ T5488] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:16: Failed to release dquot type 0 [ 168.108504][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 168.143425][ T5660] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.426: corrupted inode contents [ 168.157752][ T5673] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.188787][ T4194] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 168.207444][ T5673] EXT4-fs (loop3): Ignoring removed oldalloc option [ 168.238568][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 168.255258][ T5660] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 168.271418][ T5678] loop1: detected capacity change from 0 to 4096 [ 168.357022][ T4194] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 168.374661][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 168.398696][ T5673] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 168.414044][ T4194] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 168.428746][ T5673] System zones: 0-5 [ 168.437055][ T5673] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 168.460991][ T5660] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.426: corrupted inode contents [ 169.154281][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 169.178953][ T5660] EXT4-fs error (device loop2): ext4_truncate:4279: inode #16: comm syz.2.426: mark_inode_dirty error [ 169.201049][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 169.210172][ T5660] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 169.228421][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.230408][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 169.283757][ T5686] loop0: detected capacity change from 0 to 512 [ 169.330844][ T26] audit: type=1800 audit(1775695275.121:13): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.434" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 169.392866][ T5660] EXT4-fs (loop2): 1 truncate cleaned up [ 169.427938][ T5660] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 169.623291][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 169.874850][ T5700] autofs4:pid:5700:autofs_fill_super: called with bogus options [ 170.308937][ T5716] autofs4:pid:5716:autofs_fill_super: called with bogus options [ 171.230410][ T5729] loop0: detected capacity change from 0 to 128 [ 171.388728][ T5735] loop4: detected capacity change from 0 to 512 [ 171.471133][ T5735] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.530682][ T5735] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 171.631918][ T5735] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 171.698541][ T5735] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 171.739245][ T5735] System zones: 0-2, 18-18, 34-35 [ 171.785783][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.237532][ T5745] loop0: detected capacity change from 0 to 4096 [ 172.508775][ T5745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 172.537415][ T5745] EXT4-fs (loop0): Ignoring removed oldalloc option [ 172.578688][ T5745] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 172.626741][ T5745] System zones: 0-5 [ 172.665069][ T5745] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 174.474736][ T5767] sg_write: data in/out 1713772022/1970 bytes for SCSI command 0x49-- guessing data in; [ 174.474736][ T5767] program syz.2.465 not setting count and/or reply_len properly [ 175.230207][ T5773] netlink: 88 bytes leftover after parsing attributes in process `syz.3.469'. [ 175.274901][ T5773] netlink: 88 bytes leftover after parsing attributes in process `syz.3.469'. [ 175.405202][ T5775] loop2: detected capacity change from 0 to 128 [ 175.458664][ T5775] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 175.623932][ T5486] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 175.674334][ T5780] loop0: detected capacity change from 0 to 1024 [ 175.785061][ T5780] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.818781][ T5780] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.022822][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 177.452502][ T5803] sg_write: data in/out 1713772022/1634 bytes for SCSI command 0x49-- guessing data in; [ 177.452502][ T5803] program syz.0.477 not setting count and/or reply_len properly [ 177.802724][ T4928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.003876][ T4230] Bluetooth: hci4: command 0x0409 tx timeout [ 178.072561][ T5808] netlink: 88 bytes leftover after parsing attributes in process `syz.0.480'. [ 178.139398][ T4928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.204951][ T5808] netlink: 88 bytes leftover after parsing attributes in process `syz.0.480'. [ 178.250427][ T4928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.331554][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.401188][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.417879][ T5819] netlink: 104 bytes leftover after parsing attributes in process `syz.0.483'. [ 178.443123][ T5781] device bridge_slave_0 entered promiscuous mode [ 178.458313][ T4928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.479168][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.491815][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.539736][ T5781] device bridge_slave_1 entered promiscuous mode [ 178.613655][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.691528][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.795336][ T5781] team0: Port device team_slave_0 added [ 178.823973][ T5781] team0: Port device team_slave_1 added [ 178.905165][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.933265][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.004824][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.368953][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.432587][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.766395][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.847462][ T5840] loop0: detected capacity change from 0 to 512 [ 179.856650][ T5781] device hsr_slave_0 entered promiscuous mode [ 179.873835][ T5781] device hsr_slave_1 entered promiscuous mode [ 179.898804][ T5842] loop3: detected capacity change from 0 to 512 [ 179.905644][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.913496][ T5781] Cannot create hsr debugfs directory [ 179.934847][ T5840] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.035513][ T5840] EXT4-fs (loop0): 1 truncate cleaned up [ 180.041228][ T5840] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fb,stripe=0x000000000000000c,noblock_validity,,errors=continue. Quota mode: none. [ 180.084640][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 180.126852][ T5844] netlink: 88 bytes leftover after parsing attributes in process `syz.2.492'. [ 180.174645][ T5847] netlink: 88 bytes leftover after parsing attributes in process `syz.2.492'. [ 180.763909][ T5781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.807287][ T5781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.863604][ T5781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.910454][ T5781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.204566][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 181.209452][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.214161][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 181.260203][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 181.265254][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.266736][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 181.345964][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.466341][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.533327][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.585355][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.641081][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.648388][ T5488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.789206][ T4928] device hsr_slave_0 left promiscuous mode [ 181.815660][ T4928] device hsr_slave_1 left promiscuous mode [ 181.846088][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.878612][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.966420][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.974626][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.985202][ T4928] device bridge_slave_1 left promiscuous mode [ 181.993372][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.109508][ T5906] loop3: detected capacity change from 0 to 512 [ 182.164669][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 182.255991][ T5906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.332375][ T5906] EXT4-fs warning (device loop3): ext4_resize_fs:1981: can't read last block, resize aborted [ 182.372349][ T4928] device bridge_slave_0 left promiscuous mode [ 182.383765][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.433234][ T4928] device team0 left promiscuous mode [ 182.473722][ T4928] device team_slave_0 left promiscuous mode [ 182.480246][ T4928] device team_slave_1 left promiscuous mode [ 182.498400][ T4928] device veth1_macvtap left promiscuous mode [ 182.513561][ T4928] device veth0_macvtap left promiscuous mode [ 182.521992][ T4928] device veth1_vlan left promiscuous mode [ 182.535733][ T4928] device veth0_vlan left promiscuous mode [ 182.831706][ T5917] loop0: detected capacity change from 0 to 512 [ 182.917184][ T5917] EXT4-fs (loop0): 1 truncate cleaned up [ 182.954080][ T5917] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 183.670548][ T5929] loop1: detected capacity change from 0 to 128 [ 184.272364][ T1325] Bluetooth: hci4: command 0x0419 tx timeout [ 184.283683][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 184.324223][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 184.354902][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.492138][ T4928] bond0 (unregistering): Released all slaves [ 184.565154][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.600071][ T5902] netlink: 88 bytes leftover after parsing attributes in process `syz.2.503'. [ 184.611364][ T5907] netlink: 88 bytes leftover after parsing attributes in process `syz.2.503'. [ 184.696133][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.722460][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.772354][ T5939] loop3: detected capacity change from 0 to 1024 [ 184.774559][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.786644][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.817198][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.838154][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.924546][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.936005][ T5939] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.954817][ T5939] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.985329][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.014261][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.040468][ T5939] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.515: bg 0: block 112: padding at end of block bitmap is not set [ 185.042558][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.072883][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.101386][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.128530][ T5488] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm kworker/u4:16: lblock 3 mapped to illegal pblock 3 (length 3) [ 185.134588][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.163487][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.177036][ T5488] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 185.193470][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.218489][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.227743][ T5488] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.227743][ T5488] [ 185.280266][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.295129][ T5950] loop0: detected capacity change from 0 to 128 [ 185.306513][ T5488] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:16: lblock 8 mapped to illegal pblock 8 (length 5) [ 185.330902][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.354595][ T4230] usb 3-1: device descriptor read/64, error -71 [ 185.361369][ T5488] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 185.404766][ T5950] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 185.405529][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.413655][ T5950] FAT-fs (loop0): Filesystem has been set read-only [ 185.472782][ T5488] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.472782][ T5488] [ 185.602653][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.644585][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.673415][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.690452][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.834539][ T4230] usb 3-1: device descriptor read/64, error -71 [ 185.954943][ T4230] usb usb3-port1: attempt power cycle [ 186.090414][ T5983] netlink: 88 bytes leftover after parsing attributes in process `syz.3.523'. [ 186.175031][ T5983] netlink: 88 bytes leftover after parsing attributes in process `syz.3.523'. [ 186.368995][ T4230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.403226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.432138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.442060][ T5998] netlink: 104 bytes leftover after parsing attributes in process `syz.1.528'. [ 186.464745][ T4230] usb 3-1: device descriptor read/8, error -71 [ 186.482453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.497372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.540673][ T5781] device veth0_vlan entered promiscuous mode [ 186.553856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.605488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.642461][ T5781] device veth1_vlan entered promiscuous mode [ 186.674911][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.698573][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.734567][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.743444][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.755974][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.770174][ T5781] device veth0_macvtap entered promiscuous mode [ 186.800226][ T5781] device veth1_macvtap entered promiscuous mode [ 186.843552][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.844796][ T4230] usb 3-1: device descriptor read/8, error -71 [ 186.858796][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.983717][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.997275][ T4230] usb usb3-port1: unable to enumerate USB device [ 187.052180][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.074582][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.091586][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.121146][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.183756][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.206480][ T6023] Unsupported ieee802154 address type: 0 [ 187.232856][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.280622][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.358253][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.391385][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.442641][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.476809][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.519198][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.532132][ T6034] loop0: detected capacity change from 0 to 128 [ 187.559887][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.592262][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.637316][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.668034][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.697079][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.766533][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.805461][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.814382][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.865368][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.894326][ T5781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.937173][ T5781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.974414][ T5781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.998810][ T5781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.058386][ T6038] netlink: 88 bytes leftover after parsing attributes in process `syz.3.536'. [ 188.078478][ T6039] netlink: 88 bytes leftover after parsing attributes in process `syz.3.536'. [ 188.209546][ T6046] device syzkaller0 entered promiscuous mode [ 188.446334][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.494797][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.575293][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.594953][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.613596][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.665450][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.668747][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.543'. [ 188.721752][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.543'. [ 188.992290][ T6083] program syz.2.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.171377][ T6088] loop0: detected capacity change from 0 to 1024 [ 189.284908][ T6088] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.445581][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 189.618672][ T6088] EXT4-fs (loop0): shut down requested (0) [ 191.147409][ T6133] loop1: detected capacity change from 0 to 256 [ 191.194664][ T6128] device syzkaller0 entered promiscuous mode [ 191.267774][ T6133] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.310634][ T6133] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.799707][ T6158] Zero length message leads to an empty skb [ 191.887349][ T6161] loop0: detected capacity change from 0 to 512 [ 192.467825][ T6161] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 192.662832][ T6172] loop3: detected capacity change from 0 to 128 [ 192.773577][ T6161] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.893643][ T6172] netlink: 'syz.3.569': attribute type 10 has an invalid length. [ 193.202685][ T6185] device syzkaller0 entered promiscuous mode [ 193.226926][ T6191] loop3: detected capacity change from 0 to 1024 [ 193.312541][ T6191] EXT4-fs (loop3): Ignoring removed bh option [ 193.342284][ T6194] loop0: detected capacity change from 0 to 2048 [ 193.382062][ T6191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 193.394781][ T6191] System zones: 0-1, 3-12 [ 193.432661][ T6191] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #3: block 1: comm syz.3.576: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.474897][ T6191] EXT4-fs (loop3): Remounting filesystem read-only [ 193.508197][ T6194] EXT4-fs (loop0): Ignoring removed oldalloc option [ 193.621540][ T6191] Quota error (device loop3): write_blk: dquota write failed [ 193.709056][ T6191] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 193.729317][ T6194] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 193.734820][ T6191] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.576: Failed to acquire dquot type 0 [ 193.877966][ T6194] System zones: 0-7 [ 193.905628][ T6194] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 194.386969][ T6194] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #2: comm syz.0.577: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 194.453811][ T6191] EXT4-fs (loop3): Remounting filesystem read-only [ 194.491594][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.497977][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.526840][ T6194] EXT4-fs (loop0): Remounting filesystem read-only [ 194.547031][ T6191] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.576: Freeing blocks not in datazone - block = 0, count = 4096 [ 194.622917][ T6191] EXT4-fs (loop3): Remounting filesystem read-only [ 194.716044][ T6191] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.576: Invalid inode bitmap blk 0 in block_group 0 [ 194.734784][ T145] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.797655][ T6191] EXT4-fs (loop3): Remounting filesystem read-only [ 194.817299][ T145] EXT4-fs (loop3): Remounting filesystem read-only [ 194.846942][ T6191] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 194.858322][ T145] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 194.877477][ T6191] EXT4-fs (loop3): Remounting filesystem read-only [ 194.883389][ T145] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 194.907558][ T6191] EXT4-fs (loop3): 1 orphan inode deleted [ 194.913532][ T6191] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback. [ 194.931301][ T145] EXT4-fs (loop3): Remounting filesystem read-only [ 195.294264][ T6227] xt_hashlimit: size too large, truncated to 1048576 [ 195.658943][ T6238] device syzkaller0 entered promiscuous mode [ 196.743898][ T6256] loop5: detected capacity change from 0 to 512 [ 197.049388][ T6270] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 197.290759][ T6256] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,max_batch_time=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 197.384801][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.597621][ T6256] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.624560][ T13] usb 3-1: device descriptor read/64, error -71 [ 197.775155][ T6256] EXT4-fs (loop5): shut down requested (0) [ 197.827099][ T6276] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.593: iget: bad i_size value: 2533274857506816 [ 197.871058][ T21] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 197.896637][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.094734][ T13] usb 3-1: device descriptor read/64, error -71 [ 198.215361][ T13] usb usb3-port1: attempt power cycle [ 198.287203][ T6289] loop5: detected capacity change from 0 to 4096 [ 198.436743][ T6289] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 198.801421][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.584655][ T13] usb 3-1: device not accepting address 8, error -71 [ 200.868765][ T6305] device syzkaller0 entered promiscuous mode [ 200.984935][ T21] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 201.054777][ T21] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.064313][ T21] usb 1-1: can't read configurations, error -71 [ 201.658277][ T6313] loop5: detected capacity change from 0 to 512 [ 201.670668][ T6315] loop2: detected capacity change from 0 to 1024 [ 201.725136][ T6315] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,journal_dev=0x0000000000000006,,errors=continue. Quota mode: none. [ 201.817240][ T6315] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.828432][ T6313] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 201.829034][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 201.854685][ T6313] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.966235][ T6314] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 201.994839][ T6312] netlink: 'syz.0.606': attribute type 7 has an invalid length. [ 202.026953][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 202.057593][ T6314] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.108413][ T6314] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.172727][ T6314] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.264662][ T6327] netlink: 88 bytes leftover after parsing attributes in process `syz.3.609'. [ 202.297800][ T6314] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.325577][ T6327] netlink: 88 bytes leftover after parsing attributes in process `syz.3.609'. [ 202.357169][ T6329] loop5: detected capacity change from 0 to 512 [ 202.365452][ T6314] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.437231][ T6315] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.516285][ T6315] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.581954][ T6315] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.607: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.905708][ T6342] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 203.306683][ T6349] loop5: detected capacity change from 0 to 4096 [ 204.148580][ T6349] EXT4-fs (loop5): Test dummy encryption mode enabled [ 204.166141][ T6349] EXT4-fs (loop5): Ignoring removed oldalloc option [ 204.179102][ T6363] device syzkaller0 entered promiscuous mode [ 204.231343][ T6349] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 204.318236][ T6349] System zones: 0-5 [ 204.358059][ T6373] netlink: 88 bytes leftover after parsing attributes in process `syz.2.622'. [ 204.377101][ T6349] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 204.421409][ T6375] device syzkaller0 entered promiscuous mode [ 204.459078][ T6373] netlink: 88 bytes leftover after parsing attributes in process `syz.2.622'. [ 204.688825][ T6386] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 204.714032][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.625'. [ 204.756138][ T6386] device ipvlan2 entered promiscuous mode [ 204.777604][ T6386] bridge0: port 3(ipvlan2) entered blocking state [ 204.794740][ T6386] bridge0: port 3(ipvlan2) entered disabled state [ 206.257027][ T6414] loop5: detected capacity change from 0 to 512 [ 206.477993][ T6420] device syzkaller0 entered promiscuous mode [ 206.494875][ T6414] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 206.553328][ T6425] loop1: detected capacity change from 0 to 128 [ 206.562711][ T6414] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 206.629504][ T6414] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.629: inode has both inline data and extents flags [ 206.636439][ T6426] netlink: 88 bytes leftover after parsing attributes in process `syz.2.635'. [ 206.688238][ T6414] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.629: couldn't read orphan inode 13 (err -117) [ 206.744292][ T6414] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,auto_da_alloc=0x0000000000000007,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 206.774941][ T6427] netlink: 88 bytes leftover after parsing attributes in process `syz.2.635'. [ 206.889143][ T6414] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 206.991451][ T6433] device syzkaller0 entered promiscuous mode [ 207.028847][ T6437] loop2: detected capacity change from 0 to 512 [ 207.146745][ T6437] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,minixdf,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 207.162302][ T6431] loop3: detected capacity change from 0 to 4096 [ 207.181859][ T6440] loop5: detected capacity change from 0 to 4096 [ 207.194790][ T6437] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.262104][ T6431] EXT4-fs (loop3): Test dummy encryption mode enabled [ 207.300686][ T6431] EXT4-fs (loop3): Ignoring removed oldalloc option [ 207.309477][ T6437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.642: bg 0: block 345: padding at end of block bitmap is not set [ 207.390976][ T6437] Quota error (device loop2): write_blk: dquota write failed [ 207.399945][ T6437] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 207.427439][ T6437] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.642: Failed to acquire dquot type 1 [ 207.428156][ T6431] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 207.482106][ T6440] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.512632][ T6431] System zones: 0-5 [ 207.573047][ T6431] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 207.616183][ T6453] loop1: detected capacity change from 0 to 512 [ 207.640056][ T6454] device syzkaller0 entered promiscuous mode [ 207.863638][ T6453] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.645: inode #1: comm syz.1.645: iget: illegal inode # [ 207.939120][ T6453] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.645: error while reading EA inode 1 err=-117 [ 207.965837][ T6453] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.645: inode #1: comm syz.1.645: iget: illegal inode # [ 207.980708][ T6466] netlink: 52 bytes leftover after parsing attributes in process `syz.2.650'. [ 208.001236][ T6453] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.645: error while reading EA inode 1 err=-117 [ 208.050910][ T6453] EXT4-fs (loop1): 1 orphan inode deleted [ 208.057780][ T6468] netlink: 52 bytes leftover after parsing attributes in process `syz.2.650'. [ 208.076549][ T6453] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 208.519072][ T6484] sg_write: data in/out 1713772022/1592 bytes for SCSI command 0x49-- guessing data in; [ 208.519072][ T6484] program syz.2.653 not setting count and/or reply_len properly [ 209.198079][ T6489] loop3: detected capacity change from 0 to 512 [ 209.269890][ T26] audit: type=1326 audit(1775695315.061:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.297581][ T26] audit: type=1326 audit(1775695315.091:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.322652][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.658'. [ 209.342392][ T6497] loop0: detected capacity change from 0 to 1024 [ 209.356769][ T6489] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 209.437153][ T6489] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.652: bg 0: block 104: invalid block bitmap [ 209.458669][ T6497] EXT4-fs (loop0): Ignoring removed bh option [ 209.484692][ T26] audit: type=1326 audit(1775695315.091:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.509220][ T6505] loop1: detected capacity change from 0 to 8192 [ 209.572550][ T6497] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,usrquota,bh,,errors=continue. Quota mode: writeback. [ 209.600691][ T6497] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.617110][ T6489] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 209.660305][ T26] audit: type=1326 audit(1775695315.091:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.686645][ T26] audit: type=1326 audit(1775695315.131:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.713503][ T6489] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.652: invalid indirect mapped block 1 (level 1) [ 209.717535][ T26] audit: type=1326 audit(1775695315.131:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.752080][ T26] audit: type=1326 audit(1775695315.131:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.775794][ T6489] EXT4-fs (loop3): 1 truncate cleaned up [ 209.783423][ T6489] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.845071][ T26] audit: type=1326 audit(1775695315.131:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f66b1448819 code=0x7ffc0000 [ 209.966251][ T6525] loop1: detected capacity change from 0 to 1024 [ 210.012045][ T6525] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 210.059058][ T6525] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 210.114240][ T6524] loop0: detected capacity change from 0 to 4096 [ 210.141732][ T6525] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,data=ordered,stripe=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,errors=remount-ro,init_itable,auto_da_alloc,. Quota mode: writeback. [ 210.309376][ T6524] EXT4-fs (loop0): Test dummy encryption mode enabled [ 210.325875][ T6524] EXT4-fs (loop0): Ignoring removed oldalloc option [ 210.395290][ T6524] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 210.404899][ T6524] System zones: 0-5 [ 210.418972][ T6524] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 210.537526][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.547639][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.006469][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.049857][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.153400][ T6549] loop3: detected capacity change from 0 to 1024 [ 211.170556][ T6549] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38790!=20869) [ 211.199348][ T6549] EXT4-fs (loop3): failed to initialize system zone (-117) [ 211.213944][ T6549] EXT4-fs (loop3): mount failed [ 211.491530][ T6499] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.502003][ T6499] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.511429][ T6499] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.520567][ T6499] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.723986][ T6554] sg_write: data in/out 1713772022/1592 bytes for SCSI command 0x49-- guessing data in; [ 211.723986][ T6554] program syz.3.668 not setting count and/or reply_len properly [ 213.326803][ T6572] loop1: detected capacity change from 0 to 1024 [ 213.416118][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 213.590504][ T6583] loop5: detected capacity change from 0 to 164 [ 213.601985][ T6572] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.955702][ T6591] loop0: detected capacity change from 0 to 1024 [ 214.152419][ T6597] device syzkaller0 entered promiscuous mode [ 214.212738][ T6583] Unable to read rock-ridge attributes [ 214.264840][ T6583] Unable to read rock-ridge attributes [ 214.265198][ T6591] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,journal_dev=0x0000000000000006,,errors=continue. Quota mode: none. [ 214.306572][ T6583] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 214.354421][ T6602] loop3: detected capacity change from 0 to 512 [ 214.419811][ T6591] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.493535][ T6602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.683: bg 0: block 5: invalid block bitmap [ 214.517126][ T6591] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.680: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.619883][ T6602] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 214.695422][ T6602] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.683: invalid indirect mapped block 3 (level 2) [ 214.748866][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.689'. [ 214.787132][ T6617] loop1: detected capacity change from 0 to 4096 [ 214.801474][ T6602] EXT4-fs (loop3): 1 orphan inode deleted [ 214.823710][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.823990][ T6602] EXT4-fs (loop3): 1 truncate cleaned up [ 214.832522][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.842935][ T6602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.866132][ T6617] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.873683][ T6617] EXT4-fs (loop1): Ignoring removed oldalloc option [ 214.903236][ T6617] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 215.004907][ T6617] System zones: 0-5 [ 215.038852][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 215.038871][ T26] audit: type=1800 audit(1775695320.831:23): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.683" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 215.043730][ T6617] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 216.014175][ T6646] loop2: detected capacity change from 0 to 512 [ 216.175189][ T6651] loop3: detected capacity change from 0 to 256 [ 216.242419][ T6646] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 216.338786][ T6646] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.396906][ T6651] loop3: detected capacity change from 0 to 764 [ 217.009306][ T6675] loop0: detected capacity change from 0 to 1024 [ 217.084963][ T6680] device syzkaller0 entered promiscuous mode [ 217.121525][ T6676] loop3: detected capacity change from 0 to 4096 [ 217.147337][ T6675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 217.177908][ T6675] System zones: 0-1, 3-36 [ 217.224583][ T6675] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.698: bad orphan inode 134217728 [ 217.318444][ T6676] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 217.359682][ T6675] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 218.429789][ T6705] loop0: detected capacity change from 0 to 4096 [ 218.492592][ T6705] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.511595][ T6705] EXT4-fs (loop0): Ignoring removed oldalloc option [ 218.602191][ T6705] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 218.645524][ T6705] System zones: 0-5 [ 218.671858][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 219.080833][ T6735] loop3: detected capacity change from 0 to 512 [ 219.158627][ T6735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.221304][ T6735] EXT4-fs (loop3): 1 truncate cleaned up [ 219.228968][ T6745] loop1: detected capacity change from 0 to 512 [ 219.265297][ T6735] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 219.318969][ T6745] EXT4-fs (loop1): 1 truncate cleaned up [ 219.329601][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 219.538596][ T4186] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /151/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 219.563268][ T6753] device syzkaller0 entered promiscuous mode [ 219.694143][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 219.732215][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 219.732308][ T6758] loop2: detected capacity change from 0 to 1024 [ 219.791907][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 219.873111][ T4186] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /151/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 219.944779][ T6758] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 219.959733][ T6758] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 219.991559][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.017367][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 220.070983][ T6758] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,data=ordered,stripe=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,errors=remount-ro,init_itable,auto_da_alloc,. Quota mode: writeback. [ 220.182506][ T6758] EXT4-fs error (device loop2): __ext4_iget:4912: inode #12: block 13: comm syz.2.725: invalid block [ 220.203450][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.225284][ T4186] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /151/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 220.229211][ T6779] netlink: 830 bytes leftover after parsing attributes in process `syz.1.731'. [ 220.275302][ T6758] EXT4-fs (loop2): Remounting filesystem read-only [ 220.320842][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.354926][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 220.435684][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.486426][ T4186] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /151/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 220.615095][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.622369][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 220.711569][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.719627][ T4186] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /151/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 220.746654][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.754892][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 220.817366][ T6803] device syzkaller0 entered promiscuous mode [ 220.845435][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 220.897010][ T6805] loop1: detected capacity change from 0 to 4096 [ 220.952393][ T6805] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.993374][ T6805] EXT4-fs (loop1): Ignoring removed oldalloc option [ 221.069617][ T6805] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 221.125363][ T6805] System zones: 0-5 [ 221.131131][ T6805] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 221.437159][ T6824] usb usb8: usbfs: process 6824 (syz.5.741) did not claim interface 0 before use [ 221.638486][ T6832] loop5: detected capacity change from 0 to 512 [ 221.673039][ T6835] loop0: detected capacity change from 0 to 128 [ 221.686994][ T6837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.746'. [ 221.702245][ T6837] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.709458][ T6837] bridge0: port 2(bridge_slave_1) entered listening state [ 221.716870][ T6837] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.724042][ T6837] bridge0: port 1(bridge_slave_0) entered listening state [ 221.783764][ T6832] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 221.820567][ T6832] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.370871][ T6878] netlink: 52 bytes leftover after parsing attributes in process `syz.1.758'. [ 222.402728][ T6880] loop5: detected capacity change from 0 to 512 [ 222.570869][ T6887] loop1: detected capacity change from 0 to 512 [ 222.739418][ T6887] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.761: inode has both inline data and extents flags [ 222.755430][ T6880] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 222.777416][ T6880] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.809161][ T6887] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.761: couldn't read orphan inode 15 (err -117) [ 222.839288][ T6887] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.041122][ T6906] loop1: detected capacity change from 0 to 512 [ 223.077228][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 223.179831][ T6906] EXT4-fs error (device loop1): ext4_quota_enable:6442: inode #4: comm syz.1.764: iget: bad extended attribute block 1280 [ 223.202057][ T6906] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.764: Bad quota inode: 4, type: 1 [ 223.223428][ T6906] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.251129][ T6913] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 223.264719][ T6913] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 223.276200][ T6906] EXT4-fs (loop1): mount failed [ 223.328965][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.357558][ T6913] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,data=ordered,stripe=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,errors=remount-ro,init_itable,auto_da_alloc,. Quota mode: writeback. [ 223.364562][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.405291][ T6888] device bridge_slave_0 entered promiscuous mode [ 223.415580][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.424253][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.433098][ T6888] device bridge_slave_1 entered promiscuous mode [ 223.473490][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.531719][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.540454][ T6913] EXT4-fs error (device loop0): __ext4_iget:4912: inode #12: block 13: comm syz.0.767: invalid block [ 223.619818][ T6888] team0: Port device team_slave_0 added [ 223.646496][ T6913] EXT4-fs (loop0): Remounting filesystem read-only [ 223.667832][ T6888] team0: Port device team_slave_1 added [ 223.680163][ T6927] netlink: 52 bytes leftover after parsing attributes in process `syz.2.770'. [ 223.721660][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.745304][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.773180][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 223.773415][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 223.795648][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.837631][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.866965][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.890309][ T6936] set_capacity_and_notify: 1 callbacks suppressed [ 223.890326][ T6936] loop0: detected capacity change from 0 to 512 [ 223.901287][ T6938] loop1: detected capacity change from 0 to 1024 [ 223.925460][ T6936] EXT4-fs (loop0): Ignoring removed nobh option [ 223.930034][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.049334][ T6942] loop0: detected capacity change from 0 to 512 [ 224.066896][ T6938] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000005,noquota,journal_ioprio=0x0000000000000003,nombcache,nodioread_nolock,,errors=continue. Quota mode: none. [ 224.068618][ T6888] device hsr_slave_0 entered promiscuous mode [ 224.088243][ T6938] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.125932][ T6888] device hsr_slave_1 entered promiscuous mode [ 224.175544][ T6942] ------------[ cut here ]------------ [ 224.181900][ T6942] EA inode 11 i_nlink=2 [ 224.182127][ T6942] WARNING: CPU: 0 PID: 6942 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 224.198643][ T6942] Modules linked in: [ 224.202680][ T6942] CPU: 0 PID: 6942 Comm: syz.0.776 Not tainted syzkaller #0 [ 224.210870][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.221588][ T6942] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 224.229009][ T6942] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 1a e6 a1 ff 49 8b 37 48 c7 c7 40 9b 3d 8a 89 da e8 f9 32 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 43 22 a0 07 [ 224.250049][ T6942] RSP: 0018:ffffc9000338f3a0 EFLAGS: 00010246 [ 224.256394][ T6942] RAX: 9f6965f43ca9b200 RBX: 0000000000000002 RCX: 0000000000080000 [ 224.264885][ T6942] RDX: ffffc90003d23000 RSI: 000000000001b7c7 RDI: 000000000001b7c8 [ 224.273086][ T6942] RBP: ffffc9000338f490 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 224.281539][ T6942] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff888059c03478 [ 224.291000][ T6942] R13: 1ffff1100b3806ce R14: dffffc0000000000 R15: ffff888059c034b8 [ 224.301623][ T6942] FS: 00007f147ddfc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 224.310843][ T6942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.317765][ T6942] CR2: 00007f1475a1b000 CR3: 0000000066dfd000 CR4: 00000000003506f0 [ 224.325983][ T6942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 224.333992][ T6942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.342397][ T6942] Call Trace: [ 224.345837][ T6942] [ 224.348890][ T6942] ? ext4_xattr_block_csum+0x560/0x560 [ 224.354612][ T6942] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 224.361392][ T6942] ext4_xattr_inode_dec_ref_all+0x960/0xfc0 [ 224.367761][ T6942] ? errseq_check+0x3c/0x70 [ 224.372384][ T6942] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 224.378283][ T6942] ? __ext4_journal_ensure_credits+0x450/0x450 [ 224.384704][ T6942] ? ext4_get_inode_loc+0xf6/0x120 [ 224.390288][ T6942] ext4_xattr_delete_inode+0xad1/0xca0 [ 224.396288][ T6942] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 224.402660][ T6942] ext4_evict_inode+0xc53/0x1090 [ 224.407761][ T6942] ? _raw_spin_unlock+0x24/0x40 [ 224.412651][ T6942] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.418731][ T6942] ? do_raw_spin_unlock+0x11d/0x230 [ 224.424286][ T6942] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.430275][ T6942] evict+0x4c9/0x8d0 [ 224.434204][ T6942] ? proc_nr_inodes+0x320/0x320 [ 224.439231][ T6942] ? do_raw_spin_unlock+0x11d/0x230 [ 224.444492][ T6942] ? _raw_spin_unlock+0x24/0x40 [ 224.449558][ T6942] ? iput+0x706/0x8a0 [ 224.453758][ T6942] ext4_orphan_cleanup+0xad2/0x1320 [ 224.459063][ T6942] ? ext4_orphan_del+0xbf0/0xbf0 [ 224.464217][ T6942] ? errseq_check_and_advance+0x62/0x120 [ 224.470123][ T6942] ext4_fill_super+0x8e25/0x95a0 [ 224.475173][ T6942] ? ext4_mount+0x40/0x40 [ 224.479534][ T6942] ? set_blocksize+0x1f3/0x370 [ 224.484560][ T6942] ? sb_set_blocksize+0xa5/0xe0 [ 224.489702][ T6942] mount_bdev+0x287/0x3c0 [ 224.494061][ T6942] ? ext4_mount+0x40/0x40 [ 224.498615][ T6942] legacy_get_tree+0xe6/0x180 [ 224.503550][ T6942] ? ext4_errno_to_code+0x160/0x160 [ 224.508836][ T6942] vfs_get_tree+0x88/0x270 [ 224.513406][ T6942] do_new_mount+0x24a/0xa40 [ 224.518285][ T6942] __se_sys_mount+0x2e3/0x3d0 [ 224.523023][ T6942] ? __x64_sys_mount+0xc0/0xc0 [ 224.527869][ T6942] ? lockdep_hardirqs_on+0x94/0x140 [ 224.533446][ T6942] ? __x64_sys_mount+0x1c/0xc0 [ 224.538553][ T6942] do_syscall_64+0x4c/0xa0 [ 224.543191][ T6942] ? clear_bhb_loop+0x30/0x80 [ 224.547942][ T6942] ? clear_bhb_loop+0x30/0x80 [ 224.552825][ T6942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.559196][ T6942] RIP: 0033:0x7f147fba3a8a [ 224.564224][ T6942] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.585472][ T6942] RSP: 002b:00007f147ddfbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.594341][ T6942] RAX: ffffffffffffffda RBX: 00007f147ddfbee0 RCX: 00007f147fba3a8a [ 224.603545][ T6942] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f147ddfbea0 [ 224.611760][ T6942] RBP: 00002000000009c0 R08: 00007f147ddfbee0 R09: 0000000000800718 [ 224.619950][ T6942] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 224.628110][ T6942] R13: 00007f147ddfbea0 R14: 000000000000048d R15: 0000200000000200 [ 224.636384][ T6942] [ 224.639623][ T6942] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.646930][ T6942] CPU: 0 PID: 6942 Comm: syz.0.776 Not tainted syzkaller #0 [ 224.654556][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.658839][ T6888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.664618][ T6942] Call Trace: [ 224.664714][ T6942] [ 224.664723][ T6942] dump_stack_lvl+0x188/0x250 [ 224.664749][ T6942] ? show_regs_print_info+0x20/0x20 [ 224.664773][ T6942] ? load_image+0x400/0x400 [ 224.693370][ T6942] panic+0x2e5/0x810 [ 224.697572][ T6942] ? bpf_jit_dump+0xd0/0xd0 [ 224.702103][ T6942] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 224.708228][ T6942] __warn+0x248/0x2b0 [ 224.712328][ T6942] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 224.718568][ T6942] report_bug+0x1b7/0x2e0 [ 224.722938][ T6942] handle_bug+0x3a/0x70 [ 224.727486][ T6942] exc_invalid_op+0x16/0x40 [ 224.732015][ T6942] asm_exc_invalid_op+0x16/0x20 [ 224.737082][ T6942] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 224.744079][ T6942] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 1a e6 a1 ff 49 8b 37 48 c7 c7 40 9b 3d 8a 89 da e8 f9 32 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 43 22 a0 07 [ 224.765963][ T6942] RSP: 0018:ffffc9000338f3a0 EFLAGS: 00010246 [ 224.772391][ T6942] RAX: 9f6965f43ca9b200 RBX: 0000000000000002 RCX: 0000000000080000 [ 224.781380][ T6942] RDX: ffffc90003d23000 RSI: 000000000001b7c7 RDI: 000000000001b7c8 [ 224.789359][ T6942] RBP: ffffc9000338f490 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 224.797524][ T6942] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff888059c03478 [ 224.806324][ T6942] R13: 1ffff1100b3806ce R14: dffffc0000000000 R15: ffff888059c034b8 [ 224.815035][ T6942] ? ext4_xattr_block_csum+0x560/0x560 [ 224.820533][ T6942] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 224.828523][ T6942] ext4_xattr_inode_dec_ref_all+0x960/0xfc0 [ 224.836085][ T6942] ? errseq_check+0x3c/0x70 [ 224.841070][ T6942] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 224.847939][ T6942] ? __ext4_journal_ensure_credits+0x450/0x450 [ 224.855865][ T6942] ? ext4_get_inode_loc+0xf6/0x120 [ 224.862352][ T6942] ext4_xattr_delete_inode+0xad1/0xca0 [ 224.868081][ T6942] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 224.875409][ T6942] ext4_evict_inode+0xc53/0x1090 [ 224.880760][ T6942] ? _raw_spin_unlock+0x24/0x40 [ 224.886065][ T6942] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.891995][ T6942] ? do_raw_spin_unlock+0x11d/0x230 [ 224.897478][ T6942] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.903643][ T6942] evict+0x4c9/0x8d0 [ 224.907584][ T6942] ? proc_nr_inodes+0x320/0x320 [ 224.912459][ T6942] ? do_raw_spin_unlock+0x11d/0x230 [ 224.917686][ T6942] ? _raw_spin_unlock+0x24/0x40 [ 224.923067][ T6942] ? iput+0x706/0x8a0 [ 224.927351][ T6942] ext4_orphan_cleanup+0xad2/0x1320 [ 224.932955][ T6942] ? ext4_orphan_del+0xbf0/0xbf0 [ 224.938083][ T6942] ? errseq_check_and_advance+0x62/0x120 [ 224.943946][ T6942] ext4_fill_super+0x8e25/0x95a0 [ 224.949155][ T6942] ? ext4_mount+0x40/0x40 [ 224.953540][ T6942] ? set_blocksize+0x1f3/0x370 [ 224.958488][ T6942] ? sb_set_blocksize+0xa5/0xe0 [ 224.963645][ T6942] mount_bdev+0x287/0x3c0 [ 224.968661][ T6942] ? ext4_mount+0x40/0x40 [ 224.973673][ T6942] legacy_get_tree+0xe6/0x180 [ 224.978701][ T6942] ? ext4_errno_to_code+0x160/0x160 [ 224.983917][ T6942] vfs_get_tree+0x88/0x270 [ 224.988399][ T6942] do_new_mount+0x24a/0xa40 [ 224.992938][ T6942] __se_sys_mount+0x2e3/0x3d0 [ 224.997863][ T6942] ? __x64_sys_mount+0xc0/0xc0 [ 225.002676][ T6942] ? lockdep_hardirqs_on+0x94/0x140 [ 225.008733][ T6942] ? __x64_sys_mount+0x1c/0xc0 [ 225.013781][ T6942] do_syscall_64+0x4c/0xa0 [ 225.018683][ T6942] ? clear_bhb_loop+0x30/0x80 [ 225.023383][ T6942] ? clear_bhb_loop+0x30/0x80 [ 225.028390][ T6942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.034327][ T6942] RIP: 0033:0x7f147fba3a8a [ 225.038746][ T6942] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.059482][ T6942] RSP: 002b:00007f147ddfbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.069292][ T6942] RAX: ffffffffffffffda RBX: 00007f147ddfbee0 RCX: 00007f147fba3a8a [ 225.078090][ T6942] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f147ddfbea0 [ 225.087054][ T6942] RBP: 00002000000009c0 R08: 00007f147ddfbee0 R09: 0000000000800718 [ 225.095859][ T6942] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 225.104611][ T6942] R13: 00007f147ddfbea0 R14: 000000000000048d R15: 0000200000000200 [ 225.113541][ T6942] [ 225.117643][ T6942] Kernel Offset: disabled [ 225.122870][ T6942] Rebooting in 86400 seconds..