last executing test programs: 2m44.760590548s ago: executing program 3 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x40858}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {0x0, 0x1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) futex(0x0, 0x4, 0x80000000, 0x0, 0x0, 0x2) r6 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) 2m43.526699472s ago: executing program 3 (id=943): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x8000000, 0x55595659, 0x6, 0x8, [{0x2, 0x1f}, {0x8, 0x7fff}, {0x7, 0x6}, {0x42, 0x2}, {0x3}, {0x3ff, 0x4}, {0x81, 0x3ff}, {0x8, 0xe37}], 0x1, 0x0, 0x0, 0x0, 0x5}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 2m41.573731995s ago: executing program 3 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6(0xa, 0xa, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0xa1, 0x401}]}, 0x10) exit(0x7ffd) syz_open_procfs(r0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m39.897378642s ago: executing program 3 (id=955): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m38.392946821s ago: executing program 3 (id=961): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") syz_open_dev$video(0x0, 0x3, 0x2000) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045007, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703350000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r6, 0x0, 0x0) 2m36.667115411s ago: executing program 3 (id=967): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) 2m20.480650777s ago: executing program 32 (id=967): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) 9.008737759s ago: executing program 0 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) recvmmsg(r4, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) statfs(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x6, 0x4000010, r5, 0x66242000) ftruncate(r5, 0xff) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000408000b40000000002400048020000180080001006677640014000280080001400000001708000340000000020900010073797a30"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000) socket(0x8, 0x3, 0x3) 8.588776761s ago: executing program 1 (id=1394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x2dc2, 0xfffb) 8.514092505s ago: executing program 2 (id=1395): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, r4) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x46c, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004814, 0x0, 0x0) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x80}, {0x0, 0x3ffffffffffffb, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 8.456244018s ago: executing program 1 (id=1396): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.474600671s ago: executing program 2 (id=1397): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.473757661s ago: executing program 4 (id=1398): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x14, 0x8, "b34daa3efadfa947"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x20060010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 6.340132318s ago: executing program 5 (id=1399): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) 6.229746364s ago: executing program 0 (id=1400): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5.935424719s ago: executing program 5 (id=1401): socket(0x1f, 0x3, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c00"], 0xc0}, 0x0) 5.487396773s ago: executing program 1 (id=1402): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x3ff, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1d, 0x2, 0x6) unshare(0x22020600) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0x3, 0xbec, 0x7, 0x11}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TIOCCBRK(r5, 0x5428) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 5.481132333s ago: executing program 2 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6(0xa, 0xa, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000b40), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0xa1, 0x401}]}, 0x10) exit(0x7ffd) syz_open_procfs(r0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.78877558s ago: executing program 5 (id=1404): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) openat(0xffffffffffffffff, 0x0, 0x312514d, 0x184) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000100)=ANY=[], 0x8, 0x1537, &(0x7f0000001ec0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x3, 0x10000021, 0xa, 0x6, 0x9, 0xfffffffffffffff8, 0x401, 0x0, 0x80000000}, 0x0) r4 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5002, 0x12) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3ffff) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x29d, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40042, 0x11) 4.788023189s ago: executing program 0 (id=1405): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.750019581s ago: executing program 4 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2c) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 2.180319426s ago: executing program 0 (id=1407): r0 = socket(0x1f, 0x3, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000005c0)=@ethtool_cmd={0x1f, 0x5, 0x2, 0x8, 0x9, 0x1, 0x5, 0x5, 0x9, 0x0, 0x2, 0x4, 0x956, 0x1, 0x6, 0x9, [0x3ff]}}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x1b, 0x0, 0x1, 0x2}, 0x14) r5 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) 2.179128036s ago: executing program 4 (id=1408): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x8000000, 0x55595659, 0x6, 0x8, [{0x2, 0x1f}, {0x8, 0x7fff}, {0x7, 0x6}, {0x42, 0x2}, {0x3}, {0x3ff, 0x4}, {0x81, 0x3ff}, {0x8, 0xe37}], 0x1, 0x0, 0x0, 0x0, 0x5}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 2.177688646s ago: executing program 2 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0xa, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2c) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 2.016120684s ago: executing program 5 (id=1410): r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.172315248s ago: executing program 1 (id=1411): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x9, 0xfffffffffffffffe, 0x80, 0x290761e6, r0, r0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[], 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$inet6(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r7, r7, 0x0, 0xe3aa6ea) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 1.170411419s ago: executing program 0 (id=1412): r0 = socket(0x1f, 0x3, 0xfffffffe) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xc0}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) socket$isdn_base(0x22, 0x3, 0x0) bind$packet(r0, 0x0, 0x0) r5 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) 1.106373732s ago: executing program 5 (id=1413): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.105117652s ago: executing program 4 (id=1414): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.067576174s ago: executing program 2 (id=1415): socket(0x1f, 0x3, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c0000"], 0xc0}, 0x0) 1.023705766s ago: executing program 4 (id=1416): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 204.449529ms ago: executing program 1 (id=1417): r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 92.627135ms ago: executing program 5 (id=1418): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 84.261515ms ago: executing program 4 (id=1419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2c) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 1.231689ms ago: executing program 2 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6(0xa, 0xa, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000b40), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0xa1, 0x401}]}, 0x10) exit(0x7ffd) syz_open_procfs(r0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 522.429µs ago: executing program 0 (id=1421): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=1422): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) gettid() close_range(r5, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) kernel console output (not intermixed with test programs): , sector=45096, nr_sectors = 8 limit=40427 [ 229.889179][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 230.532160][ T4476] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 230.692266][ T4476] usb 1-1: device descriptor read/64, error -71 [ 231.091445][ T4476] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 231.368613][ T4476] usb 1-1: device descriptor read/64, error -71 [ 231.387938][ T7307] vxcan1 speed is unknown, defaulting to 1000 [ 231.725254][ T4476] usb usb1-port1: attempt power cycle [ 232.282325][ T7313] loop3: detected capacity change from 0 to 40427 [ 232.298562][ T7313] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 232.299829][ T7313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 232.303980][ T7313] F2FS-fs (loop3): invalid crc value [ 232.352313][ T4476] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.848313][ T7313] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.965516][ T7313] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 232.966956][ T7313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.155205][ T4476] usb 1-1: device descriptor read/8, error -71 [ 234.851295][ T7326] kernel profiling enabled (shift: 9) [ 234.857611][ T7326] loop2: detected capacity change from 0 to 512 [ 234.861373][ T7326] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.863193][ T7326] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 234.866112][ T7326] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 234.867677][ T7326] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.610: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 234.871684][ T7326] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.610: couldn't read orphan inode 13 (err -117) [ 234.874167][ T7326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.972385][ T7339] loop0: detected capacity change from 0 to 128 [ 235.004946][ T7339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.013785][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 235.693642][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 236.597139][ T7370] loop1: detected capacity change from 0 to 128 [ 236.609750][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 236.624514][ T7370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.313756][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 238.199302][ T7388] loop2: detected capacity change from 0 to 40427 [ 238.240116][ T7388] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 238.241518][ T7388] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 238.253608][ T7388] F2FS-fs (loop2): invalid crc value [ 238.747833][ T7388] F2FS-fs (loop2): Found nat_bits in checkpoint [ 238.852694][ T7388] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 238.854045][ T7388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.198721][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 240.195885][ T7411] device syzkaller0 entered promiscuous mode [ 241.108045][ T7431] loop3: detected capacity change from 0 to 128 [ 241.129115][ T7431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.755189][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 242.783452][ T7449] overlayfs: missing 'lowerdir' [ 244.125698][ T7468] loop1: detected capacity change from 0 to 8192 [ 244.156654][ T7468] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.222751][ T7468] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 244.224342][ T7468] REISERFS (device loop1): using ordered data mode [ 244.225381][ T7468] reiserfs: using flush barriers [ 244.228377][ T7468] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.231152][ T7468] REISERFS (device loop1): checking transaction log (loop1) [ 244.242954][ T7468] REISERFS (device loop1): Using r5 hash to sort names [ 244.248601][ T7468] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 244.706773][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 245.248788][ T7492] loop1: detected capacity change from 0 to 128 [ 245.292522][ T7492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.229084][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 246.317244][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 247.665691][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 248.725632][ T7538] loop0: detected capacity change from 0 to 128 [ 248.812581][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.813676][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.257542][ T7538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 250.106779][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 251.836387][ T7569] loop4: detected capacity change from 0 to 512 [ 251.868303][ T7573] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 251.881635][ T7573] Zero length message leads to an empty skb [ 251.900835][ T4333] Bluetooth: hci4: command 0x0405 tx timeout [ 251.904239][ T7574] vxcan1 speed is unknown, defaulting to 1000 [ 252.260397][ T7569] EXT4-fs (loop4): 1 truncate cleaned up [ 252.261365][ T7569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.271721][ T27] audit: type=1326 audit(252.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.277357][ T27] audit: type=1326 audit(252.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.280809][ T27] audit: type=1326 audit(252.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.289136][ T27] audit: type=1326 audit(252.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.292407][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.293004][ T27] audit: type=1326 audit(252.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.298153][ T27] audit: type=1326 audit(252.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.301527][ T27] audit: type=1326 audit(252.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.305251][ T27] audit: type=1326 audit(252.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.308313][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.308918][ T27] audit: type=1326 audit(252.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 252.314231][ T27] audit: type=1326 audit(252.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 253.333329][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 254.073574][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 254.079050][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 254.191944][ T7611] loop0: detected capacity change from 0 to 128 [ 254.200297][ T7611] FAT-fs (loop0): Unrecognized mount option "017777777777777777777770xffffffffffffffff00000000000000000000000" or missing value [ 254.242203][ T7611] loop0: detected capacity change from 0 to 256 [ 254.249479][ T7611] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 255.866713][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.901621][ T7624] loop4: detected capacity change from 0 to 128 [ 256.828529][ T7632] loop2: detected capacity change from 0 to 1024 [ 257.144708][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.146169][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.155972][ T7624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.004598][ T61] hfsplus: b-tree write err: -5, ino 25 [ 258.016193][ T61] hfsplus: b-tree write err: -5, ino 4 [ 258.018271][ T61] hfsplus: b-tree write err: -5, ino 2 [ 258.432475][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 258.621321][ T7650] loop2: detected capacity change from 0 to 128 [ 258.635099][ T7650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 258.638253][ T7655] loop1: detected capacity change from 0 to 128 [ 258.719122][ T7656] loop4: detected capacity change from 0 to 256 [ 258.723041][ T7656] exfat: Deprecated parameter 'utf8' [ 258.723947][ T7655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 258.724031][ T7656] exfat: Deprecated parameter 'namecase' [ 258.726423][ T7656] exfat: Deprecated parameter 'namecase' [ 258.730271][ T7656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 259.521853][ T7666] loop0: detected capacity change from 0 to 40427 [ 259.604658][ T7666] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 259.606176][ T7666] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 259.611159][ T7666] F2FS-fs (loop0): invalid crc value [ 259.855338][ T7666] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.950823][ T7666] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 259.951956][ T7666] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.160166][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.461682][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 260.493874][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 260.681029][ T7676] loop1: detected capacity change from 0 to 128 [ 260.929098][ T7676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.000246][ T7679] device syzkaller0 entered promiscuous mode [ 261.591877][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 263.021075][ T7711] loop3: detected capacity change from 0 to 128 [ 263.239574][ T7711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 263.270243][ T7719] loop4: detected capacity change from 0 to 32768 [ 264.019424][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 264.019631][ T7719] XFS (loop4): Mounting V5 Filesystem [ 264.029923][ T7719] XFS (loop4): Ending clean mount [ 264.043536][ T7719] XFS (loop4): Quotacheck needed: Please wait. [ 264.060055][ T7719] XFS (loop4): Quotacheck: Done. [ 264.076963][ T7738] loop1: detected capacity change from 0 to 1764 [ 264.171007][ T7738] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 264.472491][ T7747] loop3: detected capacity change from 0 to 256 [ 265.748501][ T4331] XFS (loop4): Unmounting Filesystem [ 266.996320][ T7775] loop3: detected capacity change from 0 to 128 [ 267.021053][ T7775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 267.958707][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 269.673841][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 269.819837][ T7820] loop1: detected capacity change from 0 to 256 [ 270.395978][ T7825] loop3: detected capacity change from 0 to 1024 [ 270.436998][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 270.443130][ T7825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.627241][ T7832] loop1: detected capacity change from 0 to 32768 [ 270.637018][ T7832] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.703 (7832) [ 270.742468][ T7832] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 270.744136][ T7832] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 270.745614][ T7832] BTRFS info (device loop1): enabling disk space caching [ 270.746775][ T7832] BTRFS info (device loop1): force clearing of disk cache [ 270.747891][ T7832] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 270.749525][ T7832] BTRFS info (device loop1): use zstd compression, level 3 [ 270.750723][ T7832] BTRFS info (device loop1): disk space caching is enabled [ 270.831826][ T7846] loop4: detected capacity change from 0 to 128 [ 270.887831][ T7846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 271.330966][ T7832] BTRFS info (device loop1): enabling ssd optimizations [ 271.336058][ T7832] BTRFS info (device loop1): rebuilding free space tree [ 271.354205][ T7832] BTRFS info (device loop1): disabling free space tree [ 271.355380][ T7832] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 271.357029][ T7832] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 271.953315][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 272.135397][ T4320] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 272.240696][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 272.387677][ T7875] loop2: detected capacity change from 0 to 128 [ 272.407019][ T7875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.467865][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 273.341616][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 273.446790][ T7895] loop2: detected capacity change from 0 to 128 [ 273.466855][ T7895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 274.305265][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 274.429405][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 274.608290][ T7915] loop2: detected capacity change from 0 to 256 [ 275.065685][ T7919] loop4: detected capacity change from 0 to 128 [ 275.085066][ T7919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 275.792410][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 276.833476][ T7946] loop3: detected capacity change from 0 to 40427 [ 276.859715][ T7946] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 276.861059][ T7946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 276.872978][ T7946] F2FS-fs (loop3): invalid crc value [ 277.374743][ T7946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 277.481813][ T7946] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 277.483058][ T7946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.532648][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 278.537942][ T7962] loop1: detected capacity change from 0 to 128 [ 278.553339][ T7962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 279.447395][ T7977] loop4: detected capacity change from 0 to 1024 [ 280.235159][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 280.814411][ T5062] hfsplus: b-tree write err: -5, ino 25 [ 280.823462][ T5062] hfsplus: b-tree write err: -5, ino 4 [ 280.824639][ T5062] hfsplus: b-tree write err: -5, ino 2 [ 281.824987][ T7980] loop2: detected capacity change from 0 to 1764 [ 282.047048][ T4333] Bluetooth: Frame is too long (len 12, expected len 4) [ 282.331708][ T8015] loop2: detected capacity change from 0 to 128 [ 282.360459][ T8015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.381412][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 282.681779][ T8003] loop1: detected capacity change from 0 to 32768 [ 282.746816][ T8003] XFS (loop1): Mounting V5 Filesystem [ 282.776256][ T8003] XFS (loop1): Ending clean mount [ 282.779349][ T8003] XFS (loop1): Quotacheck needed: Please wait. [ 282.794691][ T8003] XFS (loop1): Quotacheck: Done. [ 283.245194][ T4320] XFS (loop1): Unmounting Filesystem [ 283.897197][ T8043] loop0: detected capacity change from 0 to 32768 [ 283.901210][ T8043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.743 (8043) [ 283.920642][ T8043] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.922343][ T8043] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 283.923703][ T8043] BTRFS info (device loop0): force clearing of disk cache [ 283.924758][ T8043] BTRFS info (device loop0): enabling auto defrag [ 283.925716][ T8043] BTRFS info (device loop0): max_inline at 0 [ 283.926684][ T8043] BTRFS info (device loop0): enabling ssd optimizations [ 283.927726][ T8043] BTRFS info (device loop0): using spread ssd allocation scheme [ 283.929041][ T8043] BTRFS info (device loop0): using free space tree [ 283.957515][ T8047] loop1: detected capacity change from 0 to 128 [ 283.974952][ T8047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 284.438525][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 284.454751][ T8060] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 284.460943][ T8060] device syz_tun entered promiscuous mode [ 284.476140][ T8060] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 284.555147][ T8043] BTRFS info (device loop0): rebuilding free space tree [ 284.676358][ T80] block nbd2: Attempted send on invalid socket [ 284.921152][ T80] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 284.924555][ T8075] qnx6: unable to read the first superblock [ 284.926174][ T80] block nbd2: Attempted send on invalid socket [ 284.927406][ T80] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 284.928965][ T8075] qnx6: unable to read the first superblock [ 284.930314][ T8075] qnx6: unable to read the first superblock [ 284.941748][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 284.984714][ T4477] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 285.009183][ T8072] loop4: detected capacity change from 0 to 4096 [ 285.060672][ T4327] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.418704][ T8085] loop2: detected capacity change from 0 to 256 [ 285.482012][ T8072] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 285.483822][ T8085] FAT-fs (loop2): Directory bread(block 64) failed [ 285.490191][ T8085] FAT-fs (loop2): Directory bread(block 65) failed [ 285.499499][ T8085] FAT-fs (loop2): Directory bread(block 66) failed [ 285.518841][ T8085] FAT-fs (loop2): Directory bread(block 67) failed [ 285.528189][ T8072] ntfs3: loop4: Failed to load $Extend. [ 285.529577][ T8085] FAT-fs (loop2): Directory bread(block 68) failed [ 285.537162][ T8085] FAT-fs (loop2): Directory bread(block 69) failed [ 285.543808][ T8085] FAT-fs (loop2): Directory bread(block 70) failed [ 285.550037][ T8085] FAT-fs (loop2): Directory bread(block 71) failed [ 285.559911][ T8085] FAT-fs (loop2): Directory bread(block 72) failed [ 285.565404][ T8085] FAT-fs (loop2): Directory bread(block 73) failed [ 286.956577][ T8105] loop2: detected capacity change from 0 to 256 [ 287.769866][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 288.193719][ T8124] loop0: detected capacity change from 0 to 128 [ 288.225531][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 288.277643][ T8124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.626197][ T8135] loop3: detected capacity change from 0 to 512 [ 288.685673][ T8135] EXT4-fs (loop3): 1 truncate cleaned up [ 288.685736][ T8135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.754398][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 288.754445][ T27] audit: type=1326 audit(288.720:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.754784][ T27] audit: type=1326 audit(288.720:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.754903][ T27] audit: type=1326 audit(288.720:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756262][ T27] audit: type=1326 audit(288.730:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756283][ T27] audit: type=1326 audit(288.730:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756300][ T27] audit: type=1326 audit(288.730:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756317][ T27] audit: type=1326 audit(288.730:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756331][ T27] audit: type=1326 audit(288.730:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756345][ T27] audit: type=1326 audit(288.730:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 288.756359][ T27] audit: type=1326 audit(288.730:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf771a8 code=0x7ffc0000 [ 289.174143][ T8146] loop4: detected capacity change from 0 to 128 [ 289.187452][ T8146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 289.313404][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 289.324364][ T8148] loop2: detected capacity change from 0 to 1024 [ 289.721662][ T8148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 290.150866][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 290.253493][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 290.692559][ T8160] tipc: Started in network mode [ 290.694576][ T8160] tipc: Node identity 9a6a5cbcaddc, cluster identity 4711 [ 290.707025][ T8160] tipc: Enabled bearer , priority 0 [ 290.709248][ T8169] loop0: detected capacity change from 0 to 256 [ 290.714238][ T8169] exfat: Deprecated parameter 'utf8' [ 290.717935][ T8160] device syzkaller0 entered promiscuous mode [ 290.726637][ T8169] exfat: Deprecated parameter 'namecase' [ 290.727654][ T8169] exfat: Deprecated parameter 'namecase' [ 290.756032][ T8160] tipc: Resetting bearer [ 290.773384][ T8169] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 290.781478][ T8159] tipc: Resetting bearer [ 291.013815][ T8159] tipc: Disabling bearer [ 291.497559][ T8173] loop1: detected capacity change from 0 to 256 [ 291.658877][ T8173] FAT-fs (loop1): Directory bread(block 64) failed [ 291.660037][ T8173] FAT-fs (loop1): Directory bread(block 65) failed [ 291.661171][ T8173] FAT-fs (loop1): Directory bread(block 66) failed [ 291.681296][ T8173] FAT-fs (loop1): Directory bread(block 67) failed [ 291.687766][ T8173] FAT-fs (loop1): Directory bread(block 68) failed [ 291.689045][ T8173] FAT-fs (loop1): Directory bread(block 69) failed [ 291.690194][ T8173] FAT-fs (loop1): Directory bread(block 70) failed [ 291.787191][ T8179] lo speed is unknown, defaulting to 1000 [ 291.788370][ T8179] lo speed is unknown, defaulting to 1000 [ 291.792398][ T8179] lo speed is unknown, defaulting to 1000 [ 291.799028][ T8179] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 291.810112][ T8179] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 291.891560][ T8179] lo speed is unknown, defaulting to 1000 [ 291.895793][ T8179] lo speed is unknown, defaulting to 1000 [ 291.899183][ T8179] lo speed is unknown, defaulting to 1000 [ 291.901912][ T8179] lo speed is unknown, defaulting to 1000 [ 291.904655][ T8179] lo speed is unknown, defaulting to 1000 [ 292.085840][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 292.095661][ T8173] FAT-fs (loop1): Directory bread(block 71) failed [ 292.096803][ T8173] FAT-fs (loop1): Directory bread(block 72) failed [ 292.097879][ T8173] FAT-fs (loop1): Directory bread(block 73) failed [ 292.108617][ T8182] loop4: detected capacity change from 0 to 32768 [ 292.110439][ T8182] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.767 (8182) [ 292.115483][ T8182] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 292.117533][ T8182] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 292.118917][ T8182] BTRFS info (device loop4): enabling disk space caching [ 292.120059][ T8182] BTRFS info (device loop4): force clearing of disk cache [ 292.121189][ T8182] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 292.122812][ T8182] BTRFS info (device loop4): use zstd compression, level 3 [ 292.124031][ T8182] BTRFS info (device loop4): disk space caching is enabled [ 293.085950][ T8182] BTRFS info (device loop4): enabling ssd optimizations [ 293.087506][ T8182] BTRFS info (device loop4): rebuilding free space tree [ 293.091078][ T8182] BTRFS info (device loop4): disabling free space tree [ 293.092562][ T8182] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 293.094104][ T8182] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 293.492354][ T8221] vxcan1 speed is unknown, defaulting to 1000 [ 293.513958][ T8221] lo speed is unknown, defaulting to 1000 [ 293.893861][ T4331] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 293.960008][ T8227] loop0: detected capacity change from 0 to 128 [ 294.068091][ T8227] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 294.274357][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 294.704775][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 294.868153][ T8245] overlayfs: missing 'lowerdir' [ 294.877293][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 295.400221][ T8252] tipc: Started in network mode [ 295.401669][ T8252] tipc: Node identity 06b855c11f47, cluster identity 4711 [ 295.424766][ T8252] tipc: Enabled bearer , priority 0 [ 295.479034][ T8260] 9pnet_virtio: no channels available for device syz [ 295.538199][ T8247] device syzkaller0 entered promiscuous mode [ 296.354516][ T8262] loop0: detected capacity change from 0 to 4096 [ 296.444198][ T4506] tipc: Node number set to 436164033 [ 296.450937][ T8246] tipc: Resetting bearer [ 296.557791][ T8246] tipc: Disabling bearer [ 296.559525][ T8262] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 296.564675][ T8260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.565940][ T8260] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 296.585682][ T8262] ntfs3: loop0: Failed to load $Extend. [ 296.653118][ T8267] loop4: detected capacity change from 0 to 164 [ 296.863891][ T8267] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 296.881514][ T8260] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 296.883435][ T8260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.884417][ T8260] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 296.897196][ T8260] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 296.898566][ T8260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.899545][ T8260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.900460][ T8260] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 296.903636][ T8260] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 296.904954][ T8260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.905851][ T8260] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 296.916020][ T8260] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 297.008719][ T8269] loop3: detected capacity change from 0 to 256 [ 297.453522][ T8276] loop2: detected capacity change from 0 to 16 [ 298.154561][ T8276] erofs: (device loop2): mounted with root inode @ nid 36. [ 298.212865][ T8269] FAT-fs (loop3): Directory bread(block 64) failed [ 298.214140][ T8269] FAT-fs (loop3): Directory bread(block 65) failed [ 298.215313][ T8269] FAT-fs (loop3): Directory bread(block 66) failed [ 298.216374][ T8269] FAT-fs (loop3): Directory bread(block 67) failed [ 298.217512][ T8269] FAT-fs (loop3): Directory bread(block 68) failed [ 298.268970][ T8276] vxcan1 speed is unknown, defaulting to 1000 [ 298.275795][ T8282] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 298.277510][ T8282] syz.2.792: attempt to access beyond end of device [ 298.277510][ T8282] loop2: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 298.280268][ T8269] FAT-fs (loop3): Directory bread(block 69) failed [ 298.281475][ T8269] FAT-fs (loop3): Directory bread(block 70) failed [ 298.282977][ T8269] FAT-fs (loop3): Directory bread(block 71) failed [ 298.284068][ T8269] FAT-fs (loop3): Directory bread(block 72) failed [ 298.285090][ T8269] FAT-fs (loop3): Directory bread(block 73) failed [ 298.285826][ T8276] lo speed is unknown, defaulting to 1000 [ 298.299032][ T8282] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.300900][ T8282] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.302651][ T8282] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.304480][ T8282] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.723086][ T8276] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.724935][ T8276] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.726817][ T8276] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.728574][ T8276] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.731088][ T8276] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.732978][ T8276] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 298.735720][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.892157][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.973201][ T4329] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.973224][ T4333] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.973326][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.974098][ T8303] vxcan1 speed is unknown, defaulting to 1000 [ 300.006981][ T8303] lo speed is unknown, defaulting to 1000 [ 300.318509][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 300.812527][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 301.012266][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 301.052298][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 301.053384][ T4322] Bluetooth: hci3: command 0x0406 tx timeout [ 301.694999][ T8316] loop4: detected capacity change from 0 to 32768 [ 301.878269][ T8330] tipc: Started in network mode [ 301.879181][ T8330] tipc: Node identity 16b1a35a57e4, cluster identity 4711 [ 301.880478][ T8330] tipc: Enabled bearer , priority 0 [ 302.199007][ T8334] netlink: 'syz.4.791': attribute type 10 has an invalid length. [ 302.200215][ T8334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'. [ 302.202203][ T8334] bridge0: port 3(veth1_vlan) entered blocking state [ 302.203277][ T8334] bridge0: port 3(veth1_vlan) entered disabled state [ 302.205142][ T8334] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 302.403453][ T8318] tipc: Disabling bearer [ 303.176941][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 303.961612][ T8350] loop2: detected capacity change from 0 to 512 [ 304.040222][ T8350] EXT4-fs (loop2): 1 truncate cleaned up [ 304.041250][ T8350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 304.053075][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 304.053088][ T27] audit: type=1326 audit(304.030:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.064352][ T27] audit: type=1326 audit(304.030:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.068151][ T27] audit: type=1326 audit(304.030:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122129][ T27] audit: type=1326 audit(304.030:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122156][ T27] audit: type=1326 audit(304.030:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122172][ T27] audit: type=1326 audit(304.030:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122186][ T27] audit: type=1326 audit(304.030:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122201][ T27] audit: type=1326 audit(304.030:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122215][ T27] audit: type=1326 audit(304.030:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.122228][ T27] audit: type=1326 audit(304.030:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f771a8 code=0x7ffc0000 [ 304.177855][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 304.310838][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 304.392315][ T8368] vxcan1 speed is unknown, defaulting to 1000 [ 304.485272][ T8368] lo speed is unknown, defaulting to 1000 [ 305.089514][ T8380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.631214][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 305.982006][ T8394] device syzkaller0 entered promiscuous mode [ 306.461465][ T8400] siw: device registration error -23 [ 308.653928][ T8430] loop1: detected capacity change from 0 to 1024 [ 308.869739][ T8433] vxcan1 speed is unknown, defaulting to 1000 [ 309.163445][ T8433] lo speed is unknown, defaulting to 1000 [ 310.342306][ T8443] loop4: detected capacity change from 0 to 16 [ 310.615641][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.616800][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.622949][ T8443] erofs: (device loop4): mounted with root inode @ nid 36. [ 310.647541][ T55] hfsplus: b-tree write err: -5, ino 25 [ 310.648627][ T55] hfsplus: b-tree write err: -5, ino 4 [ 310.649518][ T55] hfsplus: b-tree write err: -5, ino 2 [ 310.888063][ T8443] vxcan1 speed is unknown, defaulting to 1000 [ 310.904309][ T8443] lo speed is unknown, defaulting to 1000 [ 310.926496][ T8443] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 310.928490][ T8443] syz.4.820: attempt to access beyond end of device [ 310.928490][ T8443] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 310.958935][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.960857][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.962887][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.964717][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.968068][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.969973][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.972083][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.973944][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.976655][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 310.978633][ T8443] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 311.004568][ T8446] loop2: detected capacity change from 0 to 128 [ 311.009802][ T8446] EXT4-fs (loop2): Test dummy encryption mode enabled [ 311.098085][ T8446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 311.099509][ T8446] System zones: 1-3, 19-19, 35-36 [ 311.196511][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 311.407003][ T8446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.584937][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 312.097642][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 312.468030][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 312.480982][ T8476] tipc: Enabled bearer , priority 0 [ 312.482958][ T8476] device syzkaller0 entered promiscuous mode [ 312.490609][ T8476] tipc: Resetting bearer [ 312.493381][ T8475] tipc: Resetting bearer [ 312.657537][ T8478] loop0: detected capacity change from 0 to 32768 [ 312.834127][ T8475] tipc: Disabling bearer [ 313.592898][ T8490] loop2: detected capacity change from 0 to 128 [ 313.624637][ T8490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 313.650102][ T8485] loop4: detected capacity change from 0 to 4096 [ 313.669531][ T8485] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 313.705962][ T8485] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 314.356644][ T8499] loop1: detected capacity change from 0 to 64 [ 314.798217][ T4654] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 314.799757][ T4331] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 314.801207][ T4331] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 314.841062][ T4331] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 315.192334][ T61] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 315.194032][ T4331] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 315.505882][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 315.516332][ T8515] loop3: detected capacity change from 0 to 1024 [ 315.527725][ T8515] hfsplus: invalid btree flag [ 315.528713][ T8515] hfsplus: failed to load catalog file [ 315.789800][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 316.734393][ T8535] loop0: detected capacity change from 0 to 512 [ 316.808444][ T8535] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.841: inode has both inline data and extents flags [ 316.811716][ T8535] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.841: couldn't read orphan inode 15 (err -117) [ 316.813863][ T8535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 316.849865][ T8533] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 316.851117][ T8533] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 316.853821][ T8533] vhci_hcd vhci_hcd.0: Device attached [ 317.264564][ T8534] vhci_hcd: connection closed [ 317.268379][ T39] vhci_hcd: stop threads [ 317.270689][ T39] vhci_hcd: release socket [ 317.272184][ T39] vhci_hcd: disconnect device [ 317.907796][ T114] vhci_hcd: vhci_device speed not set [ 318.353681][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 318.355066][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 318.428738][ T8554] loop3: detected capacity change from 0 to 256 [ 318.504659][ T8554] exfat: Unknown parameter '01777777777777777777777' [ 319.240709][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 319.525516][ T8571] loop1: detected capacity change from 0 to 512 [ 319.540569][ T8571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.542299][ T8571] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.607381][ T8571] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 319.617078][ T8571] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.848: Allocating blocks 41-42 which overlap fs metadata [ 319.625680][ T8571] __quota_error: 21 callbacks suppressed [ 319.625694][ T8571] Quota error (device loop1): write_blk: dquota write failed [ 319.629210][ T8571] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 319.630754][ T8571] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.848: Allocating blocks 41-42 which overlap fs metadata [ 319.635973][ T8569] ceph: No mds server is up or the cluster is laggy [ 319.637551][ T8571] Quota error (device loop1): write_blk: dquota write failed [ 319.638934][ T8571] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 319.640517][ T8571] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.848: Failed to acquire dquot type 1 [ 319.661735][ T8571] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 319.666277][ T8571] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.848: corrupted inode contents [ 319.670112][ T8571] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #12: comm syz.1.848: mark_inode_dirty error [ 319.672583][ T8571] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.848: corrupted inode contents [ 319.674829][ T8571] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.848: mark_inode_dirty error [ 319.676900][ T8571] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.848: corrupted inode contents [ 319.680919][ T8571] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 319.692327][ T8571] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.848: corrupted inode contents [ 319.694612][ T8571] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.848: mark_inode_dirty error [ 319.696737][ T8571] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 319.700023][ T8571] EXT4-fs (loop1): 1 truncate cleaned up [ 319.701063][ T8571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 319.715432][ T8577] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 319.715432][ T8577] The task syz.3.847 (8577) triggered the difference, watch for misbehavior. [ 320.041074][ T8563] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 321.574607][ T8587] loop0: detected capacity change from 0 to 16 [ 321.584038][ T8587] erofs: (device loop0): mounted with root inode @ nid 36. [ 321.658967][ T4510] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 321.713289][ T8594] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 321.716441][ T8594] syz.0.851: attempt to access beyond end of device [ 321.716441][ T8594] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 321.734629][ T8587] vxcan1 speed is unknown, defaulting to 1000 [ 322.114770][ T8587] lo speed is unknown, defaulting to 1000 [ 322.125393][ T8594] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.129045][ T8594] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.130870][ T8594] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.133138][ T8594] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.135099][ T8596] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.137005][ T8596] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.138952][ T8596] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.140726][ T8596] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.154716][ T8587] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.156691][ T8587] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 322.172047][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 322.852972][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 323.267861][ T8598] loop4: detected capacity change from 0 to 32768 [ 323.295841][ T8598] XFS (loop4): Mounting V5 Filesystem [ 323.314100][ T8598] XFS (loop4): Ending clean mount [ 324.675546][ T4331] XFS (loop4): Unmounting Filesystem [ 325.216917][ T8645] vxcan1 speed is unknown, defaulting to 1000 [ 325.342541][ T8645] lo speed is unknown, defaulting to 1000 [ 325.603991][ T8651] loop0: detected capacity change from 0 to 32768 [ 325.684187][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 326.212561][ T8651] XFS (loop0): Mounting V5 Filesystem [ 326.707376][ T8651] XFS (loop0): Ending clean mount [ 326.710666][ T8651] XFS (loop0): Quotacheck needed: Please wait. [ 326.768167][ T8651] XFS (loop0): Quotacheck: Done. [ 327.144580][ T8682] netlink: 'syz.0.865': attribute type 2 has an invalid length. [ 327.350024][ T4327] XFS (loop0): Unmounting Filesystem [ 328.147329][ T4333] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 328.147505][ T4333] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 328.149591][ T4333] Bluetooth: hci3: Malformed LE Event: 0x02 [ 328.797756][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 328.806219][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 329.545132][ T8728] tipc: Started in network mode [ 329.547328][ T8728] tipc: Node identity c271f382c04b, cluster identity 4711 [ 329.548631][ T8728] tipc: Enabled bearer , priority 0 [ 329.550431][ T8728] device syzkaller0 entered promiscuous mode [ 329.561957][ T8728] tipc: Resetting bearer [ 329.564826][ T8727] tipc: Resetting bearer [ 329.934228][ T8727] tipc: Disabling bearer [ 329.966008][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 330.213602][ T8745] loop4: detected capacity change from 0 to 1024 [ 330.464775][ T8745] hfsplus: invalid btree flag [ 330.465693][ T8745] hfsplus: failed to load catalog file [ 330.705665][ T8754] vxcan1 speed is unknown, defaulting to 1000 [ 330.760734][ T8754] lo speed is unknown, defaulting to 1000 [ 331.850121][ T8767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.774113][ T8769] vxcan1 speed is unknown, defaulting to 1000 [ 332.820161][ T8769] lo speed is unknown, defaulting to 1000 [ 333.122128][ T8779] loop3: detected capacity change from 0 to 128 [ 333.540263][ T8779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 334.213691][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 334.253103][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 334.377627][ T8810] tipc: Enabled bearer , priority 0 [ 334.379271][ T8810] device syzkaller0 entered promiscuous mode [ 334.412101][ T8808] loop2: detected capacity change from 0 to 1024 [ 335.305891][ T8810] tipc: Resetting bearer [ 335.320315][ T8809] tipc: Resetting bearer [ 335.349230][ T8808] hfsplus: invalid btree flag [ 335.350134][ T8808] hfsplus: failed to load catalog file [ 335.525946][ T8817] loop0: detected capacity change from 0 to 128 [ 335.864080][ T8817] EXT4-fs (loop0): Test dummy encryption mode enabled [ 335.866172][ T8817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 335.867402][ T8817] System zones: 1-3, 19-19, 35-36 [ 335.868716][ T8817] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 335.873011][ T8809] tipc: Disabling bearer [ 336.898920][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 336.934290][ T8834] loop4: detected capacity change from 0 to 128 [ 337.026750][ T8834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 337.505396][ T8841] vxcan1 speed is unknown, defaulting to 1000 [ 337.611283][ T8841] lo speed is unknown, defaulting to 1000 [ 338.271629][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 340.024758][ T8864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 340.657551][ T4333] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 340.657807][ T4333] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 340.659989][ T4333] Bluetooth: hci2: Malformed LE Event: 0x02 [ 341.253954][ T8885] loop2: detected capacity change from 0 to 2048 [ 341.368882][ T8885] loop2: p1 < > [ 341.766842][ T3935] loop2: p1 < > [ 341.962589][ T8892] loop1: detected capacity change from 0 to 32768 [ 341.983168][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 342.010081][ T8892] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.913 (8892) [ 342.244678][ T8892] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 342.247085][ T8892] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 342.248545][ T8892] BTRFS info (device loop1): enabling disk space caching [ 342.249593][ T8892] BTRFS info (device loop1): force clearing of disk cache [ 342.250717][ T8892] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 342.252090][ T8892] BTRFS info (device loop1): use zstd compression, level 3 [ 342.253152][ T8892] BTRFS info (device loop1): disk space caching is enabled [ 342.286135][ T8896] vxcan1 speed is unknown, defaulting to 1000 [ 342.305646][ T8896] lo speed is unknown, defaulting to 1000 [ 342.617471][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 342.658787][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 342.719275][ T8892] BTRFS info (device loop1): enabling ssd optimizations [ 342.724684][ T8892] BTRFS info (device loop1): rebuilding free space tree [ 342.730125][ T8892] BTRFS info (device loop1): disabling free space tree [ 342.731690][ T8892] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 342.733317][ T8892] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 343.233201][ T8935] loop4: detected capacity change from 0 to 128 [ 343.558216][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 343.848702][ T4320] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 344.449973][ T8957] loop2: detected capacity change from 0 to 64 [ 344.455036][ T8951] vxcan1 speed is unknown, defaulting to 1000 [ 344.472572][ T8951] lo speed is unknown, defaulting to 1000 [ 344.946671][ T8958] loop0: detected capacity change from 0 to 4096 [ 345.550783][ T8968] tipc: Enabled bearer , priority 0 [ 345.552477][ T8968] device syzkaller0 entered promiscuous mode [ 345.668988][ T8968] tipc: Resetting bearer [ 345.674263][ T8961] tipc: Resetting bearer [ 346.494718][ T4333] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 346.495030][ T4333] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 346.496798][ T4333] Bluetooth: hci1: Malformed LE Event: 0x02 [ 346.794847][ T8961] tipc: Disabling bearer [ 346.943758][ T24] tipc: Node number set to 37417858 [ 346.948429][ T8993] vxcan1 speed is unknown, defaulting to 1000 [ 346.968440][ T8993] lo speed is unknown, defaulting to 1000 [ 347.425276][ T9008] batman_adv: batadv0: Adding interface: dummy0 [ 347.426410][ T9008] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.430802][ T9008] batman_adv: batadv0: Interface activated: dummy0 [ 349.008294][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 349.022810][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 349.890011][ T9046] loop3: detected capacity change from 0 to 64 [ 349.929803][ T9035] loop0: detected capacity change from 0 to 32768 [ 350.826452][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 350.827986][ T9055] netlink: 'syz.0.941': attribute type 10 has an invalid length. [ 350.829326][ T9055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.941'. [ 350.831365][ T9055] bridge0: port 3(veth1_vlan) entered blocking state [ 350.832444][ T9055] bridge0: port 3(veth1_vlan) entered disabled state [ 350.834040][ T9055] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 351.295843][ T9048] tipc: Enabled bearer , priority 0 [ 351.700758][ T9068] loop1: detected capacity change from 0 to 128 [ 351.703218][ T9048] device syzkaller0 entered promiscuous mode [ 351.711594][ T9048] tipc: Resetting bearer [ 351.722433][ T9043] tipc: Resetting bearer [ 351.804661][ T9068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 352.156688][ T9043] tipc: Disabling bearer [ 353.205360][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 353.411788][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 355.044610][ T9131] loop4: detected capacity change from 0 to 64 [ 355.077284][ T9130] tipc: Enabled bearer , priority 0 [ 355.100738][ T9130] device syzkaller0 entered promiscuous mode [ 355.106947][ T9130] tipc: Resetting bearer [ 355.109241][ T9125] tipc: Resetting bearer [ 355.794987][ T9129] loop3: detected capacity change from 0 to 32768 [ 355.897645][ T9125] tipc: Disabling bearer [ 356.315881][ T9143] read_mapping_page failed! [ 356.316962][ T9143] ialloc: diAlloc returned -5! [ 356.583728][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 356.617472][ T9142] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 356.618944][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.961'. [ 356.620825][ T9142] bridge0: port 3(veth1_vlan) entered blocking state [ 356.621932][ T9142] bridge0: port 3(veth1_vlan) entered disabled state [ 356.623869][ T9142] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 356.729473][ T9150] tipc: Started in network mode [ 356.806285][ T9152] loop1: detected capacity change from 0 to 32768 [ 356.815195][ T9150] tipc: Node identity 96ab44ce73e6, cluster identity 4711 [ 356.816444][ T9150] tipc: Enabled bearer , priority 0 [ 356.836795][ T9150] device syzkaller0 entered promiscuous mode [ 356.848518][ T9150] tipc: Resetting bearer [ 356.900198][ T9148] tipc: Resetting bearer [ 356.918920][ T9152] XFS (loop1): Mounting V5 Filesystem [ 356.936706][ T9152] XFS (loop1): Ending clean mount [ 356.940638][ T9152] XFS (loop1): Quotacheck needed: Please wait. [ 357.373729][ T9148] tipc: Disabling bearer [ 357.518586][ T9152] XFS (loop1): Quotacheck: Done. [ 357.564491][ T4333] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 357.567880][ T4333] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 357.570443][ T4333] Bluetooth: hci4: Malformed LE Event: 0x02 [ 358.245352][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 358.249002][ T9180] netlink: 'syz.1.965': attribute type 2 has an invalid length. [ 358.475725][ T4320] XFS (loop1): Unmounting Filesystem [ 359.225094][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 359.577514][ T9194] loop0: detected capacity change from 0 to 256 [ 359.579396][ T9194] exfat: Deprecated parameter 'utf8' [ 359.582625][ T9194] exFAT-fs (loop0): bogus number of FAT structure [ 359.590843][ T9194] exFAT-fs (loop0): failed to read boot sector [ 359.591849][ T9194] exFAT-fs (loop0): failed to recognize exfat type [ 360.090806][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 360.851461][ T9203] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 361.058587][ T9210] loop1: detected capacity change from 0 to 128 [ 361.473529][ T9210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 361.580703][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 361.610738][ T9225] tipc: Enabled bearer , priority 0 [ 361.612511][ T9225] device syzkaller0 entered promiscuous mode [ 361.621054][ T9225] tipc: Resetting bearer [ 361.623576][ T9224] tipc: Resetting bearer [ 361.916774][ T9224] tipc: Disabling bearer [ 362.895615][ T9235] loop0: detected capacity change from 0 to 64 [ 365.150259][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 365.748672][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 365.941823][ T9269] loop4: detected capacity change from 0 to 128 [ 366.049895][ T9269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 366.464931][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 366.577149][ T9282] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 366.578865][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 366.851964][ T9287] loop4: detected capacity change from 0 to 16 [ 366.861689][ T9287] erofs: (device loop4): mounted with root inode @ nid 36. [ 367.493369][ T9297] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 367.737908][ T9300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 368.096706][ T9304] loop0: detected capacity change from 0 to 164 [ 368.202783][ T9297] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 368.202908][ T9297] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 370.112766][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 370.114426][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 370.254389][ T9319] loop4: detected capacity change from 0 to 128 [ 370.648384][ T9319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 370.746160][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 371.309371][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 372.183531][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 372.385492][ T9350] loop2: detected capacity change from 0 to 256 [ 372.386995][ T9350] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 372.466835][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 372.938496][ T4322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.952798][ T4322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.955159][ T4322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.957697][ T4322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.959230][ T4322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 372.960650][ T4322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.130092][ T9357] vxcan1 speed is unknown, defaulting to 1000 [ 373.218789][ T9357] lo speed is unknown, defaulting to 1000 [ 373.700113][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 373.852140][ T9357] chnl_net:caif_netlink_parms(): no params data found [ 374.270033][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 374.290202][ T9379] loop4: detected capacity change from 0 to 128 [ 374.327497][ T9379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 374.428229][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.429605][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.431299][ T9357] device bridge_slave_0 entered promiscuous mode [ 374.434312][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.435568][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.438274][ T9357] device bridge_slave_1 entered promiscuous mode [ 374.692094][ T9357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.695476][ T9357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.720418][ T9357] team0: Port device team_slave_0 added [ 374.722690][ T9357] team0: Port device team_slave_1 added [ 374.730074][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.731466][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.740181][ T9357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.743050][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.744390][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.748972][ T9357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.812479][ T9357] device hsr_slave_0 entered promiscuous mode [ 374.857980][ T9357] device hsr_slave_1 entered promiscuous mode [ 374.951751][ T9357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.955345][ T9357] Cannot create hsr debugfs directory [ 375.342918][ T4333] Bluetooth: hci5: command 0x0409 tx timeout [ 375.367426][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 375.415835][ T9357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 377.266394][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.268444][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.280710][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 377.286426][ T9357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 377.592083][ T4333] Bluetooth: hci5: command 0x041b tx timeout [ 378.375744][ T9429] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 378.539961][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.546962][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.548908][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.581467][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.679967][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 378.707159][ T9420] tipc: Enabled bearer , priority 0 [ 378.714255][ T9420] device syzkaller0 entered promiscuous mode [ 378.722018][ T9357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 378.766780][ T9357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 379.511449][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 379.532492][ T9441] bridge0: port 3(geneve1) entered blocking state [ 379.534350][ T9441] bridge0: port 3(geneve1) entered disabled state [ 379.542157][ T9441] device geneve1 entered promiscuous mode [ 379.544542][ T9441] bridge0: port 3(geneve1) entered blocking state [ 379.545735][ T9441] bridge0: port 3(geneve1) entered forwarding state [ 379.785855][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 379.789365][ T9423] tipc: Resetting bearer [ 379.822374][ T9419] tipc: Resetting bearer [ 380.305199][ T9419] tipc: Disabling bearer [ 380.467645][ T14] tipc: Node number set to 934698172 [ 380.494882][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.501280][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.503080][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.510519][ T9357] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.513920][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.515755][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.518621][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.520871][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.530991][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.532870][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.534870][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.536558][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.537771][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.541049][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.553115][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.555239][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.559507][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.561285][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.563020][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.564687][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.566894][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.568650][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.570534][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.572257][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.576172][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 380.578986][ T9455] loop4: detected capacity change from 0 to 128 [ 380.977157][ T9459] overlayfs: failed to resolve './file0': -2 [ 381.172058][ T9460] loop1: detected capacity change from 0 to 128 [ 381.246985][ T9460] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.249169][ T9460] hpfs: filesystem error: improperly stopped [ 381.250196][ T9460] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 381.251702][ T9460] hpfs: You really don't want any checks? You are crazy... [ 381.253019][ T9460] hpfs: Code page index out of array [ 381.253918][ T9460] hpfs: code page support is disabled [ 381.258667][ T9460] hpfs: hpfs_map_4sectors(): unaligned read [ 381.261473][ T9460] hpfs: hpfs_map_4sectors(): unaligned read [ 381.262580][ T9460] hpfs: filesystem error: unable to find root dir [ 381.337124][ T9462] loop2: detected capacity change from 0 to 164 [ 381.442903][ T9464] loop0: detected capacity change from 0 to 1764 [ 381.445111][ T9464] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 381.465154][ T9455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 381.819922][ T9472] loop1: detected capacity change from 0 to 128 [ 381.836005][ T9472] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.840791][ T9472] hpfs: filesystem error: improperly stopped [ 381.845155][ T9472] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 381.850136][ T9472] hpfs: You really don't want any checks? You are crazy... [ 381.851829][ T9472] hpfs: hpfs_map_sector(): read error [ 381.857287][ T9472] hpfs: code page support is disabled [ 381.859631][ T9472] hpfs: hpfs_map_4sectors(): unaligned read [ 381.861989][ T9472] hpfs: hpfs_map_4sectors(): unaligned read [ 381.863026][ T9472] hpfs: filesystem error: unable to find root dir [ 381.866664][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.868627][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.872417][ T9357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.084785][ T4322] Bluetooth: hci5: command 0x0419 tx timeout [ 382.273638][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 382.982584][ T9492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.174018][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.176008][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.195531][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.197526][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.199731][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.204622][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.243612][ T9357] device veth0_vlan entered promiscuous mode [ 383.607087][ T9357] device veth1_vlan entered promiscuous mode [ 383.614954][ T9508] loop4: detected capacity change from 0 to 128 [ 383.620259][ T9508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 383.692568][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.694501][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.701011][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.708516][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.717384][ T9357] device veth0_macvtap entered promiscuous mode [ 383.720547][ T9357] device veth1_macvtap entered promiscuous mode [ 383.726361][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.728226][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.729943][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.731679][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.733413][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.735134][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.736825][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.738624][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.755056][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.758113][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.762858][ T9357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.769615][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.771424][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.785786][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.802617][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.818253][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.822852][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.824643][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.833200][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.843126][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.850368][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.858100][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.864487][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.868671][ T9357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.874405][ T9357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.880713][ T9357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.886201][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.888193][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.897045][ T9357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.902113][ T9357] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.908316][ T9357] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.912398][ T9357] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.007782][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.009336][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.010681][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.029096][ T4923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.030566][ T4923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.032065][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.802754][ T9525] vxcan1 speed is unknown, defaulting to 1000 [ 384.887571][ T9525] lo speed is unknown, defaulting to 1000 [ 384.980977][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 386.078306][ T9521] loop2: detected capacity change from 0 to 32768 [ 386.097104][ T9546] loop1: detected capacity change from 0 to 512 [ 386.389413][ T9546] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1047: inode has both inline data and extents flags [ 386.399708][ T9546] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1047: couldn't read orphan inode 15 (err -117) [ 386.410655][ T9546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 386.585689][ T9554] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 386.587288][ T9554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1042'. [ 386.589257][ T9554] bridge0: port 3(veth1_vlan) entered blocking state [ 386.590405][ T9554] bridge0: port 3(veth1_vlan) entered disabled state [ 386.591989][ T9554] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 387.329106][ T9563] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1050'. [ 387.332189][ T9563] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1050'. [ 387.334040][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 387.335914][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 387.757331][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 388.560821][ T9576] vxcan1 speed is unknown, defaulting to 1000 [ 388.583505][ T9576] lo speed is unknown, defaulting to 1000 [ 389.706931][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 391.007759][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 391.316260][ T9596] loop0: detected capacity change from 0 to 4096 [ 391.444790][ T9602] loop1: detected capacity change from 0 to 512 [ 391.449552][ T9602] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.919241][ T9602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.924587][ T9602] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 391.926324][ T9602] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 391.928055][ T9602] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 392.178635][ T9602] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 392.180051][ T9602] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 392.181260][ T9602] EXT4-fs (loop1): failed to initialize system zone (-117) [ 392.182507][ T9602] EXT4-fs (loop1): mount failed [ 392.217085][ T9607] loop5: detected capacity change from 0 to 512 [ 392.366717][ T9607] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 394.489767][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 394.505037][ T4312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 395.169307][ T9636] ceph: No mds server is up or the cluster is laggy [ 395.231393][ T9639] loop0: detected capacity change from 0 to 512 [ 395.243440][ T114] libceph: connect (1)[c::]:6789 error -101 [ 395.254360][ T9639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.254406][ T9639] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.263318][ T114] libceph: mon0 (1)[c::]:6789 connect error [ 395.501816][ T9639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 395.509341][ T9639] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1072: Allocating blocks 41-42 which overlap fs metadata [ 395.512587][ T9639] Quota error (device loop0): write_blk: dquota write failed [ 395.513949][ T9639] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 395.515619][ T9639] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1072: Allocating blocks 41-42 which overlap fs metadata [ 395.518279][ T9639] Quota error (device loop0): write_blk: dquota write failed [ 395.519482][ T9639] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 395.521211][ T9639] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1072: Failed to acquire dquot type 1 [ 395.524581][ T9639] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 395.526968][ T9639] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1072: corrupted inode contents [ 395.529760][ T9639] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #12: comm syz.0.1072: mark_inode_dirty error [ 395.532482][ T9639] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1072: corrupted inode contents [ 395.534816][ T9639] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.1072: mark_inode_dirty error [ 395.537263][ T9639] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1072: corrupted inode contents [ 395.539374][ T9639] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 395.540966][ T9639] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1072: corrupted inode contents [ 395.561298][ T9626] loop5: detected capacity change from 0 to 32768 [ 396.031402][ T9639] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.1072: mark_inode_dirty error [ 396.064239][ T9648] vxcan1 speed is unknown, defaulting to 1000 [ 396.140936][ T9648] lo speed is unknown, defaulting to 1000 [ 396.261298][ T9639] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 396.313786][ T9639] EXT4-fs (loop0): 1 truncate cleaned up [ 396.315363][ T9639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 396.434505][ T9635] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 396.929522][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 396.930993][ T9665] netlink: 'syz.5.1062': attribute type 10 has an invalid length. [ 396.932345][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1062'. [ 396.934269][ T9665] bridge0: port 3(veth1_vlan) entered blocking state [ 396.935394][ T9665] bridge0: port 3(veth1_vlan) entered disabled state [ 396.937210][ T9665] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 396.996087][ T9630] can0: slcan on ttyS3. [ 397.904260][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 398.330435][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 398.650131][ T9686] loop0: detected capacity change from 0 to 136 [ 399.064460][ T9627] can0 (unregistered): slcan off ttyS3. [ 399.066936][ T4312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.075831][ T9686] loop0: detected capacity change from 0 to 128 [ 399.084965][ T9686] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 399.105158][ T9701] loop2: detected capacity change from 0 to 128 [ 399.166992][ T4322] Bluetooth: unknown link type 41 [ 399.177959][ T9701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 400.027151][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 400.112431][ T9730] loop1: detected capacity change from 0 to 4096 [ 400.152385][ T9730] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 400.172161][ T9730] ntfs3: loop1: Failed to load $Extend. [ 401.537564][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 402.470494][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 402.622999][ T9772] vxcan1 speed is unknown, defaulting to 1000 [ 402.724863][ T9772] lo speed is unknown, defaulting to 1000 [ 403.729790][ T9783] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 404.282128][ T27] audit: type=1326 audit(397.862:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.282162][ T27] audit: type=1326 audit(397.862:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.283680][ T27] audit: type=1326 audit(397.862:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.283806][ T27] audit: type=1326 audit(397.862:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.284086][ T27] audit: type=1326 audit(397.862:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.284357][ T27] audit: type=1326 audit(397.862:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.284634][ T27] audit: type=1326 audit(397.862:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.284818][ T27] audit: type=1326 audit(397.862:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.285045][ T27] audit: type=1326 audit(397.862:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.285240][ T27] audit: type=1326 audit(397.862:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff959771a8 code=0x7ffc0000 [ 404.538032][ T9792] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 405.623797][ T9814] can0: slcan on ttyS3. [ 405.982468][ T9806] can0 (unregistered): slcan off ttyS3. [ 406.650288][ T9837] loop1: detected capacity change from 0 to 512 [ 406.673470][ T9837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 406.686000][ T9837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 406.686327][ T9837] EXT4-fs (loop1): orphan cleanup on readonly fs [ 406.692057][ T9837] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 406.692284][ T9837] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 406.692488][ T9837] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1099: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 406.692729][ T9837] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1099: couldn't read orphan inode 13 (err -117) [ 406.692872][ T9837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.719378][ T9837] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.1099: inode #15: comm syz.1.1099: iget: illegal inode # [ 406.723627][ T9837] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.1099: inode #15: comm syz.1.1099: iget: illegal inode # [ 407.312961][ T9870] vxcan1 speed is unknown, defaulting to 1000 [ 407.379275][ T9870] lo speed is unknown, defaulting to 1000 [ 407.650555][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 408.227986][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 409.415035][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 409.417371][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 409.657221][ T9896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.179943][ T9909] ALSA: mixer_oss: invalid OSS volume ':' [ 410.189541][ T9909] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 410.190841][ T9909] ALSA: mixer_oss: invalid OSS volume '5' [ 410.192651][ T9909] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 410.193954][ T9909] ALSA: mixer_oss: invalid OSS volume '6' [ 410.194939][ T9909] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 410.196173][ T9909] ALSA: mixer_oss: invalid OSS volume '7' [ 410.197081][ T9909] ALSA: mixer_oss: invalid OSS volume 'Iq zy?}' [ 410.198337][ T9909] ALSA: mixer_oss: invalid OSS volume 'P#dܟQ{i0Rڬk m5' [ 410.199771][ T9909] ALSA: mixer_oss: invalid OSS volume '2}f7ج:L' [ 410.201073][ T9909] ALSA: mixer_oss: invalid OSS volume '^@䇵_u@)PY 00V' [ 410.207442][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.209837][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.961800][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 411.291051][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 411.292664][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1114'. [ 411.529017][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 412.882168][ T9950] loop4: detected capacity change from 0 to 128 [ 413.053207][ T9950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 413.491265][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 413.884819][ T9967] vxcan1 speed is unknown, defaulting to 1000 [ 413.930985][ T9967] lo speed is unknown, defaulting to 1000 [ 414.151713][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 414.759528][ T9982] hub 8-0:1.0: USB hub found [ 414.760453][ T9982] hub 8-0:1.0: 8 ports detected [ 416.774151][T10007] loop4: detected capacity change from 0 to 128 [ 417.168090][T10007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 417.244900][T10011] loop0: detected capacity change from 0 to 8192 [ 417.273402][T10011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 417.275874][T10011] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 417.277854][T10011] REISERFS (device loop0): using ordered data mode [ 417.278995][T10011] reiserfs: using flush barriers [ 417.283390][T10011] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 417.589979][T10011] REISERFS (device loop0): checking transaction log (loop0) [ 417.602571][T10011] REISERFS (device loop0): Using r5 hash to sort names [ 417.616284][T10011] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 417.685820][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 418.526746][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 419.406596][T10037] vxcan1 speed is unknown, defaulting to 1000 [ 419.487536][T10037] lo speed is unknown, defaulting to 1000 [ 419.903128][T10049] loop0: detected capacity change from 0 to 128 [ 420.581302][T10049] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 422.840963][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 422.977096][T10083] loop0: detected capacity change from 0 to 128 [ 423.090007][T10085] loop1: detected capacity change from 0 to 32768 [ 423.109450][T10089] loop4: detected capacity change from 0 to 4096 [ 424.255267][T10089] ntfs: volume version 3.1. [ 424.338551][T10085] XFS (loop1): Mounting V5 Filesystem [ 424.351558][T10083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 424.755482][T10085] XFS (loop1): Ending clean mount [ 424.760181][T10085] XFS (loop1): Quotacheck needed: Please wait. [ 424.783048][T10085] XFS (loop1): Quotacheck: Done. [ 424.895607][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 425.040802][T10111] overlayfs: missing 'lowerdir' [ 425.518679][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 425.595688][ T4320] XFS (loop1): Unmounting Filesystem [ 426.291796][T10129] vxcan1 speed is unknown, defaulting to 1000 [ 426.375164][T10129] lo speed is unknown, defaulting to 1000 [ 426.665037][T10135] loop0: detected capacity change from 0 to 128 [ 426.714393][T10135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 428.006636][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 430.170592][T10170] loop5: detected capacity change from 0 to 128 [ 430.221464][T10170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 430.557180][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 431.143834][T10187] batman_adv: batadv0: Adding interface: dummy0 [ 431.144929][T10187] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.149395][T10187] batman_adv: batadv0: Interface activated: dummy0 [ 431.472873][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 432.403068][T10197] vxcan1 speed is unknown, defaulting to 1000 [ 432.421261][T10197] lo speed is unknown, defaulting to 1000 [ 432.430584][T10199] vxcan1 speed is unknown, defaulting to 1000 [ 432.461753][T10199] lo speed is unknown, defaulting to 1000 [ 432.575382][T10206] loop5: detected capacity change from 0 to 128 [ 432.594066][T10206] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 432.813039][T10216] netlink: 'syz.2.1172': attribute type 27 has an invalid length. [ 432.819106][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 432.823538][T10216] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 433.876583][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 435.170487][T10245] loop4: detected capacity change from 0 to 128 [ 435.234655][T10245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 435.910752][T10257] vxcan1 speed is unknown, defaulting to 1000 [ 435.997849][T10257] lo speed is unknown, defaulting to 1000 [ 436.147539][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 436.764941][T10276] loop0: detected capacity change from 0 to 128 [ 438.803906][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.805494][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.807652][T10293] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1188'. [ 438.848372][T10276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 439.383217][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 439.396386][T10305] loop5: detected capacity change from 0 to 128 [ 439.941064][T10305] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 440.492679][T10320] vxcan1 speed is unknown, defaulting to 1000 [ 440.576224][T10320] lo speed is unknown, defaulting to 1000 [ 440.776267][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 441.532285][T10331] vxcan1 speed is unknown, defaulting to 1000 [ 441.550821][T10331] lo speed is unknown, defaulting to 1000 [ 441.929696][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.930968][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.107776][T10358] loop4: detected capacity change from 0 to 128 [ 443.193709][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 443.196056][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.197377][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.548821][T10358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 444.294775][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 444.311708][T10374] loop0: detected capacity change from 0 to 128 [ 445.251437][T10374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 445.599682][T10390] vxcan1 speed is unknown, defaulting to 1000 [ 445.616003][T10390] lo speed is unknown, defaulting to 1000 [ 446.003231][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 446.530624][T10399] vxcan1 speed is unknown, defaulting to 1000 [ 446.634252][T10399] lo speed is unknown, defaulting to 1000 [ 447.082294][T10409] loop4: detected capacity change from 0 to 128 [ 447.982562][T10417] vxcan1 speed is unknown, defaulting to 1000 [ 447.999604][T10417] lo speed is unknown, defaulting to 1000 [ 448.322463][T10409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 448.470075][T10435] Injecting memory failure for pfn 0x148656 at process virtual address 0x20ffe000 [ 448.647778][T10425] fuse: Bad value for 'fd' [ 449.038129][T10435] Memory failure: 0x148656: recovery action for dirty LRU page: Recovered [ 449.039832][T10435] Injecting memory failure for pfn 0x148657 at process virtual address 0x20fff000 [ 449.042684][T10435] Memory failure: 0x148657: recovery action for dirty LRU page: Recovered [ 449.048832][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 450.236809][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 450.765091][T10467] vxcan1 speed is unknown, defaulting to 1000 [ 451.153242][T10467] lo speed is unknown, defaulting to 1000 [ 451.612394][T10472] vxcan1 speed is unknown, defaulting to 1000 [ 451.721229][T10472] lo speed is unknown, defaulting to 1000 [ 451.962258][T10478] loop1: detected capacity change from 0 to 64 [ 454.013022][T10493] loop4: detected capacity change from 0 to 128 [ 454.757806][T10493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 456.178004][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 456.279684][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 457.110403][T10532] loop4: detected capacity change from 0 to 512 [ 457.145668][T10530] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 457.146885][T10530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 457.148465][T10530] vhci_hcd vhci_hcd.0: Device attached [ 457.305897][T10532] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1239: inode has both inline data and extents flags [ 457.308926][T10532] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1239: couldn't read orphan inode 15 (err -117) [ 457.339366][T10532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 457.776750][T10533] vhci_hcd: connection closed [ 457.781671][ T4410] vhci_hcd: stop threads [ 457.783561][ T4410] vhci_hcd: release socket [ 457.784700][ T4410] vhci_hcd: disconnect device [ 458.286740][T10543] vxcan1 speed is unknown, defaulting to 1000 [ 458.394269][T10543] lo speed is unknown, defaulting to 1000 [ 458.718095][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 460.362701][T10567] vxcan1 speed is unknown, defaulting to 1000 [ 460.668614][T10567] lo speed is unknown, defaulting to 1000 [ 462.139321][T10591] vxcan1 speed is unknown, defaulting to 1000 [ 462.157623][T10591] lo speed is unknown, defaulting to 1000 [ 463.315115][T10609] vxcan1 speed is unknown, defaulting to 1000 [ 463.422277][T10609] lo speed is unknown, defaulting to 1000 [ 464.937692][T10632] vxcan1 speed is unknown, defaulting to 1000 [ 465.059288][T10632] lo speed is unknown, defaulting to 1000 [ 465.388935][T10637] loop4: detected capacity change from 0 to 32768 [ 465.411014][T10637] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1266 (10637) [ 465.422108][T10637] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 465.423907][T10637] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 465.425516][T10637] BTRFS info (device loop4): enabling disk space caching [ 465.426651][T10637] BTRFS info (device loop4): force clearing of disk cache [ 465.427876][T10637] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 465.429560][T10637] BTRFS info (device loop4): use zstd compression, level 3 [ 465.430749][T10637] BTRFS info (device loop4): disk space caching is enabled [ 465.614437][T10637] BTRFS info (device loop4): enabling ssd optimizations [ 465.617324][T10637] BTRFS info (device loop4): rebuilding free space tree [ 465.624554][T10637] BTRFS info (device loop4): disabling free space tree [ 465.625809][T10637] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 465.627411][T10637] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 466.888793][T10681] vxcan1 speed is unknown, defaulting to 1000 [ 466.906997][T10681] lo speed is unknown, defaulting to 1000 [ 467.071068][T10679] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 467.072209][T10679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 467.074182][T10679] vhci_hcd vhci_hcd.0: Device attached [ 467.309888][T10683] vhci_hcd: connection closed [ 467.314717][ T9604] vhci_hcd: stop threads [ 467.316329][ T9604] vhci_hcd: release socket [ 467.317232][ T9604] vhci_hcd: disconnect device [ 467.632050][ T4331] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 467.634337][T10689] loop5: detected capacity change from 0 to 128 [ 467.739131][T10689] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 468.672672][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 469.493257][T10722] vxcan1 speed is unknown, defaulting to 1000 [ 469.576738][T10722] lo speed is unknown, defaulting to 1000 [ 470.440670][T10743] batman_adv: batadv0: Adding interface: dummy0 [ 470.441932][T10743] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.650423][T10743] batman_adv: batadv0: Interface activated: dummy0 [ 471.669745][T10760] vxcan1 speed is unknown, defaulting to 1000 [ 471.732980][T10760] lo speed is unknown, defaulting to 1000 [ 472.912455][T10774] vxcan1 speed is unknown, defaulting to 1000 [ 472.931484][T10774] lo speed is unknown, defaulting to 1000 [ 473.182250][T10791] loop5: detected capacity change from 0 to 16 [ 473.215519][T10791] erofs: (device loop5): mounted with root inode @ nid 36. [ 473.828372][T10799] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 473.967688][T10799] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 473.969881][T10799] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 474.134219][T10802] loop4: detected capacity change from 0 to 128 [ 474.196040][T10802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 475.163491][T10822] overlayfs: failed to resolve './file0': -2 [ 476.515647][T10823] loop0: detected capacity change from 0 to 128 [ 476.517813][T10823] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 476.519904][T10823] hpfs: filesystem error: improperly stopped [ 476.521062][T10823] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 476.522267][T10823] hpfs: You really don't want any checks? You are crazy... [ 476.525108][T10823] hpfs: Code page index out of array [ 476.525979][T10823] hpfs: code page support is disabled [ 476.527199][T10823] hpfs: hpfs_map_4sectors(): unaligned read [ 476.528925][T10823] hpfs: hpfs_map_4sectors(): unaligned read [ 476.529877][T10823] hpfs: filesystem error: unable to find root dir [ 476.540654][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 476.573882][T10809] bridge0: port 3(geneve1) entered blocking state [ 476.577300][T10809] bridge0: port 3(geneve1) entered disabled state [ 476.588219][T10809] device geneve1 entered promiscuous mode [ 476.610664][T10809] bridge0: port 3(geneve1) entered blocking state [ 476.611882][T10809] bridge0: port 3(geneve1) entered forwarding state [ 476.984936][T10841] loop5: detected capacity change from 0 to 32768 [ 477.008953][T10841] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1303 (10841) [ 477.016153][T10841] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 477.017934][T10841] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 477.019450][T10841] BTRFS info (device loop5): enabling disk space caching [ 477.020640][T10841] BTRFS info (device loop5): force clearing of disk cache [ 477.021874][T10841] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 477.023598][T10841] BTRFS info (device loop5): use zstd compression, level 3 [ 477.024744][T10841] BTRFS info (device loop5): disk space caching is enabled [ 477.498072][T10841] BTRFS info (device loop5): enabling ssd optimizations [ 477.499961][T10841] BTRFS info (device loop5): rebuilding free space tree [ 477.506214][T10841] BTRFS info (device loop5): disabling free space tree [ 477.507473][T10841] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 477.509156][T10841] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 478.903529][T10884] vxcan1 speed is unknown, defaulting to 1000 [ 478.993521][T10884] lo speed is unknown, defaulting to 1000 [ 479.495627][T10898] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 479.882051][T10897] vxcan1 speed is unknown, defaulting to 1000 [ 479.972951][T10897] lo speed is unknown, defaulting to 1000 [ 480.342945][ T9357] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 481.019356][T10909] overlayfs: failed to resolve './file0': -2 [ 481.406503][T10890] loop4: detected capacity change from 0 to 128 [ 481.539466][T10918] vxcan1 speed is unknown, defaulting to 1000 [ 481.711688][T10918] lo speed is unknown, defaulting to 1000 [ 481.818277][T10890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 482.901924][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 482.933276][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 483.058597][T10938] loop5: detected capacity change from 0 to 256 [ 483.331893][T10938] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 483.393750][ T4314] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 484.281014][T10955] loop4: detected capacity change from 0 to 256 [ 484.285574][T10953] can0: slcan on ttyS3. [ 484.348592][T10955] exfat: Deprecated parameter 'utf8' [ 484.367783][T10955] exFAT-fs (loop4): bogus number of FAT structure [ 484.369791][T10955] exFAT-fs (loop4): failed to read boot sector [ 484.375428][T10955] exFAT-fs (loop4): failed to recognize exfat type [ 484.418227][T10965] loop0: detected capacity change from 0 to 256 [ 484.419734][T10965] exfat: Deprecated parameter 'namecase' [ 484.486415][T10965] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 484.556628][T10944] can0 (unregistered): slcan off ttyS3. [ 485.177746][T10973] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 485.729608][T10978] loop5: detected capacity change from 0 to 512 [ 485.757694][T10978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.759210][T10978] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 485.876374][T10976] ceph: No mds server is up or the cluster is laggy [ 485.902205][T10978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 485.924334][ T22] libceph: connect (1)[c::]:6789 error -101 [ 485.925465][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 486.874871][ T4366] libceph: connect (1)[c::]:6789 error -101 [ 486.881873][ T4366] libceph: mon0 (1)[c::]:6789 connect error [ 487.160210][T10993] vxcan1 speed is unknown, defaulting to 1000 [ 487.189808][T10993] lo speed is unknown, defaulting to 1000 [ 487.209228][T10978] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3861: comm syz.5.1325: Allocating blocks 41-42 which overlap fs metadata [ 487.210888][T10978] __quota_error: 11 callbacks suppressed [ 487.210897][T10978] Quota error (device loop5): write_blk: dquota write failed [ 487.210924][T10978] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 487.210966][T10978] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3861: comm syz.5.1325: Allocating blocks 41-42 which overlap fs metadata [ 487.211225][T10978] Quota error (device loop5): write_blk: dquota write failed [ 487.211263][T10978] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 487.211279][T10978] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1325: Failed to acquire dquot type 1 [ 487.211729][T10978] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 487.211813][T10978] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1325: corrupted inode contents [ 487.212140][T10978] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #12: comm syz.5.1325: mark_inode_dirty error [ 487.223304][T10978] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1325: corrupted inode contents [ 487.224473][T10978] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.1325: mark_inode_dirty error [ 487.225752][T10978] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1325: corrupted inode contents [ 487.226460][T10978] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 487.226834][T10978] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1325: corrupted inode contents [ 487.282050][T10978] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.1325: mark_inode_dirty error [ 487.284266][T10978] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 487.286024][T10978] EXT4-fs (loop5): 1 truncate cleaned up [ 487.286949][T10978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 487.311080][T10975] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 487.370544][T11007] loop1: detected capacity change from 0 to 128 [ 487.778803][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 487.785234][T11007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 488.275985][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 488.419324][T11040] loop1: detected capacity change from 0 to 256 [ 488.424166][T11040] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 488.998001][T11048] loop5: detected capacity change from 0 to 32768 [ 489.004876][T11048] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1338 (11048) [ 489.011473][T11048] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 489.013389][T11048] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 489.014980][T11048] BTRFS info (device loop5): enabling disk space caching [ 489.016245][T11048] BTRFS info (device loop5): force clearing of disk cache [ 489.017365][T11048] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 489.018967][T11048] BTRFS info (device loop5): use zstd compression, level 3 [ 489.020164][T11048] BTRFS info (device loop5): disk space caching is enabled [ 489.048108][T11048] BTRFS info (device loop5): enabling ssd optimizations [ 489.049972][T11048] BTRFS info (device loop5): rebuilding free space tree [ 489.057030][T11048] BTRFS info (device loop5): disabling free space tree [ 489.058224][T11048] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 489.060042][T11048] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 489.789575][T11071] loop0: detected capacity change from 0 to 32768 [ 489.795771][T11071] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1340 (11071) [ 489.818325][T11075] loop1: detected capacity change from 0 to 256 [ 489.819819][T11075] exfat: Deprecated parameter 'utf8' [ 489.824589][T11075] exFAT-fs (loop1): bogus number of FAT structure [ 489.825731][T11075] exFAT-fs (loop1): failed to read boot sector [ 489.826784][T11075] exFAT-fs (loop1): failed to recognize exfat type [ 489.843585][T11074] loop4: detected capacity change from 0 to 32768 [ 489.871298][T11074] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1339 (11074) [ 489.896374][ T9357] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 489.916879][ T4312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 489.938513][ T4314] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.457318][T11078] vxcan1 speed is unknown, defaulting to 1000 [ 490.775425][T11084] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 490.949124][T11078] lo speed is unknown, defaulting to 1000 [ 490.971580][ T4313] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.756933][T11108] vxcan1 speed is unknown, defaulting to 1000 [ 492.789512][T11108] lo speed is unknown, defaulting to 1000 [ 492.876693][T11102] loop1: detected capacity change from 0 to 4096 [ 494.051462][T11128] loop4: detected capacity change from 0 to 512 [ 494.053564][T11128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 494.054898][T11128] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 494.067503][T11125] ceph: No mds server is up or the cluster is laggy [ 494.068875][ T4511] libceph: connect (1)[c::]:6789 error -101 [ 494.069808][ T4511] libceph: mon0 (1)[c::]:6789 connect error [ 494.090504][T11128] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 494.162822][T11128] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1348: Allocating blocks 41-42 which overlap fs metadata [ 494.166335][T11128] Quota error (device loop4): write_blk: dquota write failed [ 494.167567][T11128] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 494.169053][T11128] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1348: Allocating blocks 41-42 which overlap fs metadata [ 494.177186][T11128] Quota error (device loop4): write_blk: dquota write failed [ 494.178427][T11128] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 494.180087][T11128] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1348: Failed to acquire dquot type 1 [ 494.245342][T11128] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 494.307937][T11128] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1348: corrupted inode contents [ 494.656731][T11128] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #12: comm syz.4.1348: mark_inode_dirty error [ 495.209218][T11128] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1348: corrupted inode contents [ 495.237856][T11128] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.1348: mark_inode_dirty error [ 495.240141][T11128] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1348: corrupted inode contents [ 495.243334][T11128] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 495.245264][T11128] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1348: corrupted inode contents [ 495.247470][T11128] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.1348: mark_inode_dirty error [ 495.249367][T11128] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 495.251214][T11128] EXT4-fs (loop4): 1 truncate cleaned up [ 495.252174][T11128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 495.345878][T11123] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 495.399297][T11147] loop5: detected capacity change from 0 to 32768 [ 495.706606][T11147] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1354 (11147) [ 495.780026][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 495.804140][T11151] loop0: detected capacity change from 0 to 32768 [ 495.806977][T11151] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1355 (11151) [ 495.827185][T11147] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 495.828976][T11147] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 495.830579][T11147] BTRFS info (device loop5): enabling disk space caching [ 495.831787][T11147] BTRFS info (device loop5): force clearing of disk cache [ 495.832910][T11147] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 495.834304][T11147] BTRFS info (device loop5): use zstd compression, level 3 [ 495.835495][T11147] BTRFS info (device loop5): disk space caching is enabled [ 495.890695][T11153] loop1: detected capacity change from 0 to 32768 [ 495.892585][T11153] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1357 (11153) [ 495.895142][ T4314] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.005264][ T4588] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.544413][T11147] BTRFS info (device loop5): enabling ssd optimizations [ 496.547270][T11147] BTRFS info (device loop5): rebuilding free space tree [ 496.552444][T11147] BTRFS info (device loop5): disabling free space tree [ 496.554470][T11147] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 496.556020][T11147] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 496.997125][T11193] vxcan1 speed is unknown, defaulting to 1000 [ 497.071746][T11193] lo speed is unknown, defaulting to 1000 [ 497.375518][ T9357] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 498.446530][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1364'. [ 500.396962][T11248] loop4: detected capacity change from 0 to 32768 [ 500.418616][T11248] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1375 (11248) [ 500.446592][T11248] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 500.448191][T11248] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 500.449624][T11248] BTRFS info (device loop4): enabling disk space caching [ 500.450777][T11248] BTRFS info (device loop4): force clearing of disk cache [ 500.451934][T11248] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 500.453512][T11248] BTRFS info (device loop4): use zstd compression, level 3 [ 500.454742][T11248] BTRFS info (device loop4): disk space caching is enabled [ 500.475471][T11248] BTRFS info (device loop4): enabling ssd optimizations [ 500.478719][T11248] BTRFS info (device loop4): rebuilding free space tree [ 500.494829][T11248] BTRFS info (device loop4): disabling free space tree [ 500.496152][T11248] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 500.497879][T11248] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 500.527903][T11274] device ip6erspan0 entered promiscuous mode [ 501.120196][T11283] vxcan1 speed is unknown, defaulting to 1000 [ 501.203144][T11283] lo speed is unknown, defaulting to 1000 [ 501.485375][ T4331] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 501.758657][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 502.121678][ T4314] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (4314) [ 502.889830][ T27] audit: type=1326 audit(490.038:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 502.895367][ T27] audit: type=1326 audit(490.038:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 502.899233][ T27] audit: type=1326 audit(490.038:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.014087][ T27] audit: type=1326 audit(490.038:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.022382][ T27] audit: type=1326 audit(490.038:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.046212][ T27] audit: type=1326 audit(490.038:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.060189][ T27] audit: type=1326 audit(490.038:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.074093][ T27] audit: type=1326 audit(490.038:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.089311][ T27] audit: type=1326 audit(490.038:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.125534][ T27] audit: type=1326 audit(490.038:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x7ffc0000 [ 503.869875][T11321] loop5: detected capacity change from 0 to 512 [ 503.973129][T11321] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 504.325561][ T4333] Bluetooth: hci5: command 0x0406 tx timeout [ 504.426638][T11342] vxcan1 speed is unknown, defaulting to 1000 [ 504.546518][T11342] lo speed is unknown, defaulting to 1000 [ 505.412242][T11353] vxcan1 speed is unknown, defaulting to 1000 [ 505.436472][T11353] lo speed is unknown, defaulting to 1000 [ 507.022914][ T9357] EXT4-fs (loop5): unmounting filesystem. [ 507.575762][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.577558][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.197653][T11387] Injecting memory failure for pfn 0x148865 at process virtual address 0x20ffe000 [ 508.273798][T11387] Memory failure: 0x148865: recovery action for dirty LRU page: Recovered [ 508.275214][T11387] Injecting memory failure for pfn 0x148866 at process virtual address 0x20fff000 [ 508.276591][T11387] Memory failure: 0x148866: recovery action for dirty LRU page: Recovered [ 509.193732][T11403] loop5: detected capacity change from 0 to 256 [ 510.813095][T11405] vxcan1 speed is unknown, defaulting to 1000 [ 510.927704][T11405] lo speed is unknown, defaulting to 1000 [ 511.049422][T11403] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 511.212149][T11407] loop0: detected capacity change from 0 to 128 [ 511.227411][T11409] loop4: detected capacity change from 0 to 64 [ 511.341574][T11407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 512.195161][T11419] vxcan1 speed is unknown, defaulting to 1000 [ 512.214612][T11419] lo speed is unknown, defaulting to 1000 [ 512.269103][T11424] loop1: detected capacity change from 0 to 512 [ 512.270574][T11424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.286574][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 512.317193][T11424] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 512.428477][T11435] loop0: detected capacity change from 0 to 128 [ 512.480337][T11424] EXT4-fs (loop1): 1 truncate cleaned up [ 512.480431][T11435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 512.481534][T11424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 513.179513][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 513.382981][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 515.187644][ T28] INFO: task jfsCommit:95 blocked for more than 143 seconds. [ 515.267393][ T28] Not tainted syzkaller #0 [ 515.268292][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.270766][ T28] task:jfsCommit state:D stack:0 pid:95 ppid:2 flags:0x00000008 [ 515.277486][ T28] Call trace: [ 515.278151][ T28] __switch_to+0x2f4/0x550 [ 515.287199][ T28] __schedule+0xdd0/0x1b0c [ 515.288056][ T28] schedule+0xc4/0x170 [ 515.288816][ T28] io_schedule+0x84/0x154 [ 515.296584][ T28] __lock_metapage+0x180/0x418 [ 515.297541][ T28] __get_metapage+0x900/0xfac [ 515.298473][ T28] diIAGRead+0xe4/0x14c [ 515.299256][ T28] diFree+0x6f4/0x1e00 [ 515.311770][ T28] jfs_evict_inode+0x2c4/0x3e4 [ 515.312701][ T28] evict+0x3e0/0x828 [ 515.313517][ T28] iput+0x754/0x7e4 [ 515.317815][ T28] txUpdateMap+0x674/0x794 [ 515.318644][ T28] jfs_lazycommit+0x354/0x908 [ 515.332320][ T28] kthread+0x250/0x2d8 [ 515.333466][ T28] ret_from_fork+0x10/0x20 [ 515.341884][T11464] vxcan1 speed is unknown, defaulting to 1000 [ 515.388031][T11464] lo speed is unknown, defaulting to 1000 [ 515.490036][ T28] INFO: task syz-executor:4321 blocked for more than 143 seconds. [ 515.491367][ T28] Not tainted syzkaller #0 [ 515.492132][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to send rpc [ 515.531596][ T28] task:syz-executor state:D stack:0 pid:4321 ppid:1 flags:0x00000009 [ 515.533218][ T28] Call trace: [ 515.533885][ T28] __switch_to+0x2f4/0x550 [ 515.534614][ T28] __schedule+0xdd0/0x1b0c fd=3 want=1088 sent=0 n=-1 (errno 32: Broken pipe) [ 515.545744][ T28] schedule+0xc4/0x170 [ 515.546489][ T28] jfs_flush_journal+0x57c/0xd14 [ 515.547402][ T28] jfs_sync_fs+0x80/0xac [ 515.548201][ T28] sync_filesystem+0x1a0/0x218 [ 515.548964][ T28] generic_shutdown_super+0x70/0x324 [ 515.549789][ T28] kill_block_super+0x70/0xdc [ 515.550549][ T28] deactivate_locked_super+0xac/0x120 [ 515.551409][ T28] deactivate_super+0xe4/0x104 [ 515.552144][ T28] cleanup_mnt+0x390/0x418 [ 515.552863][ T28] __cleanup_mnt+0x20/0x30 [ 515.553591][ T28] task_work_run+0x1ec/0x278 [ 515.554329][ T28] do_notify_resume+0x1fa0/0x2aa4 [ 515.555169][ T28] el0_svc+0x98/0x128 [ 515.555878][ T28] el0t_64_sync_handler+0x84/0xf0 [ 515.592427][ T28] el0t_64_sync+0x18c/0x190 [ 515.593440][ T28] [ 515.593440][ T28] Showing all locks held in the system: [ 515.594739][ T28] 1 lock held by rcu_tasks_kthre/12: [ 515.595656][ T28] #0: ffff8000153f7c30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 515.597946][ T28] 1 lock held by rcu_tasks_trace/13: [ 515.598806][ T28] #0: ffff8000153f8450 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 515.608704][ T28] 1 lock held by khungtaskd/28: [ 515.609656][ T28] #0: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 515.611474][ T28] 2 locks held by jfsCommit/95: [ 515.612186][ T28] #0: ffff0000f7a88920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x244/0x1e00 [ 515.613756][ T28] #1: ffff0000dfa7af78 (&jfs_ip->rdwrlock/1){++++}-{3:3}, at: diFree+0x258/0x1e00 [ 515.615333][ T28] 2 locks held by getty/4080: [ 515.616298][ T28] #0: ffff0000d675c098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 515.617817][ T28] #1: ffff80002090e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xfa0 [ 515.619321][ T28] 1 lock held by syz-executor/4315: [ 515.620102][ T28] 1 lock held by syz-executor/4317: [ 515.620979][ T28] 1 lock held by syz-executor/4319: [ 515.621797][ T28] 1 lock held by syz-executor/4321: [ 515.622717][ T28] #0: ffff0000fc5bc0e0 (&type->s_umount_key#86){+.+.}-{3:3}, at: deactivate_super+0xdc/0x104 [ 515.624376][ T28] 2 locks held by syz-executor/4327: [ 515.625259][ T28] 2 locks held by syz-executor/4331: [ 515.626136][ T28] 4 locks held by kworker/u4:12/4654: [ 515.626979][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 515.628640][ T28] #1: ffff800021aa7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 515.630337][ T28] #2: ffff8000178840d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x134/0xa84 [ 515.637743][ T28] #3: ffff0000c0023148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x78/0x180 [ 515.639597][ T28] [ 515.640006][ T28] ============================================= [ 515.640006][ T28] [ 515.641331][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 515.642417][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 515.643758][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.645558][ T28] Call trace: [ 515.646102][ T28] dump_backtrace+0x1c0/0x1ec [ 515.646915][ T28] show_stack+0x2c/0x3c [ 515.647645][ T28] __dump_stack+0x30/0x40 [ 515.648446][ T28] dump_stack_lvl+0xf4/0x15c [ 515.649283][ T28] dump_stack+0x1c/0x5c [ 515.650113][ T28] panic+0x2f8/0x7ac [ 515.650779][ T28] hung_task_panic+0x0/0x2c [ 515.651579][ T28] kthread+0x250/0x2d8 [ 515.652350][ T28] ret_from_fork+0x10/0x20 [ 515.653151][ T28] SMP: stopping secondary CPUs [ 515.653947][ T28] Kernel Offset: disabled [ 515.654722][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 515.655792][ T28] Memory Limit: none [ 515.949995][ T28] Rebooting in 86400 seconds..