last executing test programs: 23m58.706203628s ago: executing program 4 (id=40): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) sendfile(0xffffffffffffffff, r0, 0x0, 0x558410e9) 23m57.492315938s ago: executing program 4 (id=44): io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x3ff3, 0x80400}) mkdirat(0xffffffffffffff9c, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) sched_rr_get_interval(r0, &(0x7f0000000040)) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x3, 0x0, 0xfffffff8, 0x804, {0x0, 0x1, 0x3, 0x66, 0xf4b, 0x1, 0x4, 0x8, 0x8, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 23m54.384736987s ago: executing program 4 (id=47): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioprio_set$pid(0x2, r1, 0x6000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010001000000", @ANYRES32], 0x4c}}, 0x0) futex(0x0, 0xd, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) socket(0x10, 0x3, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0xc2010, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRES16=0x0]) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000540)={0x50, 0x0, r7, {0x7, 0x1f, 0xffff7fff, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x80}}, 0x50) 23m52.921842811s ago: executing program 4 (id=51): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m49.28303547s ago: executing program 4 (id=58): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000340)={0x847, 0x7}, &(0x7f0000000480)) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(0x0, 0x7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0xc000810) 23m47.155161713s ago: executing program 4 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018000000fcff0000000000000a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000200)}, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0xadbb8e70733d0d8c) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 23m31.890965812s ago: executing program 32 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018000000fcff0000000000000a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000200)}, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0xadbb8e70733d0d8c) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 18m13.684887608s ago: executing program 5 (id=639): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) shutdown(r1, 0x1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25010000000c000800277bb24e000000000c00030000000000000000000c00020000000000000000800c0008009bcc00000000000008000100000000001c0007800c0001800800", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="0c00050024010000000000004fe626b8a339ff18727b876b62e856769f9b2689d07c434bb05e1913d39367e3eb57b1b3a7fb3f8f6e41684524560ff8449b5cf38fdf5d3310e6c48f903251f8ee14b27f147224b032f64f231c82d0dafe35cfcf9f90202fe334205bd2db12fb3045eae7977e66c60739471cda02089b5284ad22075e61a203f47054eba6a22ccfcdda72271443c63d9104445f080cd7514381fedca1e40ee27646cb6630a94dde6002edec541b6ecfc44916e62266d566dfcc9de8b1356c"], 0x74}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4040815) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 18m12.680842715s ago: executing program 5 (id=640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x2, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) 18m10.869494458s ago: executing program 5 (id=643): io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x3ff3, 0x80400}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000040)) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x3, 0x0, 0xfffffff8, 0x804, {0x0, 0x1, 0x3, 0x66, 0xf4b, 0x1, 0x4, 0x8, 0x8, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 18m9.801866499s ago: executing program 5 (id=645): io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x3ff3, 0x80400}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) sched_rr_get_interval(r1, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x3, 0x0, 0xfffffff8, 0x804, {0x0, 0x1, 0x3, 0x66, 0xf4b, 0x1, 0x4, 0x8, 0x8, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18m9.422083991s ago: executing program 5 (id=647): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r1, 0x0, 0x0, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x5, 0x12c00, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x4, 0x1, 0x5, @void, @value, @value=r1}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2043, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18m6.875131236s ago: executing program 5 (id=651): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=""/1, 0x1, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) wait4(0x0, &(0x7f0000000400), 0x1000000, &(0x7f00000005c0)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) 17m51.636557056s ago: executing program 33 (id=651): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=""/1, 0x1, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) wait4(0x0, &(0x7f0000000400), 0x1000000, &(0x7f00000005c0)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) 17m8.606081701s ago: executing program 0 (id=750): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffff9c, 0x0, &(0x7f00000003c0)={0x100100, 0x8, 0x7d}, 0x18) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x3c8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x37c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x290, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x248, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="66923dca343e7c28f9a57ce723713a91e185f20b873b17564a9ae45651d22094dea6daf6450541639a346351489fd749feaaeafdb50f5c37513fc3cf0ff37738ef211385cedc300cf288b6d264048ed3bf53aef2c0bf6776658f25fbb80fb752ac690c897bdfe3f17371ec9a9b03147961b2bdf6acdeb13910cd4f0d744eab8a0ae94620a69e8e30ccb4b7fdfe7aa26ba484a8a85876e930b7f092f5780192731f112837099e43", @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') 17m5.873349017s ago: executing program 0 (id=758): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 17m3.481092183s ago: executing program 0 (id=762): syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x5, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd8, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x6, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7f, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x9, 0x1, {0x7, 0x25, 0x1, 0x81, 0x3, 0x6a00}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 16m59.779148275s ago: executing program 0 (id=768): syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xd7c}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c9bcc21663c592}, 0x8000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2002000, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x48000) socket$packet(0x11, 0x3, 0x300) 16m56.216008238s ago: executing program 0 (id=774): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r1, 0x0, 0x0, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x5, 0x12c00, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x4, 0x1, 0x5, @void, @value, @value=r1}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2043, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 16m53.480645924s ago: executing program 0 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) 16m37.630001198s ago: executing program 34 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) 1m47.676465696s ago: executing program 6 (id=3028): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000780)=0x1, 0x4) 1m47.562780593s ago: executing program 6 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009000000000006000200feffff7f08000a0004000100080017"], 0x3c}}, 0x0) 1m47.385361274s ago: executing program 6 (id=3030): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@cswp={0x58, 0x114, 0x7, {{0xfff, 0x8}, 0x0, 0x0, 0x9, 0xce56, 0x8, 0x539e45bb, 0x24}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xc}], 0x70}, 0x40) 1m47.168351936s ago: executing program 6 (id=3031): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 1m46.390730152s ago: executing program 6 (id=3032): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x580, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m41.632488729s ago: executing program 6 (id=3037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8000000, 0x4) 1m41.136175218s ago: executing program 35 (id=3037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8000000, 0x4) 3.760412001s ago: executing program 8 (id=3833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 3.692404655s ago: executing program 8 (id=3834): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) socket(0x40000000015, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x22020400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x7c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.42043571s ago: executing program 7 (id=3836): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000340)={[{@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xee, 0x2aa, &(0x7f0000001580)="$eJzs3T9oJFUYAPBvZncvF285Tm0E8Q+IiAbCWQiCjTYKB3IcIoIKJyJWciecd9jtWmlhobVKKpsgdkZL0SLYKLZRUySNhcHCIKLFyOzshnGzYePu7CTs/n6wzJuZb+a9hfnevE2YNwEsrAsR8WRENCJiJSJaEZGUA+4vPhf6q2vLm1cjsuy535NeXLFeGBx3LiK6EfF4RHOw79bGSzt/bj3z0Ps3Ww9+uvHicl3fL+LsQWlvZ/vZ/U8uv/vFpUdvpf1t7f6y/D2qlIzY1kwi7phFZadE0hwb8leWZbW0haNdefvzn/K8vzMiHujlfyvSfsp+cOPMN6145ONyfPla/vC3H++uu71AtbKsld8DuxmwcNLeGDhJVyOiKKfp6moxhv+5kcQb12+8tfL69ZvXXhvZfTRq77CAaST5b/P8B/jTXy19eW4o/39tFPl/LI/NuKXATLQjtp+/sv5LXt53F4fFcE+xyPN/5ZXOwyH/YeFMkf9nZ9UmoB7t3l/4Cu7/sFiM/2EOTJi7Q/n/TsWtAk6xcv4vnXRjgFoZ/8Mcaw0K3ZG75T/Mh/cmGMCX8/+HkceP2Og/fzAXhu7/NT6PC5y0cv4DAIslWxr7iPDu+X4oMF9Ouv8BAAAAAAAAAAAAAAAAAAAOW1vevDr41FXndx9F7D0VEc3/1l/MPNjovY94MOngbX8kediBtDhsKi/fN+UJpvRZxU9fX/6f80Ce3622/mPqDArf3zubCoZeZnHk3HadaxHdPPhis3n4+k/611+Mu9L65z9zaMftY9rZenVMQMWSofUnXvi2snN3Jjjmn/XKqp/Ipa2Ir/P+5+Ko/i+Nu3rL0f1PuzzF8oTe/HvKEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCbfwMAAP//rvtnHA==") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.08648898s ago: executing program 7 (id=3840): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1}}}}}}, 0x0) 2.723960641s ago: executing program 7 (id=3842): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @mcast1, 0x10}, 0x1c, 0x0}}], 0x1, 0x4001c00) 2.723223782s ago: executing program 8 (id=3843): r0 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x4c880}, 0x8000) 2.464781546s ago: executing program 8 (id=3847): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 2.336043484s ago: executing program 7 (id=3848): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) fcntl$setpipe(r0, 0x407, 0x10) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.335749134s ago: executing program 1 (id=3849): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="8403000000020101000000000000000007000004100002800c00028005000100010000001c0002800c000280050001003a0000000c000280050001000100000060000180"], 0x38c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x40090) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 2.162034724s ago: executing program 1 (id=3850): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000340)={[{@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xee, 0x2aa, &(0x7f0000001580)="$eJzs3T9oJFUYAPBvZncvF285Tm0E8Q+IiAbCWQiCjTYKB3IcIoIKJyJWciecd9jtWmlhobVKKpsgdkZL0SLYKLZRUySNhcHCIKLFyOzshnGzYePu7CTs/n6wzJuZb+a9hfnevE2YNwEsrAsR8WRENCJiJSJaEZGUA+4vPhf6q2vLm1cjsuy535NeXLFeGBx3LiK6EfF4RHOw79bGSzt/bj3z0Ps3Ww9+uvHicl3fL+LsQWlvZ/vZ/U8uv/vFpUdvpf1t7f6y/D2qlIzY1kwi7phFZadE0hwb8leWZbW0haNdefvzn/K8vzMiHujlfyvSfsp+cOPMN6145ONyfPla/vC3H++uu71AtbKsld8DuxmwcNLeGDhJVyOiKKfp6moxhv+5kcQb12+8tfL69ZvXXhvZfTRq77CAaST5b/P8B/jTXy19eW4o/39tFPl/LI/NuKXATLQjtp+/sv5LXt53F4fFcE+xyPN/5ZXOwyH/YeFMkf9nZ9UmoB7t3l/4Cu7/sFiM/2EOTJi7Q/n/TsWtAk6xcv4vnXRjgFoZ/8Mcaw0K3ZG75T/Mh/cmGMCX8/+HkceP2Og/fzAXhu7/NT6PC5y0cv4DAIslWxr7iPDu+X4oMF9Ouv8BAAAAAAAAAAAAAAAAAAAOW1vevDr41FXndx9F7D0VEc3/1l/MPNjovY94MOngbX8kediBtDhsKi/fN+UJpvRZxU9fX/6f80Ce3622/mPqDArf3zubCoZeZnHk3HadaxHdPPhis3n4+k/611+Mu9L65z9zaMftY9rZenVMQMWSofUnXvi2snN3Jjjmn/XKqp/Ipa2Ir/P+5+Ko/i+Nu3rL0f1PuzzF8oTe/HvKEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCbfwMAAP//rvtnHA==") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.105643467s ago: executing program 3 (id=3851): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, 0x0, 0x0) 1.892550669s ago: executing program 1 (id=3852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000200)=0x1) 1.820137734s ago: executing program 3 (id=3853): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1}}}}}}, 0x0) 1.758657187s ago: executing program 3 (id=3854): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) socket(0x40000000015, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x22020400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x7c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.460472175s ago: executing program 2 (id=3856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 1.335440752s ago: executing program 7 (id=3857): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x8, 0x0, 0xc}, 0x10) 1.232467488s ago: executing program 3 (id=3858): r0 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x4c880}, 0x8000) 1.232122538s ago: executing program 2 (id=3859): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000013c0)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x17, 0x0, 0x0, 0x0, "0d9dd6f72613082bdc99f6cd9068ec441931e6a38f0cc9c7eb199f968513db2e4eb68f619d21138ce7071e07992d515955044067418e89248e79290d74fb799b"}, 0xe}, 0x1, 0x0, 0x0, 0x240c0054}, 0x0) 1.231922628s ago: executing program 1 (id=3860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}, 0x1, 0x0, 0x0, 0x24000004}, 0xc0) 1.231763968s ago: executing program 8 (id=3861): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="8403000000020101000000000000000007000004100002800c00028005000100010000001c0002800c000280050001003a0000000c000280050001000100000060000180"], 0x38c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x40090) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 1.000739461s ago: executing program 2 (id=3862): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000340)={[{@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) 981.892123ms ago: executing program 7 (id=3863): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@delalloc}, {@noload}, {@mb_optimize_scan}, {@nodiscard}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) openat(r0, &(0x7f0000000000)='./file1\x00', 0x400140, 0x30) 912.545957ms ago: executing program 1 (id=3864): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, 0x0, 0x0) 909.703377ms ago: executing program 8 (id=3865): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000cc0)="a10e", 0x2}], 0x1}, 0x800) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="06", 0x1}], 0x1}}], 0x1, 0x44) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x975, 0x4) 897.728277ms ago: executing program 3 (id=3866): add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) 690.49737ms ago: executing program 3 (id=3867): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) fcntl$setpipe(r0, 0x407, 0x10) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 545.823478ms ago: executing program 1 (id=3868): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) socket(0x40000000015, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x22020400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x7c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 545.261588ms ago: executing program 2 (id=3869): write(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x94, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "754b9297d2f7d6ead1a8c625a6027c3da33ee7e67c5272bc672d774f827eecc0", "662cace2cd9bd233ecc708562880f2ed3e7915338888a348911f971c4561b852748b7796a4206c69face32b5aee53bea", "f239aecfba4b4ca42238c094d7c4c11f8264d679933e923937f3dbea", {"6bf7792a72a9a6bbc653880fadc8e4f6", "74281f809ca35bb7b5e2ab813678f21e"}}}}}}}, 0x0) 321.441721ms ago: executing program 2 (id=3870): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10001) shutdown(r0, 0x0) 0s ago: executing program 2 (id=3871): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): xt4_do_update_inode:5272: inode #12: comm syz.7.3063: corrupted inode contents [ 1448.531224][T17077] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.3063: mark_inode_dirty error [ 1448.585661][T17077] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.3063: corrupted inode contents [ 1448.652979][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.678673][T17077] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1448.698508][T17077] EXT4-fs error (device loop7): ext4_do_update_inode:5272: inode #12: comm syz.7.3063: corrupted inode contents [ 1448.734446][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.742707][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.764898][T17077] EXT4-fs error (device loop7): ext4_truncate:4318: inode #12: comm syz.7.3063: mark_inode_dirty error [ 1448.777567][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1448.789222][T17077] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1448.817721][T17091] netlink: 'syz.3.3066': attribute type 9 has an invalid length. [ 1448.845097][T17091] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 1448.876474][T17077] EXT4-fs (loop7): 1 truncate cleaned up [ 1448.881036][T17091] netlink: 303 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1448.891715][T17077] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1448.934721][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.070550][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1449.184472][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.247883][T17015] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1449.313156][T17015] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1449.385237][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.434697][T17015] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1449.489723][T17015] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1449.761066][T17118] loop1: detected capacity change from 0 to 164 [ 1449.911130][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 1449.930001][T17015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.958545][T17121] loop7: detected capacity change from 0 to 512 [ 1449.975355][T17121] EXT4-fs: Ignoring removed orlov option [ 1450.064574][T17121] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1450.078306][ T11] tipc: Left network mode [ 1450.088661][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1450.115059][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1450.153129][T17121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1450.153491][T17015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.229946][T17015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1450.261255][T17121] EXT4-fs error (device loop7): ext4_iget_extra_inode:4756: inode #15: comm syz.7.3074: corrupted in-inode xattr [ 1450.301445][T17121] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3074: couldn't read orphan inode 15 (err -117) [ 1450.336584][T17015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.357002][T17121] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1450.406331][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1450.435359][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1450.504561][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.511751][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.549513][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1450.589397][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1450.625182][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.632413][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.656568][T17135] netlink: 'syz.1.3078': attribute type 9 has an invalid length. [ 1450.674318][T17135] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3078'. [ 1450.685174][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1450.695138][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1450.710313][T17138] loop3: detected capacity change from 0 to 128 [ 1450.718170][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1450.755383][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1450.800336][T17138] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1450.823929][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1450.875099][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1450.915185][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1450.929500][T17113] loop2: detected capacity change from 0 to 1024 [ 1450.945913][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1450.971759][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1451.032364][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1451.061757][T17113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1451.093084][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1451.435994][ T26] audit: type=1800 audit(1770580881.028:4): pid=17113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3072" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1451.506949][ T26] audit: type=1800 audit(1770580881.058:5): pid=17136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3072" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1451.630991][T17161] loop7: detected capacity change from 0 to 164 [ 1451.719823][T17161] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1451.740765][T17165] loop3: detected capacity change from 0 to 256 [ 1451.761254][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1451.885849][ T26] audit: type=1800 audit(1770580881.478:6): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3086" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 1451.985373][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 1452.153222][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1452.175116][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1452.213858][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1452.436865][T17181] loop2: detected capacity change from 0 to 512 [ 1452.497663][T17181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1452.760934][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1452.829449][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1452.871970][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1453.059634][T17015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.186994][T17223] netlink: 'syz.2.3103': attribute type 9 has an invalid length. [ 1454.214254][T17223] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1454.462491][T17231] loop3: detected capacity change from 0 to 128 [ 1454.529822][T17231] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1454.887934][T11074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1454.916517][T11074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1454.949587][T17241] loop7: detected capacity change from 0 to 164 [ 1454.975056][T17245] loop3: detected capacity change from 0 to 128 [ 1455.019834][T17245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1455.076603][T17241] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1455.127684][T17245] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1455.380516][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 1455.436451][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1455.481515][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1455.529386][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1455.546032][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1455.568577][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1455.890822][T17266] loop3: detected capacity change from 0 to 512 [ 1455.903932][T17264] loop7: detected capacity change from 0 to 512 [ 1455.984187][T17264] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1456.032727][T17266] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3115: bad orphan inode 11862016 [ 1456.047789][T17015] device veth0_vlan entered promiscuous mode [ 1456.108405][T17266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1456.116620][T17264] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1456.143379][T17264] EXT4-fs (loop7): Remounting filesystem read-only [ 1456.156604][T17266] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.200669][T17264] Quota error (device loop7): write_blk: dquota write failed [ 1456.214391][ T11] device dummy0 left promiscuous mode [ 1456.254208][T17264] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1456.263506][T17264] Quota error (device loop7): write_blk: dquota write failed [ 1456.295121][T17266] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 1456.297268][ T11] device team0 left promiscuous mode [ 1456.344374][T17264] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1456.370447][ T11] device team_slave_0 left promiscuous mode [ 1456.418399][T17264] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.3117: Failed to acquire dquot type 1 [ 1456.436749][ T11] device team_slave_1 left promiscuous mode [ 1456.487904][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1456.499205][T17264] EXT4-fs (loop7): Remounting filesystem read-only [ 1456.510470][ T11] device hsr_slave_0 left promiscuous mode [ 1456.564368][T17264] EXT4-fs (loop7): 1 truncate cleaned up [ 1456.570118][T17264] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1456.598123][ T11] device hsr_slave_1 left promiscuous mode [ 1456.608700][T17280] loop2: detected capacity change from 0 to 512 [ 1456.617842][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.657209][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.668640][T17284] loop3: detected capacity change from 0 to 128 [ 1456.705532][T17280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1456.735972][T17284] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1456.746200][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.764057][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.774864][T17280] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.817351][T17280] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #12: comm syz.2.3118: corrupted xattr block 6 [ 1456.839900][ T11] device bond0 left promiscuous mode [ 1456.858298][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1456.880550][ T11] device bond_slave_0 left promiscuous mode [ 1456.891953][ T11] device bond_slave_1 left promiscuous mode [ 1456.912658][ T11] bridge0: port 3(bond0) entered disabled state [ 1456.965545][ T11] device bridge_slave_1 left promiscuous mode [ 1456.992233][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.036342][ T11] device bridge_slave_0 left promiscuous mode [ 1457.047781][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1457.063239][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.140891][ T11] device hsr_slave_0 left promiscuous mode [ 1457.155742][ T11] device hsr_slave_1 left promiscuous mode [ 1457.171667][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.191552][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.245368][ T11] device bridge_slave_1 left promiscuous mode [ 1457.261813][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.282362][ T11] device bridge_slave_0 left promiscuous mode [ 1457.292515][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.336781][ T11] device hsr_slave_0 left promiscuous mode [ 1457.355347][ T11] device hsr_slave_1 left promiscuous mode [ 1457.362019][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.401485][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.425632][ T11] device bridge_slave_1 left promiscuous mode [ 1457.431912][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.456281][ T11] device bridge_slave_0 left promiscuous mode [ 1457.462578][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.605695][ T11] device veth1_macvtap left promiscuous mode [ 1457.611888][ T11] device veth0_macvtap left promiscuous mode [ 1457.621783][ T11] device veth1_vlan left promiscuous mode [ 1457.634060][ T11] device veth0_vlan left promiscuous mode [ 1457.746863][T17308] loop1: detected capacity change from 0 to 512 [ 1457.767005][T17308] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1457.811348][T17308] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1457.855809][T17308] EXT4-fs (loop1): Remounting filesystem read-only [ 1457.862547][T17308] Quota error (device loop1): write_blk: dquota write failed [ 1457.872586][T17308] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1457.882020][T17308] Quota error (device loop1): write_blk: dquota write failed [ 1457.889658][T17308] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1457.899738][T17308] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3131: Failed to acquire dquot type 1 [ 1457.911560][T17308] EXT4-fs (loop1): Remounting filesystem read-only [ 1457.921086][T17308] EXT4-fs (loop1): 1 truncate cleaned up [ 1457.927418][T17308] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1458.037755][T17312] loop3: detected capacity change from 0 to 128 [ 1458.076503][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1458.083133][T17312] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1458.343808][ T11] bond8 (unregistering): Released all slaves [ 1458.443881][ T11] bond7 (unregistering): Released all slaves [ 1458.513943][ T11] bond6 (unregistering): (slave bridge6): Releasing active interface [ 1458.568616][ T11] bond6 (unregistering): Released all slaves [ 1458.630966][ T11] bond5 (unregistering): (slave bridge5): Releasing active interface [ 1458.687772][ T11] bond5 (unregistering): Released all slaves [ 1458.765431][ T11] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1458.848738][ T11] bond4 (unregistering): Released all slaves [ 1458.925393][ T11] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1458.989188][ T11] bond3 (unregistering): Released all slaves [ 1459.073909][T17332] loop3: detected capacity change from 0 to 512 [ 1459.088539][T17332] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1459.106407][ T11] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1459.165816][T17332] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1459.188959][ T11] bond2 (unregistering): Released all slaves [ 1459.205933][T17332] EXT4-fs (loop3): Remounting filesystem read-only [ 1459.212822][T17332] Quota error (device loop3): write_blk: dquota write failed [ 1459.235762][T17332] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1459.261201][T17332] Quota error (device loop3): write_blk: dquota write failed [ 1459.269816][T17332] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1459.280174][T17332] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3142: Failed to acquire dquot type 1 [ 1459.292862][T17332] EXT4-fs (loop3): Remounting filesystem read-only [ 1459.293416][ T11] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1459.308237][T17332] EXT4-fs (loop3): 1 truncate cleaned up [ 1459.313960][T17332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1459.413690][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1459.446828][ T11] bond1 (unregistering): Released all slaves [ 1459.503291][T17338] loop3: detected capacity change from 0 to 128 [ 1459.532372][T17338] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1459.912566][T17344] EXT4-fs: Ignoring removed orlov option [ 1459.959492][T17344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1460.005004][T17344] ext4: Unknown parameter 'subj_role' [ 1461.080880][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1461.214356][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1461.307710][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.436587][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.757974][T17372] set_capacity_and_notify: 1 callbacks suppressed [ 1461.757992][T17372] loop3: detected capacity change from 0 to 2048 [ 1461.860815][T17372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1461.957224][T17372] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1461.977630][T17372] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 1461.992354][T17372] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1461.992354][T17372] [ 1462.003589][T17372] EXT4-fs (loop3): Total free blocks count 0 [ 1462.010168][T17372] EXT4-fs (loop3): Free/Dirty block details [ 1462.021433][T17372] EXT4-fs (loop3): free_blocks=2415919504 [ 1462.028168][T17372] EXT4-fs (loop3): dirty_blocks=16 [ 1462.035628][T17372] EXT4-fs (loop3): Block reservation details [ 1462.041732][T17372] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1462.175292][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1462.356839][ T11] bond0 (unregistering): Released all slaves [ 1462.520974][T17384] loop1: detected capacity change from 0 to 128 [ 1462.539565][T17384] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1462.783651][T17386] loop1: detected capacity change from 0 to 512 [ 1462.798705][T17386] EXT4-fs: Ignoring removed nobh option [ 1462.834451][T17386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1462.854545][T17386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1462.882775][T17386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1462.948694][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1463.011393][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1463.039959][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1463.139743][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.275619][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.691892][ T11] bond0 (unregistering): Released all slaves [ 1464.089555][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1464.179755][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1464.283947][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.383281][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.776752][ T11] bond0 (unregistering): Released all slaves [ 1464.901943][T17015] device veth1_vlan entered promiscuous mode [ 1464.940892][T17382] netlink: 'syz.3.3162': attribute type 12 has an invalid length. [ 1464.956739][T17382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1465.127904][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1465.155330][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1465.207907][T17015] device veth0_macvtap entered promiscuous mode [ 1465.243854][T17015] device veth1_macvtap entered promiscuous mode [ 1465.318630][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.360437][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.367929][T17413] netlink: 'syz.2.3175': attribute type 9 has an invalid length. [ 1465.391263][T17413] netlink: 'syz.2.3175': attribute type 1 has an invalid length. [ 1465.409762][T17413] netlink: 303 bytes leftover after parsing attributes in process `syz.2.3175'. [ 1465.424744][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.472649][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.514217][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.534370][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.554150][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.601603][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.665176][T17015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.673335][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1465.715037][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1465.739320][T17422] loop7: detected capacity change from 0 to 512 [ 1465.745952][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1465.822412][T17428] loop2: detected capacity change from 0 to 512 [ 1465.836382][T17422] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1465.846313][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1465.874245][T17428] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1465.939689][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.984411][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.011224][T17435] loop1: detected capacity change from 0 to 512 [ 1466.031540][T17428] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1466.047311][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.083417][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.099438][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.121760][T17435] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1466.135082][T17428] EXT4-fs (loop2): Remounting filesystem read-only [ 1466.141809][T17428] Quota error (device loop2): write_blk: dquota write failed [ 1466.168913][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.204921][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.215859][T17428] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1466.269534][T17435] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.3182: Allocating blocks 41-42 which overlap fs metadata [ 1466.291814][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.304446][T17428] Quota error (device loop2): write_blk: dquota write failed [ 1466.311979][T17428] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1466.322254][T17428] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3183: Failed to acquire dquot type 1 [ 1466.345260][T17428] EXT4-fs (loop2): Remounting filesystem read-only [ 1466.384789][T17428] EXT4-fs (loop2): 1 truncate cleaned up [ 1466.390528][T17428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1466.402844][T17015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.410833][T17435] Quota error (device loop1): write_blk: dquota write failed [ 1466.431759][T17435] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1466.443637][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1466.452185][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1466.505302][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1466.530728][T17435] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.3182: Allocating blocks 41-42 which overlap fs metadata [ 1466.592652][T17015] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.619051][T17015] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.664524][T17015] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.666149][T17435] Quota error (device loop1): write_blk: dquota write failed [ 1466.722228][T17015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.740717][T17435] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1466.771509][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1466.812740][T17435] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3182: Failed to acquire dquot type 1 [ 1466.880140][T17435] EXT4-fs error (device loop1): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1466.970872][T17435] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.3182: corrupted inode contents [ 1467.013988][T17435] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #12: comm syz.1.3182: mark_inode_dirty error [ 1467.047915][ T6708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.088908][ T6708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.112923][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.124782][T17435] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.3182: corrupted inode contents [ 1467.143192][ T26] audit: type=1326 audit(1770580896.728:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17453 comm="syz.7.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4199aeb9 code=0x7fc00000 [ 1467.218008][T17435] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.3182: mark_inode_dirty error [ 1467.267817][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.293606][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.312694][T17435] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.3182: corrupted inode contents [ 1467.365398][T17435] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1467.386817][T17435] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.3182: corrupted inode contents [ 1467.410002][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1467.418094][T17435] EXT4-fs error (device loop1): ext4_truncate:4318: inode #12: comm syz.1.3182: mark_inode_dirty error [ 1467.456453][T17435] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1467.508691][T17435] EXT4-fs (loop1): 1 truncate cleaned up [ 1467.519588][T17435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1467.715050][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1467.824937][T17467] loop8: detected capacity change from 0 to 128 [ 1467.864179][ T26] audit: type=1326 audit(1770580897.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17453 comm="syz.7.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f4199aeb9 code=0x7fc00000 [ 1467.980468][T17467] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1468.005598][T17467] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.109766][T17467] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.3038: Logical block already allocated [ 1468.154920][T17467] EXT4-fs (loop8): Remounting filesystem read-only [ 1468.441274][T17480] loop3: detected capacity change from 0 to 512 [ 1468.453251][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1468.532942][T17483] netlink: 'syz.1.3198': attribute type 9 has an invalid length. [ 1468.541073][T17480] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1468.614367][T17483] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 1468.628552][T17485] loop2: detected capacity change from 0 to 512 [ 1468.651374][T17480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1468.670908][T17483] netlink: 303 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1468.730390][T17480] EXT4-fs (loop3): Remounting filesystem read-only [ 1468.760920][T17485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1468.820962][T17480] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3197: Failed to acquire dquot type 1 [ 1468.877797][T17485] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.904601][T17480] EXT4-fs (loop3): Remounting filesystem read-only [ 1468.943901][T17494] loop7: detected capacity change from 0 to 1024 [ 1468.963720][T17480] EXT4-fs (loop3): 1 truncate cleaned up [ 1468.985905][T17494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1469.014223][T17480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1469.106248][T17494] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1469.123298][T17499] loop1: detected capacity change from 0 to 512 [ 1469.202963][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1469.215304][T17499] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1469.258571][T17494] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1469.272700][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1469.303238][T17501] loop8: detected capacity change from 0 to 512 [ 1469.438488][T17501] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1469.531275][T17501] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.3203: Allocating blocks 41-42 which overlap fs metadata [ 1469.595248][T17501] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.3203: Allocating blocks 41-42 which overlap fs metadata [ 1469.642814][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1469.726312][T17501] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3203: Failed to acquire dquot type 1 [ 1469.807467][T17501] EXT4-fs error (device loop8): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1469.964246][T17501] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.3203: corrupted inode contents [ 1470.092942][T17501] EXT4-fs error (device loop8): ext4_dirty_inode:6137: inode #12: comm syz.8.3203: mark_inode_dirty error [ 1470.149718][T17528] capability: warning: `syz.7.3212' uses 32-bit capabilities (legacy support in use) [ 1470.159717][T17501] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.3203: corrupted inode contents [ 1470.180068][T17526] device netdevsim0 entered promiscuous mode [ 1470.212690][T17501] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.3203: mark_inode_dirty error [ 1470.233710][T17528] program syz.7.3212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.275136][T17501] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.3203: corrupted inode contents [ 1470.330133][T17501] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1470.365366][T17501] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.3203: corrupted inode contents [ 1470.389641][T17535] loop1: detected capacity change from 0 to 512 [ 1470.403023][T17501] EXT4-fs error (device loop8): ext4_truncate:4318: inode #12: comm syz.8.3203: mark_inode_dirty error [ 1470.436934][T17501] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1470.472407][T17501] EXT4-fs (loop8): 1 truncate cleaned up [ 1470.479475][T17535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1470.491317][T17501] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1470.510302][T17535] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.591003][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1470.773651][T17545] loop7: detected capacity change from 0 to 512 [ 1470.819794][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1470.837398][T17545] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1470.910741][T17545] EXT4-fs (loop7): 1 truncate cleaned up [ 1470.954044][T17545] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1471.047928][T17551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'. [ 1471.155839][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1471.173905][T17555] loop1: detected capacity change from 0 to 164 [ 1471.620607][T17570] loop2: detected capacity change from 0 to 512 [ 1471.822771][T17570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1471.918248][T17570] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1472.212000][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1472.408580][T17590] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3233: bg 0: block 393: padding at end of block bitmap is not set [ 1472.496501][T17590] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 1472.546523][T17590] EXT4-fs (loop3): 2 truncates cleaned up [ 1472.575779][T17590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1472.775990][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1472.812114][T17610] netlink: 'syz.7.3240': attribute type 1 has an invalid length. [ 1472.894332][T17610] netlink: 'syz.7.3240': attribute type 2 has an invalid length. [ 1473.542739][T17635] netlink: 'syz.1.3250': attribute type 9 has an invalid length. [ 1473.581338][T17635] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3250'. [ 1473.895874][T17648] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3251'. [ 1473.910546][T17648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3251'. [ 1473.982856][T17649] set_capacity_and_notify: 2 callbacks suppressed [ 1473.982894][T17649] loop2: detected capacity change from 0 to 128 [ 1474.002024][T17649] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1474.758370][T16995] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1474.817011][T17647] option changes via remount are deprecated (pid=17640 comm=syz.2.3251) [ 1474.826077][T17647] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1475.026935][T17647] infiniband !yz!: set active [ 1475.033000][T17647] infiniband !yz!: added team_slave_0 [ 1475.064799][T17647] infiniband !yz!: Couldn't open port 1 [ 1475.117012][T17647] RDS/IB: !yz!: added [ 1475.122188][T17647] smc: adding ib device !yz! with port count 1 [ 1475.129424][T17647] smc: ib device !yz! port 1 has pnetid [ 1476.489904][T17694] loop3: detected capacity change from 0 to 512 [ 1476.565716][T17694] EXT4-fs: Ignoring removed orlov option [ 1476.600551][T17694] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1476.621048][T17696] loop7: detected capacity change from 0 to 164 [ 1476.670547][T17694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1476.747740][T17694] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.3270: corrupted in-inode xattr [ 1476.807979][T17694] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3270: couldn't read orphan inode 15 (err -117) [ 1476.829905][T17704] loop1: detected capacity change from 0 to 2048 [ 1476.866859][T17694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1476.930402][T17704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1477.122248][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1477.304008][T17719] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1477.475684][T17721] netlink: 'syz.7.3278': attribute type 39 has an invalid length. [ 1477.486957][T17719] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1477.577626][T17719] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1477.577626][T17719] [ 1477.599141][T17726] loop2: detected capacity change from 0 to 1024 [ 1477.674394][T17719] EXT4-fs (loop1): Total free blocks count 0 [ 1477.740612][T17726] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.3271: lblock 2 mapped to illegal pblock 2 (length 1) [ 1477.768257][T17719] EXT4-fs (loop1): Free/Dirty block details [ 1477.791579][T17719] EXT4-fs (loop1): free_blocks=2415919504 [ 1477.834180][T17726] __quota_error: 79 callbacks suppressed [ 1477.834200][T17726] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1477.864379][T17719] EXT4-fs (loop1): dirty_blocks=704 [ 1477.869682][T17719] EXT4-fs (loop1): Block reservation details [ 1477.894241][T17726] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.3271: lblock 0 mapped to illegal pblock 48 (length 1) [ 1477.959365][T17726] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1477.978665][T17726] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3271: Failed to acquire dquot type 0 [ 1477.991233][T17719] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 1478.051491][T17726] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1478.097676][T17726] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.3271: mark_inode_dirty error [ 1478.159224][T17726] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1478.247872][T17726] EXT4-fs (loop2): 1 orphan inode deleted [ 1478.281543][T17726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1478.291927][T17738] loop8: detected capacity change from 0 to 512 [ 1478.314598][ T4787] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 1478.392309][ T4787] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1478.439746][ T4787] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 0 [ 1478.558515][T17738] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1478.574389][T17738] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.720330][T17738] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1478.789429][T17738] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 64512 [ 1478.860357][T17738] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3282: Failed to acquire dquot type 0 [ 1478.980108][T17752] loop3: detected capacity change from 0 to 512 [ 1479.016749][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1479.024479][ T7481] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 1479.057128][T17752] EXT4-fs: Ignoring removed orlov option [ 1479.067199][ T7481] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1479.091574][ T7481] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:24: Failed to release dquot type 0 [ 1479.128409][T16692] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1479.150655][T17703] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1479.163856][T17752] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1479.183065][T16692] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1479.204374][T16692] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1479.235557][T17752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1479.278396][T17752] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.3287: corrupted in-inode xattr [ 1479.364325][T17752] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3287: couldn't read orphan inode 15 (err -117) [ 1479.387147][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1479.431460][T17752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1479.692043][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1480.250355][T17781] loop3: detected capacity change from 0 to 512 [ 1480.289619][T17783] loop1: detected capacity change from 0 to 512 [ 1480.352522][T17781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1480.467783][T17783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1480.524346][T17783] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1480.583073][T17783] EXT4-fs warning (device loop1): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 1480.630464][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1480.810586][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1480.993263][T17803] loop2: detected capacity change from 0 to 512 [ 1481.117849][T17803] EXT4-fs: Ignoring removed orlov option [ 1481.225649][T17803] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1481.346262][T17813] can0: slcan on ptm0. [ 1481.484508][T17803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1481.827427][T17803] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.3305: corrupted in-inode xattr [ 1482.130143][T17803] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3305: couldn't read orphan inode 15 (err -117) [ 1482.194427][T17808] can0 (unregistered): slcan off ptm0. [ 1482.267630][T17803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1482.332445][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1482.471059][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1482.936769][T17837] loop8: detected capacity change from 0 to 164 [ 1483.083742][T17837] Unsupported NM flag settings (240) [ 1483.314576][T17852] loop1: detected capacity change from 0 to 512 [ 1483.338762][T17852] EXT4-fs: Ignoring removed orlov option [ 1483.395112][T17852] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1483.418034][T17852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1483.544167][T17852] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #15: comm syz.1.3322: corrupted in-inode xattr [ 1483.584604][T17852] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3322: couldn't read orphan inode 15 (err -117) [ 1483.656608][T17852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1483.865541][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1483.950740][T17868] loop3: detected capacity change from 0 to 128 [ 1484.010496][T17868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1484.049312][T17868] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1484.266409][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1484.472062][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.479724][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.551232][T17887] loop3: detected capacity change from 0 to 128 [ 1485.015255][T17899] loop3: detected capacity change from 0 to 512 [ 1485.182763][T17899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1485.203538][T17903] loop1: detected capacity change from 0 to 128 [ 1485.217126][T17899] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.364429][T17899] EXT4-fs: Ignoring removed orlov option [ 1485.370408][T17899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1485.424684][T17899] EXT4-fs (loop3): can't enable nombcache during remount [ 1485.568187][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1485.836580][T17928] 9pnet_fd: Insufficient options for proto=fd [ 1486.547567][T17951] netlink: 'syz.7.3359': attribute type 10 has an invalid length. [ 1486.566171][T17951] device dummy0 entered promiscuous mode [ 1486.574267][T17951] team0: Port device dummy0 added [ 1486.599290][T17951] netlink: 'syz.7.3359': attribute type 10 has an invalid length. [ 1486.636847][T17949] loop3: detected capacity change from 0 to 128 [ 1486.662479][T17955] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1486.680701][T17951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1486.750521][T17951] device dummy0 left promiscuous mode [ 1486.759002][T17951] team0: Failed to send options change via netlink (err -105) [ 1486.766812][T17951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1486.776861][T17951] team0: Port device dummy0 removed [ 1486.785351][T17951] device dummy0 entered promiscuous mode [ 1486.791795][T17951] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1486.894136][T17961] loop1: detected capacity change from 0 to 128 [ 1487.091336][T17968] loop2: detected capacity change from 0 to 512 [ 1487.132873][T17961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1487.166049][T17972] 9pnet_fd: Insufficient options for proto=fd [ 1487.206985][T17968] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1487.210017][T17961] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1487.309766][T17968] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.3363: Allocating blocks 41-42 which overlap fs metadata [ 1487.454775][T17968] Quota error (device loop2): write_blk: dquota write failed [ 1487.462232][T17968] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1487.537361][T17968] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1487.568322][T17968] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3363: Failed to acquire dquot type 1 [ 1487.639771][T17968] EXT4-fs error (device loop2): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1487.703266][T17968] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3363: corrupted inode contents [ 1487.782524][T17968] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #12: comm syz.2.3363: mark_inode_dirty error [ 1487.852454][T17968] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3363: corrupted inode contents [ 1487.884981][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1487.894606][T17968] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.3363: mark_inode_dirty error [ 1487.944651][T17968] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3363: corrupted inode contents [ 1488.021620][T17968] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1488.091460][T17968] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3363: corrupted inode contents [ 1488.122265][T17968] EXT4-fs error (device loop2): ext4_truncate:4318: inode #12: comm syz.2.3363: mark_inode_dirty error [ 1488.160142][T17968] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1488.193740][T17968] EXT4-fs (loop2): 1 truncate cleaned up [ 1488.223190][T17968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1488.516700][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1488.971232][T18024] loop2: detected capacity change from 0 to 128 [ 1489.544817][T18037] netlink: 'syz.7.3390': attribute type 9 has an invalid length. [ 1489.583284][T18037] netlink: 399 bytes leftover after parsing attributes in process `syz.7.3390'. [ 1490.017067][T18051] loop8: detected capacity change from 0 to 1024 [ 1490.113647][T18051] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1490.295812][T18059] loop7: detected capacity change from 0 to 512 [ 1490.322823][ T26] audit: type=1800 audit(1770580919.908:80): pid=18051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3382" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1490.392659][T18059] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1490.430783][T18063] loop2: detected capacity change from 0 to 512 [ 1490.462509][T18059] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.475030][T18063] EXT4-fs: Ignoring removed nobh option [ 1490.496334][T18063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1490.565396][T18059] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1490.601649][T18063] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1490.615093][T18059] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 64512 [ 1490.615333][T18059] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.3396: Failed to acquire dquot type 0 [ 1490.726238][T18070] loop3: detected capacity change from 0 to 512 [ 1490.768988][T18063] EXT4-fs (loop2): 1 truncate cleaned up [ 1490.774962][T18063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1490.816674][T18070] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1490.861737][T18063] EXT4-fs (loop2): unmounting filesystem. [ 1490.903869][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1491.043380][T18070] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1491.085395][T18070] EXT4-fs (loop3): Remounting filesystem read-only [ 1491.099177][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1491.194358][T18070] Quota error (device loop3): write_blk: dquota write failed [ 1491.251473][T18070] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1491.291966][T18070] Quota error (device loop3): write_blk: dquota write failed [ 1491.323233][T18076] netlink: 'syz.1.3401': attribute type 39 has an invalid length. [ 1491.331946][T18070] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1491.474927][T18070] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3400: Failed to acquire dquot type 1 [ 1491.560932][T18070] EXT4-fs (loop3): Remounting filesystem read-only [ 1491.568094][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1491.616276][T18070] EXT4-fs (loop3): 1 truncate cleaned up [ 1491.633277][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1491.647389][T18070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1491.783234][T18070] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3400: Failed to acquire dquot type 1 [ 1491.827416][T18099] loop8: detected capacity change from 0 to 128 [ 1491.868285][T18099] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1491.904567][T18070] EXT4-fs (loop3): Remounting filesystem read-only [ 1492.143476][T18086] device syzkaller0 entered promiscuous mode [ 1492.282317][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1492.864002][T18121] netlink: 'syz.7.3418': attribute type 9 has an invalid length. [ 1492.908037][T18121] netlink: 399 bytes leftover after parsing attributes in process `syz.7.3418'. [ 1493.257366][T18131] loop8: detected capacity change from 0 to 128 [ 1493.291524][T18131] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1493.510879][T18137] loop3: detected capacity change from 0 to 512 [ 1493.601685][T18137] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1493.751280][T18137] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.3422: Allocating blocks 41-42 which overlap fs metadata [ 1493.900146][T18137] __quota_error: 2 callbacks suppressed [ 1493.900166][T18137] Quota error (device loop3): write_blk: dquota write failed [ 1493.922165][T18144] loop7: detected capacity change from 0 to 1024 [ 1493.957935][T18144] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.3424: lblock 2 mapped to illegal pblock 2 (length 1) [ 1494.015134][T18137] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1494.105589][T18149] netlink: 'syz.8.3426': attribute type 39 has an invalid length. [ 1494.115456][T18137] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1494.152532][T18148] loop1: detected capacity change from 0 to 128 [ 1494.178542][T18144] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1494.197126][T18144] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.3424: lblock 0 mapped to illegal pblock 48 (length 1) [ 1494.213774][T18137] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3422: Failed to acquire dquot type 1 [ 1494.250237][T18148] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1494.264496][T18144] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1494.269515][T18137] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1494.294199][T18144] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.3424: Failed to acquire dquot type 0 [ 1494.339918][T18137] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.3422: corrupted inode contents [ 1494.365253][T18144] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1494.380316][T18137] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #12: comm syz.3.3422: mark_inode_dirty error [ 1494.424407][T18144] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.3424: mark_inode_dirty error [ 1494.471511][T18144] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1494.500578][T18137] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.3422: corrupted inode contents [ 1494.523334][T18144] EXT4-fs (loop7): 1 orphan inode deleted [ 1494.531487][T18144] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1494.540505][ T4366] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1494.573901][ T4366] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1494.603957][ T4366] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 1494.664437][T18137] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.3422: mark_inode_dirty error [ 1494.743392][T18137] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.3422: corrupted inode contents [ 1494.822136][T18137] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1494.895961][T18137] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.3422: corrupted inode contents [ 1494.974154][T18137] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.3422: mark_inode_dirty error [ 1495.053262][T18137] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1495.107787][T18137] EXT4-fs (loop3): 1 truncate cleaned up [ 1495.160173][T18137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1495.186917][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1495.193052][ T4366] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1495.264136][ T4366] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1495.272836][ T4366] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 1495.295914][T18165] netlink: 'syz.2.3431': attribute type 9 has an invalid length. [ 1495.303713][T18165] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1495.366350][ T8010] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1495.415693][ T8010] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1495.460092][ T8010] EXT4-fs error (device loop7): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1495.696476][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1495.759943][T18177] loop2: detected capacity change from 0 to 512 [ 1495.848015][T18177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1495.867002][T18176] loop8: detected capacity change from 0 to 2048 [ 1495.945003][T18177] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.012543][T18184] loop7: detected capacity change from 0 to 512 [ 1496.035079][T18176] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1496.196118][T18184] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1496.214288][T18184] ext4 filesystem being mounted at /572/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.250541][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1496.260488][T18193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1496.312387][T18194] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1496.328412][T18194] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1496.340873][T18194] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1496.340873][T18194] [ 1496.355598][T18194] EXT4-fs (loop8): Total free blocks count 0 [ 1496.363784][T18194] EXT4-fs (loop8): Free/Dirty block details [ 1496.370343][T18194] EXT4-fs (loop8): free_blocks=2415919504 [ 1496.376541][T18194] EXT4-fs (loop8): dirty_blocks=80 [ 1496.382238][T18194] EXT4-fs (loop8): Block reservation details [ 1496.410304][T18194] EXT4-fs (loop8): i_reserved_data_blocks=12 [ 1496.555603][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1497.563594][T18210] netlink: 'syz.3.3443': attribute type 39 has an invalid length. [ 1497.727762][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1498.220120][T18222] loop2: detected capacity change from 0 to 512 [ 1498.282231][T18222] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1498.367975][T18222] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.3448: Allocating blocks 41-42 which overlap fs metadata [ 1498.458979][T18231] loop1: detected capacity change from 0 to 512 [ 1498.474714][T18222] Quota error (device loop2): write_blk: dquota write failed [ 1498.512237][T18233] loop7: detected capacity change from 0 to 512 [ 1498.553391][T18222] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1498.567430][T18222] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1498.579974][T18222] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3448: Failed to acquire dquot type 1 [ 1498.593463][T18231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1498.625332][ T7481] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1498.651622][T18222] EXT4-fs error (device loop2): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1498.697105][T18233] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1498.765563][T18233] ext4 filesystem being mounted at /575/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1498.844232][T18222] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3448: corrupted inode contents [ 1498.879642][T18222] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #12: comm syz.2.3448: mark_inode_dirty error [ 1498.921275][T18222] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3448: corrupted inode contents [ 1498.951179][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1498.980872][T18222] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.3448: mark_inode_dirty error [ 1499.024331][T18222] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3448: corrupted inode contents [ 1499.039996][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 1499.070587][T18222] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1499.121623][T18222] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3448: corrupted inode contents [ 1499.158678][T18245] loop1: detected capacity change from 0 to 128 [ 1499.215786][T18222] EXT4-fs error (device loop2): ext4_truncate:4318: inode #12: comm syz.2.3448: mark_inode_dirty error [ 1499.278934][T18222] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1499.288289][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3454'. [ 1499.351138][T18222] EXT4-fs (loop2): 1 truncate cleaned up [ 1499.370310][T18222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1499.533237][T18253] netlink: 'syz.1.3456': attribute type 9 has an invalid length. [ 1499.601926][T18253] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1499.625646][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1500.079675][T18267] loop2: detected capacity change from 0 to 512 [ 1500.191344][T18267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1500.223169][T18267] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.264596][T18273] 9pnet_fd: Insufficient options for proto=fd [ 1500.318197][T18279] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 1500.387868][T18279] team0: Port device dummy0 added [ 1500.401411][T18279] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 1500.505161][T18279] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1500.562380][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1500.574378][T18279] team0: Failed to send options change via netlink (err -105) [ 1500.582205][T18279] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1500.592385][T18279] team0: Port device dummy0 removed [ 1500.626966][T18279] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1500.694285][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3468'. [ 1500.866763][T18290] loop2: detected capacity change from 0 to 2048 [ 1500.967633][T18290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1501.090461][T18298] loop8: detected capacity change from 0 to 512 [ 1501.119075][T18304] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1501.224177][T18304] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1501.239768][T18298] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1501.268264][T18298] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.434367][T18304] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1501.434367][T18304] [ 1501.489664][T18304] EXT4-fs (loop2): Total free blocks count 0 [ 1501.526574][T18304] EXT4-fs (loop2): Free/Dirty block details [ 1501.550459][T18304] EXT4-fs (loop2): free_blocks=2415919504 [ 1501.589717][T18304] EXT4-fs (loop2): dirty_blocks=640 [ 1501.637607][T18304] EXT4-fs (loop2): Block reservation details [ 1501.671018][T18304] EXT4-fs (loop2): i_reserved_data_blocks=48 [ 1501.971200][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1502.452277][T18340] netlink: 'syz.3.3485': attribute type 9 has an invalid length. [ 1502.474283][T18340] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1502.716929][T18343] loop1: detected capacity change from 0 to 1024 [ 1502.739637][T18343] EXT4-fs: Ignoring removed oldalloc option [ 1502.747311][T18347] loop3: detected capacity change from 0 to 512 [ 1502.768272][T18286] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1502.783479][T18343] EXT4-fs: Ignoring removed bh option [ 1502.827556][T18343] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1502.900015][T18347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1502.946352][T18343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1503.234006][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1503.467216][T18369] loop3: detected capacity change from 0 to 512 [ 1503.489359][T18369] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1503.500469][T18369] EXT4-fs (loop3): group descriptors corrupted! [ 1503.950281][T18377] loop3: detected capacity change from 0 to 512 [ 1503.981445][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1504.025112][T18377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1504.356446][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1504.688438][T18401] loop2: detected capacity change from 0 to 2048 [ 1504.754668][T18401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1505.189628][T18428] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1505.240263][T18430] loop3: detected capacity change from 0 to 512 [ 1505.303951][T18428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 1505.322758][T18430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1505.408201][T18430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1505.478732][T18430] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1505.519867][T18428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1505.519867][T18428] [ 1505.529845][T18428] EXT4-fs (loop2): Total free blocks count 0 [ 1505.537001][T18428] EXT4-fs (loop2): Free/Dirty block details [ 1505.543044][T18428] EXT4-fs (loop2): free_blocks=2415919504 [ 1505.549167][T18428] EXT4-fs (loop2): dirty_blocks=592 [ 1505.557224][T18428] EXT4-fs (loop2): Block reservation details [ 1505.563270][T18428] EXT4-fs (loop2): i_reserved_data_blocks=37 [ 1505.575820][ T26] audit: type=1800 audit(1770580935.168:81): pid=18430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3510" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1505.635852][T18401] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 398 with error 28 [ 1505.661037][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1506.332191][T18464] loop1: detected capacity change from 0 to 128 [ 1506.383272][T18464] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1506.653711][T18473] loop2: detected capacity change from 0 to 2048 [ 1506.703559][T18475] loop1: detected capacity change from 0 to 512 [ 1506.770106][T18473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1506.843037][T18475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1506.897681][T18489] net_ratelimit: 4676 callbacks suppressed [ 1506.897698][T18489] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1506.912424][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1507.120084][T18492] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1507.189956][T18497] xt_TCPMSS: Only works on TCP SYN packets [ 1507.208044][T18492] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 1507.224351][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1507.314640][T18492] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1507.314640][T18492] [ 1507.432236][T18505] loop3: detected capacity change from 0 to 128 [ 1507.453295][T18492] EXT4-fs (loop2): Total free blocks count 0 [ 1507.463488][T18505] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1507.506747][T18492] EXT4-fs (loop2): Free/Dirty block details [ 1507.533720][T18492] EXT4-fs (loop2): free_blocks=2415919504 [ 1507.559066][T18492] EXT4-fs (loop2): dirty_blocks=512 [ 1507.576852][T18492] EXT4-fs (loop2): Block reservation details [ 1507.596974][T18492] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 1507.640298][T18473] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 372 with error 28 [ 1507.772517][T18513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1508.341233][T18531] loop8: detected capacity change from 0 to 512 [ 1508.408232][T18534] loop1: detected capacity change from 0 to 128 [ 1508.456178][T18534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1508.473401][T18531] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1508.488919][T18534] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.609516][T18531] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.624787][T18534] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.3553: Logical block already allocated [ 1508.681062][T18531] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 1508.704823][T18534] EXT4-fs (loop1): Remounting filesystem read-only [ 1508.850582][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1508.874632][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1509.377372][T18563] loop1: detected capacity change from 0 to 256 [ 1510.325581][T18589] loop8: detected capacity change from 0 to 512 [ 1510.364439][T15890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1510.399697][T15890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1510.408380][ T8010] bond0: (slave syz_tun): Releasing backup interface [ 1510.417269][T15890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1510.435997][T15890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1510.443672][T15890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1510.443895][T18589] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1510.453552][ T8010] device syz_tun left promiscuous mode [ 1510.467861][T15890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1510.758355][ T4350] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.003854][ T4350] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.108517][T18601] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1511.263495][ T4350] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.436374][ T4350] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.756674][T18616] loop3: detected capacity change from 0 to 2048 [ 1511.853521][T18616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1512.157896][T18627] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1512.189493][T18590] chnl_net:caif_netlink_parms(): no params data found [ 1512.331600][T18627] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 1512.380204][ T4350] tipc: Left network mode [ 1512.416808][ T26] audit: type=1326 audit(1770580942.008:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943c99aeb9 code=0x7ffc0000 [ 1512.520012][T18636] loop1: detected capacity change from 0 to 1024 [ 1512.539375][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.546942][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 1512.555692][ T26] audit: type=1326 audit(1770580942.028:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f943c99aeb9 code=0x7ffc0000 [ 1512.610643][T18640] loop8: detected capacity change from 0 to 512 [ 1512.644302][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.656833][T18636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1512.666129][T18590] device bridge_slave_0 entered promiscuous mode [ 1512.685618][T18640] EXT4-fs: Ignoring removed orlov option [ 1512.752194][ T26] audit: type=1326 audit(1770580942.028:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f943c99ac22 code=0x7ffc0000 [ 1512.775597][T18640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1512.808029][T18627] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1512.808029][T18627] [ 1512.865948][T18640] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1512.890222][T18627] EXT4-fs (loop3): Total free blocks count 0 [ 1512.914439][T18640] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3586: bg 0: block 248: padding at end of block bitmap is not set [ 1512.974827][ T26] audit: type=1326 audit(1770580942.058:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f943c95b78e code=0x7ffc0000 [ 1513.006399][T18627] EXT4-fs (loop3): Free/Dirty block details [ 1513.012388][T18627] EXT4-fs (loop3): free_blocks=2415919504 [ 1513.027874][T18640] Quota error (device loop8): write_blk: dquota write failed [ 1513.044320][T18640] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1513.072728][ T26] audit: type=1326 audit(1770580942.108:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f943c99ace7 code=0x7ffc0000 [ 1513.092264][T18640] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3586: Failed to acquire dquot type 1 [ 1513.114247][T18627] EXT4-fs (loop3): dirty_blocks=2064 [ 1513.114486][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.135386][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.138642][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1513.161491][T18627] EXT4-fs (loop3): Block reservation details [ 1513.172363][ T26] audit: type=1326 audit(1770580942.108:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f943c95b78e code=0x7ffc0000 [ 1513.194411][T18627] EXT4-fs (loop3): i_reserved_data_blocks=131 [ 1513.213680][T18640] EXT4-fs (loop8): 1 truncate cleaned up [ 1513.259889][T18590] device bridge_slave_1 entered promiscuous mode [ 1513.267472][T18640] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1513.295877][ T26] audit: type=1326 audit(1770580942.108:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f943c99ab4b code=0x7ffc0000 [ 1513.367420][T18640] EXT4-fs: Ignoring removed orlov option [ 1513.394559][T18640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1513.403092][T18640] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 1513.458159][ T26] audit: type=1326 audit(1770580942.208:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18634 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f943c95b78e code=0x7ffc0000 [ 1513.517002][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.539492][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.569289][T18640] EXT4-fs error (device loop8): __ext4_remount:6644: comm syz.8.3586: Abort forced by user [ 1513.607674][T18640] EXT4-fs (loop8): Remounting filesystem read-only [ 1513.627735][T18640] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 1513.642621][T18640] ext4 filesystem being remounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.697345][T18616] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1513.812290][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1513.837692][T18590] team0: Port device team_slave_0 added [ 1513.843948][T18658] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1514.087554][T18590] team0: Port device team_slave_1 added [ 1514.212192][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.254344][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.351108][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.470420][ T4350] bond1: (slave erspan1): Releasing active interface [ 1514.525279][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.553066][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.593024][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.624375][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 1514.900472][T18590] device hsr_slave_0 entered promiscuous mode [ 1514.929175][T18590] device hsr_slave_1 entered promiscuous mode [ 1514.940989][T18685] loop2: detected capacity change from 0 to 512 [ 1515.115317][T18685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1515.147478][T18694] loop3: detected capacity change from 0 to 512 [ 1515.155113][T18694] EXT4-fs: Ignoring removed orlov option [ 1515.195383][T18694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1515.223456][T18685] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.260559][T18694] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1515.314694][T18694] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3601: bg 0: block 248: padding at end of block bitmap is not set [ 1515.342638][T18694] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3601: Failed to acquire dquot type 1 [ 1515.373066][T18694] EXT4-fs (loop3): 1 truncate cleaned up [ 1515.408883][T18694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1515.471634][T18694] EXT4-fs: Ignoring removed orlov option [ 1515.524404][T18694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1515.532916][T18694] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1515.610259][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1515.635871][T18694] EXT4-fs error (device loop3): __ext4_remount:6644: comm syz.3.3601: Abort forced by user [ 1515.672527][T18694] EXT4-fs (loop3): Remounting filesystem read-only [ 1515.734279][T18694] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 1515.741168][T18694] ext4 filesystem being remounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.781039][T18709] netlink: 'syz.8.3606': attribute type 9 has an invalid length. [ 1515.797667][T18709] netlink: 399 bytes leftover after parsing attributes in process `syz.8.3606'. [ 1515.991794][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1516.073109][T18720] loop8: detected capacity change from 0 to 512 [ 1516.171790][T18720] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1516.379515][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1516.619064][ T4350] device team0 left promiscuous mode [ 1516.628965][ T4350] device team_slave_0 left promiscuous mode [ 1516.637018][T18733] loop2: detected capacity change from 0 to 512 [ 1516.643932][ T4350] device team_slave_1 left promiscuous mode [ 1516.659057][ T4350] device bond0 left promiscuous mode [ 1516.693505][T18733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1516.704232][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 1516.736123][ T4350] device bond_slave_0 left promiscuous mode [ 1516.790051][ T4350] device bond_slave_1 left promiscuous mode [ 1516.814325][T18733] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.870212][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1516.875433][ T4350] device dummy0 left promiscuous mode [ 1516.955081][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.985684][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.022794][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.041442][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.085184][ T4350] device bridge_slave_1 left promiscuous mode [ 1517.105360][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.131548][ T4350] device bridge_slave_0 left promiscuous mode [ 1517.174104][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.264804][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 1517.429569][T18756] loop1: detected capacity change from 0 to 512 [ 1517.488870][ T4350] device veth1_macvtap left promiscuous mode [ 1517.495591][ T4350] device veth0_macvtap left promiscuous mode [ 1517.501831][ T4350] device veth1_vlan left promiscuous mode [ 1517.510043][ T4350] device veth0_vlan left promiscuous mode [ 1517.533272][T18756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1517.549715][T18756] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.731965][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1517.857337][ T4350] bond3 (unregistering): Released all slaves [ 1517.889881][ T4350] bond2 (unregistering): Released all slaves [ 1517.956355][ T4350] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1518.021097][ T4350] bond1 (unregistering): Released all slaves [ 1518.337960][T18784] loop1: detected capacity change from 0 to 2048 [ 1518.410484][T18784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1518.620511][T18790] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1518.687461][T18790] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 1518.762646][T18790] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1518.762646][T18790] [ 1518.784163][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 1518.816252][T18794] loop2: detected capacity change from 0 to 512 [ 1518.824519][T18790] EXT4-fs (loop1): Total free blocks count 0 [ 1518.830753][T18790] EXT4-fs (loop1): Free/Dirty block details [ 1518.895909][T18794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1518.980883][T18790] EXT4-fs (loop1): free_blocks=2415919504 [ 1519.024436][T18790] EXT4-fs (loop1): dirty_blocks=624 [ 1519.050082][T18790] EXT4-fs (loop1): Block reservation details [ 1519.083265][T18802] loop3: detected capacity change from 0 to 128 [ 1519.090446][T18790] EXT4-fs (loop1): i_reserved_data_blocks=52 [ 1519.160448][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1519.643081][T18782] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1519.799831][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 1519.915408][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 1520.031742][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.105178][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.262821][T18817] loop2: detected capacity change from 0 to 512 [ 1520.368056][T18817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1520.414517][T18817] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.516633][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1520.953711][ T4350] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1521.036936][ T4350] bond0 (unregistering): Released all slaves [ 1521.165474][T18760] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1521.388821][T18842] loop3: detected capacity change from 0 to 512 [ 1521.502318][T18842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1521.592804][T18846] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3652'. [ 1521.628184][T18842] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1521.750466][T18848] loop1: detected capacity change from 0 to 1024 [ 1521.821456][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1521.859649][T18590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1521.886783][T18848] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.3653: lblock 2 mapped to illegal pblock 2 (length 1) [ 1521.903426][T18590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1521.986388][T18848] __quota_error: 19 callbacks suppressed [ 1521.986408][T18848] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1522.007190][T18590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1522.051814][T18848] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.3653: lblock 0 mapped to illegal pblock 48 (length 1) [ 1522.077550][T18590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1522.125851][T18848] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1522.162549][T18848] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3653: Failed to acquire dquot type 0 [ 1522.244235][T18848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1522.294618][T18848] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.3653: mark_inode_dirty error [ 1522.373190][T18848] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1522.454293][T18848] EXT4-fs (loop1): 1 orphan inode deleted [ 1522.463988][T18870] loop3: detected capacity change from 0 to 512 [ 1522.471730][T18848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1522.482826][T16451] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1522.528023][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.558940][T16451] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1522.575306][T18870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1522.607835][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.654261][T16451] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 0 [ 1522.682448][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.719384][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.780707][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.797036][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1522.814516][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.824977][ T4352] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1522.848012][ T7481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.855236][ T7481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.877013][ T4352] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1522.903410][ T4352] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 1522.905362][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.925486][T16675] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1522.952434][T16675] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1522.966295][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1522.981627][T16675] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1522.993706][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1523.011367][ T7481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.018622][ T7481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.092134][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1523.132045][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1523.178016][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1523.242364][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1523.282333][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1523.343391][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1523.375599][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1523.422821][T18590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1523.469843][T18590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1523.555030][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1523.574234][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1523.642843][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1523.679613][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1523.711125][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1523.738734][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1523.905981][T18911] loop8: detected capacity change from 0 to 1024 [ 1524.002764][T18911] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 2: comm syz.8.3672: lblock 2 mapped to illegal pblock 2 (length 1) [ 1524.103997][T18911] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1524.154301][T18911] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 48: comm syz.8.3672: lblock 0 mapped to illegal pblock 48 (length 1) [ 1524.172504][T18911] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1524.183105][T18911] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3672: Failed to acquire dquot type 0 [ 1524.206671][T18911] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1524.230212][T18911] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #11: comm syz.8.3672: mark_inode_dirty error [ 1524.242350][T18911] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1524.261406][T18911] EXT4-fs (loop8): 1 orphan inode deleted [ 1524.268722][T18911] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1524.285698][T16451] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1524.328879][T16451] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1524.386737][T16451] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 0 [ 1524.635164][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1524.645924][ T4352] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1524.689680][ T4352] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1524.706976][ T4352] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 1524.749581][T17015] EXT4-fs error (device loop8): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1524.788576][T17015] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1524.825550][T17015] EXT4-fs error (device loop8): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1524.890483][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1524.900868][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1524.960018][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.124342][T18945] device netdevsim0 entered promiscuous mode [ 1525.307786][T18952] loop3: detected capacity change from 0 to 512 [ 1525.392337][T18952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1525.407636][T18954] device syzkaller0 entered promiscuous mode [ 1525.429411][T18954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1525.543412][T18954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1525.639075][T18954] 0: reclassify loop, rule prio 0, protocol 800 [ 1525.679492][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1525.896138][T18972] loop3: detected capacity change from 0 to 1024 [ 1525.930421][T18974] loop8: detected capacity change from 0 to 2048 [ 1525.971170][T18972] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.3688: lblock 2 mapped to illegal pblock 2 (length 1) [ 1526.067434][T18974] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1526.085159][T18972] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1526.144677][T18972] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.3688: lblock 0 mapped to illegal pblock 48 (length 1) [ 1526.215091][T18983] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1526.234363][T18972] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1526.251619][T18972] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.3688: Failed to acquire dquot type 0 [ 1526.265020][T18983] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1526.290923][T18972] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1526.320669][T18972] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.3688: mark_inode_dirty error [ 1526.359641][T18983] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1526.359641][T18983] [ 1526.375755][T18972] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1526.402106][T18972] EXT4-fs (loop3): 1 orphan inode deleted [ 1526.416343][ T7481] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 1526.439229][T18972] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1526.464497][T18983] EXT4-fs (loop8): Total free blocks count 0 [ 1526.470580][T18983] EXT4-fs (loop8): Free/Dirty block details [ 1526.479284][ T7481] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:24: Failed to release dquot type 0 [ 1526.512598][T18983] EXT4-fs (loop8): free_blocks=2415919504 [ 1526.660166][T18983] EXT4-fs (loop8): dirty_blocks=1184 [ 1526.684643][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1526.700628][ T7481] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 1526.734233][T18983] EXT4-fs (loop8): Block reservation details [ 1526.740786][ T7481] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:24: Failed to release dquot type 0 [ 1526.744210][T18983] EXT4-fs (loop8): i_reserved_data_blocks=76 [ 1526.817582][T16560] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1526.844418][T16560] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1526.872392][T16560] EXT4-fs error (device loop3): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1526.950280][T18992] loop1: detected capacity change from 0 to 512 [ 1526.965607][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1527.000787][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1527.059190][T18992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1527.095171][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1527.104490][T18992] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.116959][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1527.136653][T18590] device veth0_vlan entered promiscuous mode [ 1527.150130][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1527.163603][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1527.183395][T18590] device veth1_vlan entered promiscuous mode [ 1527.252181][T18974] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1527.258579][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1527.282751][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1527.296215][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1527.307996][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1527.323447][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1527.336087][T18590] device veth0_macvtap entered promiscuous mode [ 1527.421410][T18590] device veth1_macvtap entered promiscuous mode [ 1527.488684][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.499496][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.514774][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.526029][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.536418][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.547314][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.557639][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.571286][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.583644][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.607861][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1527.619756][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1527.647506][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1527.665281][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1527.698876][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.715089][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.745619][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.759155][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.774803][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.789927][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.802125][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.815594][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.837996][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.863867][T19011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1527.906132][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1527.927470][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1527.979669][T18590] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.009732][T18590] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.028974][T18590] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.085813][T18590] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.248430][T19018] loop1: detected capacity change from 0 to 1024 [ 1528.257216][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.276120][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.309969][T16451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1528.363225][T19026] loop2: detected capacity change from 0 to 512 [ 1528.380056][ T4508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.392206][ T4508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.405815][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1528.417214][T19018] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.3702: lblock 2 mapped to illegal pblock 2 (length 1) [ 1528.468756][T19026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1528.482321][T19026] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.501252][T19018] __quota_error: 2 callbacks suppressed [ 1528.501270][T19018] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1528.594503][T19018] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.3702: lblock 0 mapped to illegal pblock 48 (length 1) [ 1528.618915][T19018] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1528.634619][T19018] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3702: Failed to acquire dquot type 0 [ 1528.646833][T19018] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1528.665509][T19018] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.3702: mark_inode_dirty error [ 1528.688480][T19031] loop7: detected capacity change from 0 to 512 [ 1528.699553][T19018] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1528.759385][T19031] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1528.770401][T19018] EXT4-fs (loop1): 1 orphan inode deleted [ 1528.776373][T19018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1528.786124][ T11] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1528.805331][T19031] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1528.812297][ T11] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1528.834774][T19031] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.3563: Block bitmap for bg 0 marked uninitialized [ 1528.893468][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 1529.000585][T19031] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 1529.012856][T19031] EXT4-fs (loop7): 1 orphan inode deleted [ 1529.028164][T19031] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1529.050795][T19036] loop8: detected capacity change from 0 to 128 [ 1529.080977][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1529.113678][ T4508] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1529.142896][T19036] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1529.175824][ T4508] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1529.184931][ T4508] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 0 [ 1529.207482][T16675] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1529.221689][T16675] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1529.233515][T16675] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1529.284227][T19036] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.325314][T18590] EXT4-fs (loop7): unmounting filesystem. [ 1529.341397][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1529.353766][T19039] loop3: detected capacity change from 0 to 2048 [ 1529.442634][T19039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1529.626119][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3712'. [ 1529.701340][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1530.060702][T19038] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1530.147361][T19038] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 416 with error 28 [ 1530.147471][T19038] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1530.147471][T19038] [ 1530.147490][T19038] EXT4-fs (loop3): Total free blocks count 0 [ 1530.147505][T19038] EXT4-fs (loop3): Free/Dirty block details [ 1530.147520][T19038] EXT4-fs (loop3): free_blocks=2415919504 [ 1530.147538][T19038] EXT4-fs (loop3): dirty_blocks=416 [ 1530.147553][T19038] EXT4-fs (loop3): Block reservation details [ 1530.147566][T19038] EXT4-fs (loop3): i_reserved_data_blocks=26 [ 1530.278239][ T4350] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 416 with max blocks 130 with error 28 [ 1530.284307][T19071] loop1: detected capacity change from 0 to 512 [ 1530.343672][T19071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1530.356374][T19071] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.543343][T19076] netlink: 'syz.8.3723': attribute type 9 has an invalid length. [ 1530.564475][T19076] netlink: 303 bytes leftover after parsing attributes in process `syz.8.3723'. [ 1530.773834][T19084] netlink: 'syz.3.3726': attribute type 5 has an invalid length. [ 1531.198656][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1531.213236][T19095] loop8: detected capacity change from 0 to 2048 [ 1531.309339][T19095] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1531.544588][T19110] netlink: 'syz.2.3736': attribute type 9 has an invalid length. [ 1531.574413][T19110] netlink: 303 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1531.844346][T19124] device netdevsim0 entered promiscuous mode [ 1531.898397][T19124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1531.977567][T19094] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1532.056601][T19094] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 640 with error 28 [ 1532.128052][T19094] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1532.128052][T19094] [ 1532.152957][T19130] loop2: detected capacity change from 0 to 512 [ 1532.170073][T19094] EXT4-fs (loop8): Total free blocks count 0 [ 1532.206376][T19094] EXT4-fs (loop8): Free/Dirty block details [ 1532.212364][T19094] EXT4-fs (loop8): free_blocks=2415919504 [ 1532.270714][T19130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1532.287732][T19094] EXT4-fs (loop8): dirty_blocks=1424 [ 1532.301366][T19130] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.342611][T19094] EXT4-fs (loop8): Block reservation details [ 1532.436490][T19094] EXT4-fs (loop8): i_reserved_data_blocks=111 [ 1532.626195][ T4508] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 640 with max blocks 1344 with error 28 [ 1533.080021][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1533.456447][T19172] loop8: detected capacity change from 0 to 2048 [ 1533.545467][T19172] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1533.578821][T19181] loop7: detected capacity change from 0 to 128 [ 1533.627555][T19181] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1533.666278][T19181] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.000447][T18590] EXT4-fs (loop7): unmounting filesystem. [ 1534.158946][T19195] loop7: detected capacity change from 0 to 512 [ 1534.207735][T19195] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1534.217148][T19195] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.329910][T19170] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1534.416501][T19170] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1024 with error 28 [ 1534.481383][T19170] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1534.481383][T19170] [ 1534.522213][T19170] EXT4-fs (loop8): Total free blocks count 0 [ 1534.560065][T19170] EXT4-fs (loop8): Free/Dirty block details [ 1534.608554][T19170] EXT4-fs (loop8): free_blocks=2415919504 [ 1534.608580][T19170] EXT4-fs (loop8): dirty_blocks=1728 [ 1534.608595][T19170] EXT4-fs (loop8): Block reservation details [ 1534.608608][T19170] EXT4-fs (loop8): i_reserved_data_blocks=108 [ 1534.680873][T19207] loop1: detected capacity change from 0 to 512 [ 1534.749577][ T11] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 832 with error 28 [ 1534.785280][T19207] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1534.901215][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1535.105662][T18590] EXT4-fs (loop7): unmounting filesystem. [ 1535.592860][T19235] loop2: detected capacity change from 0 to 2048 [ 1535.645520][T19239] netlink: 'syz.8.3788': attribute type 9 has an invalid length. [ 1535.657189][T19235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1535.733522][T19239] netlink: 'syz.8.3788': attribute type 1 has an invalid length. [ 1535.774300][T19239] netlink: 303 bytes leftover after parsing attributes in process `syz.8.3788'. [ 1535.902050][T19249] loop3: detected capacity change from 0 to 512 [ 1535.973188][T19249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1536.005774][T19249] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1536.156368][T16560] EXT4-fs (loop3): unmounting filesystem. [ 1536.340131][T19259] loop8: detected capacity change from 0 to 128 [ 1536.390572][T19235] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1536.410288][T19259] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1536.426665][T19259] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1536.475281][T19235] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 1536.518055][T19235] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1536.518055][T19235] [ 1536.540091][T17015] EXT4-fs (loop8): unmounting filesystem. [ 1536.599919][T19235] EXT4-fs (loop2): Total free blocks count 0 [ 1536.615087][T19235] EXT4-fs (loop2): Free/Dirty block details [ 1536.634602][T19235] EXT4-fs (loop2): free_blocks=2415919504 [ 1536.640418][T19235] EXT4-fs (loop2): dirty_blocks=512 [ 1536.670653][T19235] EXT4-fs (loop2): Block reservation details [ 1536.694553][T19235] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 1536.892934][T16692] EXT4-fs (loop2): unmounting filesystem. [ 1537.008173][T19279] loop8: detected capacity change from 0 to 512 [ 1537.058461][T19283] loop2: detected capacity change from 0 to 512 [ 1537.187233][T19283] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.490309][T19299] loop2: detected capacity change from 0 to 1024 [ 1537.511009][T19299] EXT4-fs: Ignoring removed orlov option [ 1537.744221][T15890] Bluetooth: hci3: command 0x0406 tx timeout [ 1537.751903][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 1537.882507][T19310] loop8: detected capacity change from 0 to 2048 [ 1538.084987][T19316] loop2: detected capacity change from 0 to 1024 [ 1538.240289][T19322] loop7: detected capacity change from 0 to 512 [ 1538.418348][ T26] audit: type=1326 audit(1770580968.008:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.495427][ T26] audit: type=1326 audit(1770580968.008:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.526720][T19331] loop2: detected capacity change from 0 to 512 [ 1538.542808][ T26] audit: type=1326 audit(1770580968.068:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.591739][ T26] audit: type=1326 audit(1770580968.068:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.647033][T19331] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.657008][ T26] audit: type=1326 audit(1770580968.068:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.727379][T19310] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1538.786287][ T26] audit: type=1326 audit(1770580968.068:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.809670][ T26] audit: type=1326 audit(1770580968.068:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.834716][ T26] audit: type=1326 audit(1770580968.068:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.858375][ T26] audit: type=1326 audit(1770580968.068:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.881699][T19310] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 896 with error 28 [ 1538.907051][T19336] loop7: detected capacity change from 0 to 128 [ 1538.962240][ T26] audit: type=1326 audit(1770580968.068:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f49cb99aeb9 code=0x7ffc0000 [ 1538.994489][T19310] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1538.994489][T19310] [ 1539.011457][T19310] EXT4-fs (loop8): Total free blocks count 0 [ 1539.018810][T19310] EXT4-fs (loop8): Free/Dirty block details [ 1539.037755][T19310] EXT4-fs (loop8): free_blocks=2415919504 [ 1539.050362][T19310] EXT4-fs (loop8): dirty_blocks=896 [ 1539.101359][T19310] EXT4-fs (loop8): Block reservation details [ 1539.120976][T19310] EXT4-fs (loop8): i_reserved_data_blocks=56 [ 1539.412708][T19346] loop2: detected capacity change from 0 to 1024 [ 1539.455279][T19346] EXT4-fs: Ignoring removed orlov option [ 1539.501717][T19346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1539.517379][T19346] ext4: Unknown parameter 'subj_role' [ 1540.161904][T19362] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.337618][T19369] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.631320][T19376] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3839: invalid block [ 1540.674460][T19376] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3839: invalid indirect mapped block 4294967295 (level 1) [ 1540.782268][T19376] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3839: invalid indirect mapped block 4294967295 (level 1) [ 1540.868030][T19376] EXT4-fs (loop1): 2 truncates cleaned up [ 1540.913464][T19376] EXT4-fs error (device loop1): ext4_get_parent:1906: inode #11: comm syz.1.3839: bad parent inode number: 3 [ 1541.385916][T19374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1541.442560][T19401] netlink: 'syz.1.3849': attribute type 9 has an invalid length. [ 1541.458861][T19374] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 1541.471612][T19401] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 1541.484957][T19401] netlink: 303 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1541.498046][T19374] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1541.498046][T19374] [ 1541.509673][T19374] EXT4-fs (loop3): Total free blocks count 0 [ 1541.518949][T19374] EXT4-fs (loop3): Free/Dirty block details [ 1541.528348][T19374] EXT4-fs (loop3): free_blocks=2415919504 [ 1541.536987][T19374] EXT4-fs (loop3): dirty_blocks=512 [ 1541.542352][T19374] EXT4-fs (loop3): Block reservation details [ 1541.552110][T19374] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 1541.628690][T19405] set_capacity_and_notify: 4 callbacks suppressed [ 1541.628704][T19405] loop1: detected capacity change from 0 to 128 [ 1541.681961][T19405] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.020422][T19415] loop3: detected capacity change from 0 to 512 [ 1542.052395][T19415] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.185619][T19397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1542.197233][T19397] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1542.221222][T19397] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1542.230737][T19397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1542.246522][T19397] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1542.264620][T19397] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1542.272633][T19397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1542.279394][T19397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1542.292096][T19397] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1542.300097][T19397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1542.306477][T19397] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1542.313586][T19397] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1542.321748][T19397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1542.335730][T19397] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1542.355894][T19397] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1542.643115][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'. [ 1542.660158][T19433] netlink: 'syz.8.3861': attribute type 9 has an invalid length. [ 1542.681808][T19433] netlink: 'syz.8.3861': attribute type 1 has an invalid length. [ 1542.701070][T19433] netlink: 303 bytes leftover after parsing attributes in process `syz.8.3861'. [ 1542.878821][T19436] loop2: detected capacity change from 0 to 128 [ 1542.944894][T19436] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.965025][T19438] loop7: detected capacity change from 0 to 2048 [ 1543.129641][T19452] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1543.362000][T19456] loop1: detected capacity change from 0 to 512 [ 1543.420349][T19456] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.504774][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 1543.723816][T19437] ------------[ cut here ]------------ [ 1543.729606][T19437] kernel BUG at fs/ext4/inode.c:2760! [ 1543.757557][T19437] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1543.763752][T19437] CPU: 1 PID: 19437 Comm: syz.7.3863 Not tainted syzkaller #0 [ 1543.771279][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1543.781381][T19437] RIP: 0010:ext4_writepages+0x2f34/0x2f40 [ 1543.787292][T19437] Code: c1 03 38 c1 0f 8c ac fd ff ff 4c 89 e7 e8 14 8e ac ff e9 9f fd ff ff e8 6a a2 5b ff 0f 0b e8 63 a2 5b ff 0f 0b e8 5c a2 5b ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 1543.807040][T19437] RSP: 0018:ffffc90005e276c0 EFLAGS: 00010293 [ 1543.813257][T19437] RAX: ffffffff8226d154 RBX: 0000009410000000 RCX: ffff888026e45940 [ 1543.821281][T19437] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1543.829286][T19437] RBP: ffffc90005e27a30 R08: ffff88807dcb8a5f R09: 1ffff1100fb9714b [ 1543.837285][T19437] R10: dffffc0000000000 R11: ffffed100fb9714c R12: 1ffff92000bc4f84 [ 1543.845309][T19437] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88804078e000 [ 1543.853488][T19437] FS: 0000555580c9f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1543.862532][T19437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1543.869144][T19437] CR2: 000000110c40f9e6 CR3: 000000001fb1c000 CR4: 00000000003506e0 [ 1543.877174][T19437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1543.885604][T19437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1543.893604][T19437] Call Trace: [ 1543.896922][T19437] [ 1543.899883][T19437] ? verify_lock_unused+0x140/0x140 [ 1543.905156][T19437] ? mark_lock+0x94/0x320 [ 1543.909520][T19437] ? ext4_read_folio+0x370/0x370 [ 1543.914501][T19437] ? __lock_acquire+0x7d10/0x7d10 [ 1543.919568][T19437] ? do_raw_spin_lock+0x128/0x2f0 [ 1543.924627][T19437] ? do_raw_spin_unlock+0x11d/0x230 [ 1543.929869][T19437] ? ext4_read_folio+0x370/0x370 [ 1543.934940][T19437] do_writepages+0x3ba/0x640 [ 1543.939806][T19437] ? filemap_fdatawrite_wbc+0x113/0x180 [ 1543.945411][T19437] ? __writepage+0x130/0x130 [ 1543.950147][T19437] ? __lock_acquire+0x7d10/0x7d10 [ 1543.955248][T19437] ? __rwlock_init+0x140/0x140 [ 1543.960123][T19437] ? do_raw_spin_unlock+0x11d/0x230 [ 1543.965354][T19437] filemap_fdatawrite_wbc+0x11e/0x180 [ 1543.970844][T19437] filemap_flush+0xe0/0x140 [ 1543.975393][T19437] ? filemap_fdatawrite_range+0x160/0x160 [ 1543.981145][T19437] ? mutex_unlock+0x10/0x10 [ 1543.985767][T19437] ? rcu_is_watching+0x11/0xa0 [ 1543.990617][T19437] ext4_release_file+0x7e/0x300 [ 1543.995615][T19437] ? ext4_file_open+0x6f0/0x6f0 [ 1544.000603][T19437] __fput+0x22c/0x920 [ 1544.004711][T19437] task_work_run+0x1d0/0x260 [ 1544.009561][T19437] ? task_work_cancel+0x220/0x220 [ 1544.014618][T19437] ? exit_to_user_mode_loop+0x3b/0x110 [ 1544.020152][T19437] exit_to_user_mode_loop+0xe6/0x110 [ 1544.025477][T19437] exit_to_user_mode_prepare+0xee/0x180 [ 1544.031053][T19437] syscall_exit_to_user_mode+0x16/0x40 [ 1544.036579][T19437] do_syscall_64+0x58/0xa0 [ 1544.041039][T19437] ? clear_bhb_loop+0x60/0xb0 [ 1544.045739][T19437] ? clear_bhb_loop+0x60/0xb0 [ 1544.050462][T19437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.056410][T19437] RIP: 0033:0x7f27cfb9aeb9 [ 1544.060860][T19437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.080621][T19437] RSP: 002b:00007fffbfb09488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1544.089130][T19437] RAX: 0000000000000000 RBX: 00007f27cfe17da0 RCX: 00007f27cfb9aeb9 [ 1544.097145][T19437] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1544.105168][T19437] RBP: 00007f27cfe17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1544.113165][T19437] R10: 00007f27cfe17cb0 R11: 0000000000000246 R12: 0000000000178df3 [ 1544.121216][T19437] R13: 00007f27cfe1618c R14: 0000000000178c49 R15: 00007f27cfe16180 [ 1544.129312][T19437] [ 1544.132372][T19437] Modules linked in: [ 1544.218169][T16675] EXT4-fs unmount: 30 callbacks suppressed [ 1544.218188][T16675] EXT4-fs (loop1): unmounting filesystem. [ 1544.233871][T19437] ---[ end trace 0000000000000000 ]--- [ 1544.239872][T19437] RIP: 0010:ext4_writepages+0x2f34/0x2f40 [ 1544.247712][T19437] Code: c1 03 38 c1 0f 8c ac fd ff ff 4c 89 e7 e8 14 8e ac ff e9 9f fd ff ff e8 6a a2 5b ff 0f 0b e8 63 a2 5b ff 0f 0b e8 5c a2 5b ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 1544.278480][T19437] RSP: 0018:ffffc90005e276c0 EFLAGS: 00010293 [ 1544.291863][T19437] RAX: ffffffff8226d154 RBX: 0000009410000000 RCX: ffff888026e45940 [ 1544.304399][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 1544.305470][T15890] Bluetooth: hci4: command 0x0c1a tx timeout [ 1544.310543][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 1544.316781][T19437] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1544.344314][T19437] RBP: ffffc90005e27a30 R08: ffff88807dcb8a5f R09: 1ffff1100fb9714b [ 1544.352415][T19437] R10: dffffc0000000000 R11: ffffed100fb9714c R12: 1ffff92000bc4f84 [ 1544.382689][T19437] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88804078e000 [ 1544.394149][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout [ 1544.404483][T19437] FS: 0000555580c9f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1544.413484][T19437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1544.421807][T19437] CR2: 00007ffe04fecdb0 CR3: 000000001fb1c000 CR4: 00000000003506e0 [ 1544.430421][T19437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1544.440045][T19437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1544.455248][T19437] Kernel panic - not syncing: Fatal exception [ 1544.462125][T19437] Kernel Offset: disabled [ 1544.466528][T19437] Rebooting in 86400 seconds..