last executing test programs: 6.408617357s ago: executing program 3 (id=1422): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x2000040, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 6.280512696s ago: executing program 3 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x109) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7", 0x1c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a1047", 0x49}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/82, 0x52}], 0x1}, 0x0) 6.207520491s ago: executing program 1 (id=1426): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) setresuid(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 5.439783984s ago: executing program 2 (id=1428): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="200000002f00010000000000fcdbdf251000f2800c00180008"], 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) read(r0, &(0x7f0000000200)=""/61, 0x3d) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340), 0x0) 5.391393627s ago: executing program 3 (id=1430): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 5.339120611s ago: executing program 1 (id=1432): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_CONFIGURE(r0, 0xc030128a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a31000000000800034000000001090001007379"], 0x34}}, 0x0) 2.400867834s ago: executing program 3 (id=1433): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000100)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000001140)="$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") socket(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x107) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000100)=r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r5, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r5, r4, 0x0, 0x3ffff) 2.398579674s ago: executing program 0 (id=1444): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2.397706684s ago: executing program 1 (id=1434): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x2000040, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 2.397549224s ago: executing program 2 (id=1435): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) syz_io_uring_setup(0x5d99, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.176654479s ago: executing program 0 (id=1437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 2.061872567s ago: executing program 2 (id=1438): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x1, 0x1d, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc175845e997f8169837a09b4366393e"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc81fec117070b98e80e0a320b181ce8d00c174c2376f1fea6d6b073b73a76fb67914798ce622cbefd9a4e7b04d1616c96014a6df257b916e53a848ad10233cfd5ffde3c7aa01bfe75b39f97874fa59a203c2e2a35d427c34beb3ba2e8132ffa6e9bbbe9d981660f02afc26beec7848009c8a820763f138204445d36eabd6c87eaabfbe90c8ad0293b80f274f43"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r4, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.705880062s ago: executing program 1 (id=1439): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000280)) 1.643693616s ago: executing program 0 (id=1441): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x7, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0x0, 0x460c6}, 0x7, 0x700}}) 1.612153679s ago: executing program 4 (id=1443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa) 1.267131453s ago: executing program 0 (id=1445): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000100)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000001140)="$eJzs3M9LI2cYwPEnMcYkosmhtLRQfGkv7WXQtOfSUBRKAxU1pVoQRp3YkGkimWCJlKqnXkvvPZX2IB69Ca3/gJfe2ste9pbLwh5WlmVnmV8mmfgjhrhx9fsBmTfv+z6Zd+Z9I88MmTS//fWHctHSinpdogklERGRM5GMRCUQ8bdRtxyXdnvy8fjT/95fXF75KpfPzy4oNZdb+iSrlJqc+vvHn5J+t+MxOc2sNp9kH5++ffpu8+XS9yVLlSxVqdaVrtaqj+r6mmmojZJV1pSaNw3dMlSpYhk1r73qtRfN6tZWQ+mVjYnUVs2wLKVXGqpsNFS9quq1htI39VJFaZqmJlKCazgTuqDn+oxeH/BocEtqtZw+IiLJrpbCwVAGBAAAhiqc/0edlL6v/F8m3fzf6dzK/w8/OKmPf3M0eezErjaP4xfl/5/+771XR/6fEJF+8v/f5Qb5f3dG9LAUDhb6z/9xN0zFu6oiHa+c/D/lf35d+98dTrsF8n8AAAAAAAAAAAAAAAAAAAAAAN4EZ7adtm07HWyDv9YjBP5r3EuXzf+YiCSc2beZ//tscXlFEu6De84cm79sF7YL3tbvcCIiphgyLWl54a4Hn1MOnjxSjoz8Y+668c+d7YjbkitKyY2fkbRkwvG2PfdlfnZGefz488eUUu3xWUnLWxfHZzvjnfHvbhfi8tGHbfGapOXfdamKKRvuum7F/zyj1Bdf50PxSW8nAAAAAADcA5pSkT9V6PpdWtfvmqYCoXbvV0ZyRfc20SX3B7zr6+kLr89j6fdiwz56AAAAAAAeBquxU9ZN06hdUUjK9X36L8R66xwP1Yxe1Xmk7Qh7HU/cvZExvrO5dJOo7sIfPZ7VjkLwRYqOpoRf2d/pDY5/YPO1114TlR6iYuHBTzkV6oZ73/cP5LwmuG0Uv+Q8y3z3+0SvmNPRga3nd37769ngPiCfHQUr4PrO+/3uKxFedW5h9Nb/8QAAAAB47VpJf1DzeXtzZCiDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADggbmVn/QLFYZ9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBd8SoAAP//c7z5SQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x107) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r4, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r4, r3, 0x0, 0x3ffff) 1.232885485s ago: executing program 3 (id=1446): syz_mount_image$efs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340), 0x1, 0x290, &(0x7f0000000380)="$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") 1.172123879s ago: executing program 1 (id=1447): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r1, &(0x7f0000000140)=""/245, 0xf5, 0x4) 1.171909119s ago: executing program 3 (id=1448): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.102083254s ago: executing program 1 (id=1449): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 1.101148284s ago: executing program 4 (id=1450): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) syz_io_uring_setup(0x5d99, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.060709247s ago: executing program 2 (id=1451): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x2000040, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 688.657682ms ago: executing program 4 (id=1452): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) listen(r0, 0xfffffffb) 667.999544ms ago: executing program 2 (id=1453): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 611.897748ms ago: executing program 4 (id=1454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 593.948409ms ago: executing program 2 (id=1455): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x7, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0x0, 0x460c6}, 0x7, 0x700}}) 504.908835ms ago: executing program 4 (id=1456): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7", 0x1c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a1047", 0x49}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/82, 0x52}], 0x1}, 0x0) 477.983297ms ago: executing program 4 (id=1457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 87.459984ms ago: executing program 0 (id=1458): syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0xc5a, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYBLOB="527aba7f34c75b760c24c172d26cedacfd7826b7584ab27c0f589ae09bc43513eb03a5391266f5d82d8b0f50fae8eed190793aac28b51c57df8f0fd700d2a0b9dbe32283b43aa4da6a3039bab48400d7c91de788f1b6029064c41fadddcd1849b09c2a9486603222db7e31746c9dbcc4ecc4270e52c8f1fe03ad9b70b8d02390955ff1fea8ffc0644bd58174ded0206e65018cd8ba58126e4a8779ed67108b3a2bfad50d129d4e5a15e77fb1e6b7c6dd49386579afd64207d2259f47595a6301b1f216f4cfc874976bfd8d335dae12eca4bb034bfb341f84cd", @ANYRES16=0x0], 0x2, 0x5c8, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1459): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000005c0)={[{@sysvgroups}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0xa1) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) accept4$alg(r2, 0x0, 0x0, 0x80000) kernel console output (not intermixed with test programs): using interface batadv_slave_0 (retrying later): interface not active [ 33.303886][ T4323] device hsr_slave_0 entered promiscuous mode [ 33.343002][ T4323] device hsr_slave_1 entered promiscuous mode [ 33.382876][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.384173][ T4323] Cannot create hsr debugfs directory [ 33.424575][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.463070][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.502807][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.504401][ T4321] Cannot create hsr debugfs directory [ 33.507570][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.508703][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.513146][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.573968][ T4330] device hsr_slave_0 entered promiscuous mode [ 33.612967][ T4330] device hsr_slave_1 entered promiscuous mode [ 33.652784][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.653971][ T4330] Cannot create hsr debugfs directory [ 33.713835][ T4328] device hsr_slave_0 entered promiscuous mode [ 33.752909][ T4328] device hsr_slave_1 entered promiscuous mode [ 33.792782][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.793935][ T4328] Cannot create hsr debugfs directory [ 33.900428][ T4322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.933927][ T4322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.975419][ T4321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.013804][ T4321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.055829][ T4322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.094084][ T4321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.145477][ T4322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.195468][ T4321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.245661][ T4323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.284549][ T4323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.328555][ T4323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.371154][ T4323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.428632][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.474508][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.529741][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.567651][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.595170][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.624148][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.666877][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.706270][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.733114][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 34.734225][ T4327] Bluetooth: hci3: command 0x0409 tx timeout [ 34.735282][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 34.736305][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 34.737319][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 34.751051][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.757929][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.767937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.769896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.778556][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.780692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.782257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.785750][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.796626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.798169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.799938][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.801142][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.806038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.807608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.809381][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.810509][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.819837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.821385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.823213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.824698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.826144][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.827426][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.828882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.830390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.831902][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.833163][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.842685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.845362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.847021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.848653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.850317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.852272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.855639][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.856881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.861995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.863715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.865318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.866908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.868684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.879066][ T4322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.880628][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.886222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.887802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.889335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.890859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.892599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.897428][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.899034][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.900396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.901796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.905294][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.906844][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.910175][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.912186][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.914856][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.919287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.920878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.922283][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.926804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.928135][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.929232][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.930921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.932363][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.935444][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.936639][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.938046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.947743][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.956294][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.959263][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.964637][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.968624][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.970056][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.971473][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.976357][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.978222][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.979941][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.983676][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.988270][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.989790][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.991413][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.000789][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.002357][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.004198][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.005369][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.006699][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.008335][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.009781][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.010790][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.012259][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.015968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.026119][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.028440][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.029688][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.030947][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.032598][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.035155][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.036565][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.039745][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.044732][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.047623][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.052206][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.054540][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.056004][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.057197][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.062826][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.064232][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.065680][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.067153][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.068333][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.069685][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.070997][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.072326][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.077040][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.078888][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.080434][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.089335][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.091164][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.095697][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.097180][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.103773][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.105476][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.106975][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.108462][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.109892][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.111337][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.121959][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.124074][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.126738][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.129207][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.130875][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.132379][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.134439][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.135849][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.137430][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.139250][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.140821][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.145252][ T4322] device veth0_vlan entered promiscuous mode [ 35.147800][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.149317][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.150706][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.156317][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.162704][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.164683][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.169311][ T4322] device veth1_vlan entered promiscuous mode [ 35.184315][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.185845][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.187086][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.197084][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.198673][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.200253][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.204154][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.225692][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.227188][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.231479][ T4322] device veth0_macvtap entered promiscuous mode [ 35.235222][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.236686][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.238275][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.240901][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.242246][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.251524][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.255922][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.258246][ T4321] device veth0_vlan entered promiscuous mode [ 35.261292][ T4321] device veth1_vlan entered promiscuous mode [ 35.265205][ T4322] device veth1_macvtap entered promiscuous mode [ 35.271931][ T4323] device veth0_vlan entered promiscuous mode [ 35.276538][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.278048][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.279447][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.280919][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.282425][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.284876][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.286885][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.296606][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.301727][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.304866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.306157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.307418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.308600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.313659][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.318264][ T4323] device veth1_vlan entered promiscuous mode [ 35.319605][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.321102][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.322590][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.326707][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.328384][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.331091][ T4321] device veth0_macvtap entered promiscuous mode [ 35.334507][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.336681][ T4322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.338081][ T4322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.339466][ T4322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.340821][ T4322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.354665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.356114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.357626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.360176][ T4321] device veth1_macvtap entered promiscuous mode [ 35.374293][ T4323] device veth0_macvtap entered promiscuous mode [ 35.377328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.378973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.380483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.381917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.384739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.386375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.394266][ T4323] device veth1_macvtap entered promiscuous mode [ 35.396788][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.398416][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.400545][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.402038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.403768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.405220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.407126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.439474][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.441232][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.443866][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.445143][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.446849][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.449146][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.450766][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.452242][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.454572][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.456759][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.457971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.459593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.463921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.465638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.468251][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.469686][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.471095][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.472502][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.475799][ T4330] device veth0_vlan entered promiscuous mode [ 35.477730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.479191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.490111][ T4330] device veth1_vlan entered promiscuous mode [ 35.497540][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.499127][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.500949][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.503422][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.505117][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.506731][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.508417][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.510468][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.511644][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.514588][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.525991][ T1697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.527215][ T1697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.535710][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.537215][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.538648][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.540133][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.541928][ T4323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.544394][ T4323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.545894][ T4323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.547219][ T4323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.556314][ T4330] device veth0_macvtap entered promiscuous mode [ 35.571057][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.572323][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.575277][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.576481][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.579738][ T4330] device veth1_macvtap entered promiscuous mode [ 35.584190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.585632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.587026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.588494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.589844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.591386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.593584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.594989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.601747][ T4328] device veth0_vlan entered promiscuous mode [ 35.604277][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.605489][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.608854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.627217][ T4328] device veth1_vlan entered promiscuous mode [ 35.637274][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.639001][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.640583][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.642240][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.644813][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.646517][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.649095][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.652817][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.654286][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.655731][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.657232][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.659799][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.660959][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.662842][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.670587][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.672240][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.678658][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.680297][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.681994][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.683800][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.686239][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.692275][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.694512][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.728667][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.729939][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.731740][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.735746][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.737097][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.738587][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.740034][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.745990][ T4328] device veth0_macvtap entered promiscuous mode [ 35.753993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.755673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.757329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.765722][ T4328] device veth1_macvtap entered promiscuous mode [ 35.794546][ T4402] device syzkaller0 entered promiscuous mode [ 35.828117][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.829808][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.831367][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.843671][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.845563][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.847280][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.853156][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.854912][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.860829][ T4411] loop2: detected capacity change from 0 to 1024 [ 35.862247][ T4411] ======================================================= [ 35.862247][ T4411] WARNING: The mand mount option has been deprecated and [ 35.862247][ T4411] and is ignored by this kernel. Remove the mand [ 35.862247][ T4411] option from the mount to silence this warning. [ 35.862247][ T4411] ======================================================= [ 35.869211][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.871480][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.873936][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.875410][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.876308][ T4411] EXT4-fs: inline encryption not supported [ 35.877666][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.880081][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.881718][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.883821][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.885560][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.888894][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.890627][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.892174][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.897369][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.899264][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.903407][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.913470][ T4411] EXT4-fs error (device loop2): __ext4_iget:5091: inode #2: block 127754: comm syz.2.7: invalid block [ 35.919518][ T4411] EXT4-fs (loop2): get root inode failed [ 35.920544][ T4411] EXT4-fs (loop2): mount failed [ 36.011877][ T1697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.013210][ T1697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.024149][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025494][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.026844][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.028218][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.146845][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.155298][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.156648][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.159254][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.087234][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.088501][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.102970][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.126799][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.128214][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.129494][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.169350][ T4429] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11'. [ 37.247220][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 37.248172][ T4329] Bluetooth: hci2: command 0x041b tx timeout [ 37.249198][ T4329] Bluetooth: hci4: command 0x041b tx timeout [ 37.250219][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 37.251160][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 37.344375][ T4440] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 37.395355][ T4448] loop0: detected capacity change from 0 to 512 [ 37.401973][ T4448] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.407996][ T4448] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 37.409628][ T4448] System zones: 0-1, 15-15, 18-18, 34-34 [ 37.411083][ T4448] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.413160][ T4448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13: bg 0: block 40: padding at end of block bitmap is not set [ 37.416223][ T4448] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 37.417911][ T4448] EXT4-fs (loop0): 1 truncate cleaned up [ 37.418959][ T4448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.428501][ T4448] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.13: bad symlink. [ 37.441329][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 37.598818][ T4456] hub 8-0:1.0: USB hub found [ 37.600560][ T4456] hub 8-0:1.0: 8 ports detected [ 37.817044][ T4457] capability: warning: `syz.0.14' uses 32-bit capabilities (legacy support in use) [ 37.948127][ T4474] loop1: detected capacity change from 0 to 1024 [ 37.979564][ T4474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.005826][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.016990][ T4474] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 38.019865][ T4474] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.019865][ T4474] [ 38.024779][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.027724][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.032649][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.037714][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.040094][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.057767][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.063492][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.067004][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.072593][ T4474] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.19: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.126925][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 38.269086][ T4510] loop0: detected capacity change from 0 to 1024 [ 38.269343][ T4508] device syzkaller0 entered promiscuous mode [ 38.304954][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.320114][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.322139][ T4510] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 38.324459][ T4510] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.324459][ T4510] [ 38.327619][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.330048][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.332452][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.339570][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.342012][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.344511][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.346771][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.349425][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.351984][ T4510] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.405120][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 38.439608][ T4516] netlink: 168 bytes leftover after parsing attributes in process `syz.0.23'. [ 39.377262][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 39.378483][ T4327] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 39.379899][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 39.382406][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 39.383923][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 39.385127][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 39.758896][ T4534] netlink: 'syz.4.26': attribute type 1 has an invalid length. [ 39.865443][ T4536] loop1: detected capacity change from 0 to 128 [ 39.867489][ T4536] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 39.873476][ T4536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.910296][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 40.150921][ T4553] IPVS: sh: FWM 3 0x00000003 - no destination available [ 40.160167][ T4556] loop4: detected capacity change from 0 to 512 [ 40.175882][ T4556] ext3: Unknown parameter 'fowner' [ 40.185763][ T4558] loop0: detected capacity change from 0 to 1024 [ 40.208799][ T4560] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 40.218351][ T4558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.241435][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.250947][ T4558] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 40.253318][ T4558] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.253318][ T4558] [ 40.259324][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.261700][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.265250][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.267674][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.270041][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.283352][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.295618][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.303923][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.307194][ T4566] loop4: detected capacity change from 0 to 128 [ 40.311932][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.38: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.312500][ T4566] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 40.321008][ T4566] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.342033][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 40.343713][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 40.362172][ T4570] loop1: detected capacity change from 0 to 1024 [ 40.379743][ T4573] loop0: detected capacity change from 0 to 1024 [ 40.381756][ T4570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.388749][ T4570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.394451][ T4570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.407795][ T4573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.412122][ T4573] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.52: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.416309][ T4573] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 40.426379][ T4573] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.426379][ T4573] [ 40.463117][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 40.504435][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 40.716588][ T4596] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 40.731342][ T4598] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 40.735795][ T4598] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.736025][ T4311] udevd[4311]: incorrect ext4 checksum on /dev/loop0 [ 40.750691][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 40.897738][ T4605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.902455][ T4605] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.56: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.926140][ T4605] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 40.928277][ T4605] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.928277][ T4605] [ 40.951946][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 41.044571][ T4614] set_capacity_and_notify: 2 callbacks suppressed [ 41.044581][ T4614] loop4: detected capacity change from 0 to 1024 [ 41.047005][ T4614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.078022][ T4614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.103069][ T4614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.148031][ T4628] loop3: detected capacity change from 0 to 128 [ 41.156703][ T4628] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 41.178362][ T4628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.195337][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 41.218197][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 41.245849][ T4634] loop4: detected capacity change from 0 to 1024 [ 41.276915][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.282064][ T4634] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.68: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.289034][ T4634] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.292055][ T4634] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.292055][ T4634] [ 41.308512][ T4638] loop3: detected capacity change from 0 to 1024 [ 41.339557][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 41.348497][ T4638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.353662][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.359503][ T4638] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.361723][ T4638] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.361723][ T4638] [ 41.374440][ T4644] loop4: detected capacity change from 0 to 512 [ 41.377658][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.380184][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.383673][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.389230][ T4644] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.390480][ T4644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 41.391824][ T4644] System zones: 0-1, 15-15, 18-18, 34-34 [ 41.395960][ T4644] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.397883][ T4644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.71: bg 0: block 40: padding at end of block bitmap is not set [ 41.400424][ T4644] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 41.402048][ T4644] EXT4-fs (loop4): 1 truncate cleaned up [ 41.402993][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.408576][ T4644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.415539][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.418181][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.426653][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.438933][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.451991][ T4638] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.70: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.463286][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 41.464374][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 41.465364][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 41.467194][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 41.467405][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 41.468256][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 41.559958][ T4649] loop1: detected capacity change from 0 to 512 [ 41.571219][ T4649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.581567][ T4649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.611985][ T4649] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.638610][ T4649] EXT4-fs (loop1): 1 truncate cleaned up [ 41.639546][ T4649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.686933][ T4649] mmap: syz.1.73 (4649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.733405][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 41.894233][ T4661] hub 8-0:1.0: USB hub found [ 41.895856][ T4661] hub 8-0:1.0: 8 ports detected [ 42.154972][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 42.172985][ T4669] loop3: detected capacity change from 0 to 128 [ 42.174858][ T4669] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 42.186281][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.200342][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 42.233995][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 42.249252][ T4676] loop3: detected capacity change from 0 to 1024 [ 42.255121][ T4676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.258737][ T4676] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.267442][ T4676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.315801][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 42.340718][ T4681] loop1: detected capacity change from 0 to 1024 [ 42.376799][ T4681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.401129][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 42.473084][ T4693] loop3: detected capacity change from 0 to 512 [ 42.488500][ T4693] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.489874][ T4693] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 42.491456][ T4693] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.493848][ T4693] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.498000][ T4693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.86: bg 0: block 40: padding at end of block bitmap is not set [ 42.503751][ T4693] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 42.505490][ T4693] EXT4-fs (loop3): 1 truncate cleaned up [ 42.510173][ T4693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.567016][ T4700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.577632][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.584021][ T4700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 42.585966][ T4700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.585966][ T4700] [ 42.597394][ T4710] Zero length message leads to an empty skb [ 42.603749][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.615336][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.622033][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.625006][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 42.629533][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.632184][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.648323][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.655659][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.658200][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.661231][ T4700] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.89: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.839435][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 43.543409][ T4332] Bluetooth: hci0: command 0x0401 tx timeout [ 43.801018][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 43.833773][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.865559][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 43.996960][ T4755] device syzkaller0 entered promiscuous mode [ 44.013064][ T4752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.047047][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 44.077433][ T4764] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 44.154688][ T4774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.159217][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.161638][ T4774] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.164293][ T4774] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.164293][ T4774] [ 44.166883][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.169259][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.171615][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.174239][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.176794][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.179144][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.181503][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.192032][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.208946][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.257348][ T4785] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 44.278924][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.320511][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 44.415109][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.450111][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 44.526656][ T4802] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 44.851898][ T4822] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 44.887451][ T4822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.011007][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 45.047071][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 45.085583][ T4834] netlink: 168 bytes leftover after parsing attributes in process `syz.2.139'. [ 45.108303][ T4838] device syzkaller0 entered promiscuous mode [ 45.209571][ T4848] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 45.285186][ T4853] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 45.296788][ T4853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.308635][ T4322] EXT4-fs (loop2): unmounting filesystem. [ 45.426915][ T4860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.431169][ T4860] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.453398][ T4860] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 45.455408][ T4860] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.455408][ T4860] [ 45.465608][ T4865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.471734][ T4860] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.498844][ T4870] netlink: 168 bytes leftover after parsing attributes in process `syz.4.153'. [ 45.500869][ T4860] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.512837][ T4857] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.515249][ T4857] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.521756][ T4860] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.527553][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 45.545906][ T4860] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.555605][ T4873] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.579460][ T4873] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.596424][ T4860] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.149: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.905754][ T4882] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 46.102628][ T4882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.140567][ T4322] EXT4-fs (loop2): unmounting filesystem. [ 46.225334][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 46.497470][ T4899] device syzkaller0 entered promiscuous mode [ 46.572705][ T4901] set_capacity_and_notify: 10 callbacks suppressed [ 46.572714][ T4901] loop1: detected capacity change from 0 to 1024 [ 46.612141][ T4901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.613538][ T4905] netlink: 168 bytes leftover after parsing attributes in process `syz.4.165'. [ 46.620594][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.636841][ T4901] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 46.638930][ T4901] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.638930][ T4901] [ 46.646476][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.659631][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.667608][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.672569][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.722006][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.731791][ T4912] loop0: detected capacity change from 0 to 128 [ 46.735408][ T4901] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.164: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.761854][ T4912] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 46.785004][ T4912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.796067][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 46.860484][ T4917] loop1: detected capacity change from 0 to 1024 [ 46.875463][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 46.895346][ T4921] loop0: detected capacity change from 0 to 512 [ 46.932559][ T4917] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.943037][ T4917] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 46.945080][ T4917] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.945080][ T4917] [ 46.946081][ T4919] loop4: detected capacity change from 0 to 4096 [ 46.948046][ T4917] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.959063][ T4917] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.961482][ T4917] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.971085][ T4917] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.974871][ T9] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 46.978134][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 46.984776][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.984776][ T9] [ 46.986388][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 46.987361][ T9] EXT4-fs (loop0): Free/Dirty block details [ 46.988434][ T9] EXT4-fs (loop0): free_blocks=65280 [ 46.989294][ T9] EXT4-fs (loop0): dirty_blocks=33 [ 46.990052][ T9] EXT4-fs (loop0): Block reservation details [ 46.991011][ T9] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 47.015915][ T4916] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.023334][ T4916] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.037479][ T4917] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.063018][ T4931] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.068551][ T4931] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.170: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.117755][ T4935] netlink: 168 bytes leftover after parsing attributes in process `syz.4.176'. [ 47.372593][ T4945] loop4: detected capacity change from 0 to 1024 [ 47.407173][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.423813][ T4945] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.426711][ T4945] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.426711][ T4945] [ 47.429073][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.436326][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.462890][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.465458][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.468151][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.486691][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.500465][ T4952] loop0: detected capacity change from 0 to 128 [ 47.515673][ T4952] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 47.664476][ T4955] device syzkaller0 entered promiscuous mode [ 47.798898][ T4964] netlink: 64 bytes leftover after parsing attributes in process `syz.1.187'. [ 47.819858][ T4966] netlink: 168 bytes leftover after parsing attributes in process `syz.3.188'. [ 47.930442][ T4975] loop2: detected capacity change from 0 to 1024 [ 47.970819][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.972497][ T4981] loop3: detected capacity change from 0 to 128 [ 47.977803][ T4975] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.979736][ T4975] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.979736][ T4975] [ 47.982103][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.986145][ T4980] loop4: detected capacity change from 0 to 1024 [ 47.989983][ T4981] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 47.991788][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.996766][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.999493][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.001872][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.006445][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.011627][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.014523][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.020493][ T4975] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.193: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.031027][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.033507][ T4980] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.035579][ T4980] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.035579][ T4980] [ 48.043584][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.052825][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.058568][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.071264][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.085325][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.091285][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.098050][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.101602][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.112604][ T4994] device syzkaller0 entered promiscuous mode [ 48.117588][ T4980] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.460828][ T5002] netlink: 168 bytes leftover after parsing attributes in process `syz.2.200'. [ 48.527096][ T5006] device syzkaller1 entered promiscuous mode [ 48.789221][ T5037] netlink: 168 bytes leftover after parsing attributes in process `syz.4.214'. [ 48.828098][ T5043] device syzkaller0 entered promiscuous mode [ 49.188269][ T5070] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.258945][ T5073] netlink: 168 bytes leftover after parsing attributes in process `syz.0.230'. [ 49.821598][ T5095] device syzkaller0 entered promiscuous mode [ 49.899176][ T5101] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 49.927395][ T5101] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 49.985934][ T5106] netlink: 168 bytes leftover after parsing attributes in process `syz.3.243'. [ 50.262488][ T5125] EXT4-fs: Ignoring removed bh option [ 50.267677][ T5125] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 50.297893][ T5125] EXT4-fs (loop0): 1 truncate cleaned up [ 50.356153][ T5133] netlink: 204 bytes leftover after parsing attributes in process `syz.3.253'. [ 50.366348][ T5133] netlink: 84 bytes leftover after parsing attributes in process `syz.3.253'. [ 50.936292][ T5180] netlink: 168 bytes leftover after parsing attributes in process `syz.0.275'. [ 51.189594][ T5209] netlink: 168 bytes leftover after parsing attributes in process `syz.4.287'. [ 51.484808][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.490120][ T5221] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 51.500043][ T5221] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.500043][ T5221] [ 51.505122][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.511787][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.529307][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.539109][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.545953][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.551684][ T5221] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.626313][ T5233] set_capacity_and_notify: 13 callbacks suppressed [ 51.626322][ T5233] loop4: detected capacity change from 0 to 512 [ 51.633643][ T5233] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.650272][ T5233] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 51.653180][ T5233] Quota error (device loop4): write_blk: dquota write failed [ 51.654488][ T5233] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 51.655963][ T5233] Quota error (device loop4): write_blk: dquota write failed [ 51.657181][ T5233] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 51.658894][ T5233] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.297: Failed to acquire dquot type 1 [ 51.661722][ T5233] EXT4-fs (loop4): 1 truncate cleaned up [ 52.117055][ T5274] netlink: 'syz.1.315': attribute type 4 has an invalid length. [ 52.128187][ T5274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 53.240041][ T5302] __nla_validate_parse: 3 callbacks suppressed [ 53.240051][ T5302] netlink: 168 bytes leftover after parsing attributes in process `syz.0.326'. [ 53.431946][ T5324] loop1: detected capacity change from 0 to 512 [ 53.464336][ T5328] loop4: detected capacity change from 0 to 512 [ 53.472432][ T5324] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 53.475829][ T5324] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 53.478502][ T5324] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.337: inode has both inline data and extents flags [ 53.481861][ T5324] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.337: couldn't read orphan inode 13 (err -117) [ 53.487897][ T5328] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.338: inode #1: comm syz.4.338: iget: illegal inode # [ 53.495929][ T5328] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.338: error while reading EA inode 1 err=-117 [ 53.500571][ T5328] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.338: inode #1: comm syz.4.338: iget: illegal inode # [ 53.509850][ T5328] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.338: error while reading EA inode 1 err=-117 [ 53.827190][ T5328] EXT4-fs (loop4): 1 orphan inode deleted [ 53.925757][ T5342] netlink: 168 bytes leftover after parsing attributes in process `syz.2.343'. [ 54.353621][ T5357] loop4: detected capacity change from 0 to 1024 [ 54.508386][ T5380] netlink: 168 bytes leftover after parsing attributes in process `syz.2.358'. [ 54.510966][ T5379] tipc: Invalid UDP bearer configuration [ 54.510991][ T5379] tipc: Enabling of bearer rejected, failed to enable media [ 54.567300][ T5387] loop2: detected capacity change from 0 to 256 [ 54.582467][ T5387] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 54.586273][ T5387] FAT-fs (loop2): Filesystem has been set read-only [ 54.587366][ T5387] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 54.615155][ T5391] loop4: detected capacity change from 0 to 1024 [ 54.639188][ T5393] loop3: detected capacity change from 0 to 1024 [ 54.644951][ T5393] EXT4-fs: Ignoring removed bh option [ 54.653607][ T5393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.655542][ T5393] EXT4-fs: test_dummy_encryption requires encrypt feature [ 54.689244][ T5401] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 54.702497][ T5401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.738159][ T5401] bond1: (slave veth0_to_bond): making interface the new active one [ 54.740379][ T5401] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 54.742000][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 54.866541][ T5415] netlink: 168 bytes leftover after parsing attributes in process `syz.0.374'. [ 54.989695][ T5425] loop2: detected capacity change from 0 to 1024 [ 55.231182][ T5448] netlink: 168 bytes leftover after parsing attributes in process `syz.2.388'. [ 55.730252][ T5460] loop3: detected capacity change from 0 to 1024 [ 55.888337][ T5475] netlink: 168 bytes leftover after parsing attributes in process `syz.4.399'. [ 56.075059][ T5490] loop1: detected capacity change from 0 to 1024 [ 56.143132][ T5503] netlink: 168 bytes leftover after parsing attributes in process `syz.1.411'. [ 56.243775][ T5512] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 56.245340][ T5512] System zones: 0-2, 18-18, 34-34 [ 56.264653][ T5512] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 56.269645][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.280528][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.416: corrupted inode contents [ 56.291516][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.297601][ T5512] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #16: comm syz.1.416: mark_inode_dirty error [ 56.308803][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.318091][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.416: corrupted inode contents [ 56.330851][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.339796][ T5512] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.416: mark_inode_dirty error [ 56.352311][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.360778][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.416: corrupted inode contents [ 56.365407][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.367600][ T5512] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.416: mark_inode_dirty error [ 56.371998][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.377267][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.416: corrupted inode contents [ 56.381396][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.384658][ T5512] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 56.390799][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.409069][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.416: corrupted inode contents [ 56.416308][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.417346][ T5512] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.416: mark_inode_dirty error [ 56.420663][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.421718][ T5512] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 56.424694][ T5512] EXT4-fs (loop1): Remounting filesystem read-only [ 56.426419][ T5512] EXT4-fs (loop1): 1 truncate cleaned up [ 56.450103][ T1697] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 56.451902][ T1697] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 1 [ 56.454997][ T1697] EXT4-fs (loop1): Remounting filesystem read-only [ 56.510058][ T5536] netlink: 168 bytes leftover after parsing attributes in process `syz.3.424'. [ 56.692215][ T5552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.433'. [ 56.751331][ T5332] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xcb [ 56.759969][ T5564] netlink: 168 bytes leftover after parsing attributes in process `syz.1.436'. [ 57.519046][ T5554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.656970][ T5602] device veth0 entered promiscuous mode [ 57.658695][ T5600] device veth0 left promiscuous mode [ 57.723212][ T5609] set_capacity_and_notify: 3 callbacks suppressed [ 57.723221][ T5609] loop4: detected capacity change from 0 to 1024 [ 58.147783][ T5633] loop4: detected capacity change from 0 to 1024 [ 58.149382][ T5633] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.150913][ T5633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.156761][ T5633] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #11: comm syz.4.462: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 58.160571][ T5633] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.462: couldn't read orphan inode 11 (err -117) [ 58.400290][ T5645] loop0: detected capacity change from 0 to 1024 [ 58.496325][ T5654] device syzkaller0 entered promiscuous mode [ 58.558324][ T5658] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 58.616980][ T5664] __nla_validate_parse: 2 callbacks suppressed [ 58.616990][ T5664] netlink: 168 bytes leftover after parsing attributes in process `syz.4.474'. [ 58.706043][ T5677] loop1: detected capacity change from 0 to 1024 [ 58.713441][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 58.925009][ T5692] team0 (unregistering): Port device team_slave_0 removed [ 58.935845][ T5692] team0 (unregistering): Port device team_slave_1 removed [ 59.037130][ T5705] netlink: 168 bytes leftover after parsing attributes in process `syz.2.492'. [ 59.040697][ T5707] loop0: detected capacity change from 0 to 128 [ 59.042094][ T5707] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.044597][ T5707] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.091555][ T5711] loop0: detected capacity change from 0 to 1024 [ 59.161176][ T5711] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.495: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.165929][ T5711] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 59.167963][ T5711] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.167963][ T5711] [ 59.212063][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 59.529021][ T5738] netlink: 168 bytes leftover after parsing attributes in process `syz.3.506'. [ 60.631959][ T5778] netlink: 168 bytes leftover after parsing attributes in process `syz.1.518'. [ 60.890806][ T5793] loop1: detected capacity change from 0 to 1024 [ 60.976379][ T5793] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.528: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.981206][ T5793] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 60.994451][ T5793] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.994451][ T5793] [ 61.082936][ T5810] device syzkaller0 entered promiscuous mode [ 61.089419][ T5809] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 61.185441][ T5809] loop1: detected capacity change from 0 to 128 [ 61.189650][ T5809] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.533: No space for directory leaf checksum. Please run e2fsck -D. [ 61.192170][ T5809] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.533: Directory block failed checksum [ 61.269656][ T5814] netlink: 168 bytes leftover after parsing attributes in process `syz.2.534'. [ 61.671051][ T5670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.250286][ T5839] loop4: detected capacity change from 0 to 1024 [ 62.527744][ T5850] netlink: 168 bytes leftover after parsing attributes in process `syz.1.545'. [ 62.570357][ T5839] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.543: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.591323][ T5839] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 62.595403][ T5839] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.595403][ T5839] [ 63.442128][ T5871] tipc: Started in network mode [ 63.444335][ T5871] tipc: Node identity 66a536550ca4, cluster identity 4711 [ 63.445574][ T5871] tipc: Enabled bearer , priority 0 [ 63.447217][ T5872] device syzkaller0 entered promiscuous mode [ 63.459956][ T5879] tipc: Resetting bearer [ 63.482705][ T5866] tipc: Resetting bearer [ 63.515959][ T5866] tipc: Disabling bearer [ 63.523655][ T5891] netlink: 168 bytes leftover after parsing attributes in process `syz.2.559'. [ 63.600693][ T5895] netlink: 168 bytes leftover after parsing attributes in process `syz.1.570'. [ 63.639377][ T5900] loop3: detected capacity change from 0 to 1024 [ 63.692618][ T5906] loop4: detected capacity change from 0 to 512 [ 63.699892][ T5906] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.702080][ T5906] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.726645][ T5906] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 4: comm syz.4.563: lblock 0 mapped to illegal pblock 4 (length 1) [ 64.098168][ T5906] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.563: error -117 reading directory block [ 64.107408][ T5906] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 64.207152][ T5900] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.561: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.210393][ T5900] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 64.212566][ T5900] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.212566][ T5900] [ 64.381916][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 64.494286][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495426][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.619258][ T5938] netlink: 168 bytes leftover after parsing attributes in process `syz.3.575'. [ 64.664968][ T5940] loop0: detected capacity change from 0 to 1024 [ 64.666516][ T5940] EXT4-fs: Ignoring removed bh option [ 64.671065][ T5940] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.685339][ T5940] EXT4-fs: test_dummy_encryption requires encrypt feature [ 64.710255][ T5945] loop3: detected capacity change from 0 to 512 [ 64.715599][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 64.796046][ T5957] loop3: detected capacity change from 0 to 1024 [ 64.951705][ T5972] netlink: 168 bytes leftover after parsing attributes in process `syz.0.588'. [ 65.048028][ T5980] loop4: detected capacity change from 0 to 1024 [ 65.055880][ T5982] loop0: detected capacity change from 0 to 164 [ 65.124364][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 65.300356][ T6000] netlink: 168 bytes leftover after parsing attributes in process `syz.4.599'. [ 65.389454][ T6006] loop1: detected capacity change from 0 to 1024 [ 65.660190][ T6023] loop1: detected capacity change from 0 to 512 [ 65.680301][ T6023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.681747][ T6023] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 65.695726][ T6023] System zones: 0-1, 15-15, 18-18, 34-34 [ 65.697120][ T6023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.698900][ T6023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.604: bg 0: block 40: padding at end of block bitmap is not set [ 65.702200][ T6023] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 65.704163][ T6023] EXT4-fs (loop1): 1 truncate cleaned up [ 65.724989][ T6023] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 65.727862][ T6023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.729170][ T6023] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e018, mo2=0002] [ 66.621070][ T6040] netlink: 168 bytes leftover after parsing attributes in process `syz.3.612'. [ 66.648366][ T6045] loop0: detected capacity change from 0 to 1024 [ 66.836785][ T6073] netlink: 168 bytes leftover after parsing attributes in process `syz.0.627'. [ 67.224627][ T6106] netlink: 168 bytes leftover after parsing attributes in process `syz.1.641'. [ 67.290664][ T6105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.291927][ T6105] EXT4-fs: Ignoring removed i_version option [ 67.303852][ T6105] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096) [ 67.378602][ T6113] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 67.556833][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 67.731892][ T6146] EXT4-fs mount: 88 callbacks suppressed [ 67.731904][ T6146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.836671][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 68.134220][ T6185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.396022][ T4322] EXT4-fs (loop2): unmounting filesystem. [ 68.790089][ T6220] device syzkaller0 entered promiscuous mode [ 68.840468][ T6222] set_capacity_and_notify: 5 callbacks suppressed [ 68.840499][ T6222] loop1: detected capacity change from 0 to 1024 [ 68.876079][ T6222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.897877][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 69.192269][ T6257] device syzkaller0 entered promiscuous mode [ 69.614181][ T24] cfg80211: failed to load regulatory.db [ 69.696700][ T6300] device syzkaller0 entered promiscuous mode [ 69.885174][ T6317] loop2: detected capacity change from 0 to 2048 [ 69.939668][ T6317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.029862][ T4322] EXT4-fs (loop2): unmounting filesystem. [ 70.058422][ T6329] loop1: detected capacity change from 0 to 1024 [ 70.101539][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.159453][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 70.199349][ T6345] device syzkaller0 entered promiscuous mode [ 70.644432][ T6367] __nla_validate_parse: 7 callbacks suppressed [ 70.644443][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 70.690192][ T6373] loop4: detected capacity change from 0 to 1024 [ 70.704127][ T6373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.749439][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 70.859663][ T6387] device syzkaller0 entered promiscuous mode [ 70.904847][ T6392] device syzkaller1 entered promiscuous mode [ 71.481831][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 82.601805][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 82.605606][ T6473] netlink: 'syz.4.767': attribute type 30 has an invalid length. [ 82.608914][ T6473] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.610517][ T6473] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.611908][ T6473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.613536][ T6473] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.620132][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 82.621748][ T6473] netlink: 'syz.4.767': attribute type 30 has an invalid length. [ 82.768587][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 83.254028][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 83.255597][ T6526] netlink: 'syz.3.784': attribute type 30 has an invalid length. [ 83.258054][ T6526] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.259515][ T6526] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.261015][ T6526] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.262397][ T6526] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.264841][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 83.266141][ T6526] netlink: 'syz.3.784': attribute type 30 has an invalid length. [ 84.180593][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 84.182153][ T6566] netlink: 'syz.0.801': attribute type 30 has an invalid length. [ 84.188476][ T6566] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.189850][ T6566] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.191228][ T6566] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.192705][ T6566] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.195691][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 84.197331][ T6566] netlink: 'syz.0.801': attribute type 30 has an invalid length. [ 96.760662][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 108.502821][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 118.784207][ T6762] loop3: detected capacity change from 0 to 512 [ 118.793460][ T6762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.839109][ T6762] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.857: invalid indirect mapped block 4294967295 (level 1) [ 118.842985][ T6762] EXT4-fs (loop3): Remounting filesystem read-only [ 118.844095][ T6762] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.857: invalid indirect mapped block 4294967295 (level 1) [ 118.853721][ T6762] EXT4-fs (loop3): Remounting filesystem read-only [ 118.855119][ T6762] EXT4-fs (loop3): 2 truncates cleaned up [ 118.856131][ T6762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.886547][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 119.265618][ T6785] loop0: detected capacity change from 0 to 512 [ 119.267130][ T6785] EXT4-fs: Ignoring removed oldalloc option [ 119.290459][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.340420][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 119.341589][ T6785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.408663][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 125.933133][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934239][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.466309][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'. [ 130.555661][ T6821] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 130.556962][ T6821] netlink: 256 bytes leftover after parsing attributes in process `syz.4.875'. [ 130.593971][ T6834] loop4: detected capacity change from 0 to 512 [ 130.595287][ T6834] EXT4-fs: Ignoring removed oldalloc option [ 130.598771][ T6834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.653100][ T6834] EXT4-fs (loop4): 1 truncate cleaned up [ 130.654109][ T6834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.011015][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 131.047985][ T6846] loop4: detected capacity change from 0 to 512 [ 131.070681][ T6846] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.883: invalid indirect mapped block 256 (level 2) [ 131.087665][ T6846] EXT4-fs (loop4): 2 truncates cleaned up [ 131.094154][ T6846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.110476][ T6849] loop3: detected capacity change from 0 to 128 [ 131.178916][ T6849] syz.3.884: attempt to access beyond end of device [ 131.178916][ T6849] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 131.191755][ T6849] syz.3.884: attempt to access beyond end of device [ 131.191755][ T6849] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 131.194964][ T6849] syz.3.884: attempt to access beyond end of device [ 131.194964][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.197055][ T6849] syz.3.884: attempt to access beyond end of device [ 131.197055][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.199162][ T6849] syz.3.884: attempt to access beyond end of device [ 131.199162][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.201054][ T6849] syz.3.884: attempt to access beyond end of device [ 131.201054][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.206076][ T6849] syz.3.884: attempt to access beyond end of device [ 131.206076][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.208094][ T6849] syz.3.884: attempt to access beyond end of device [ 131.208094][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.210045][ T6849] syz.3.884: attempt to access beyond end of device [ 131.210045][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.211859][ T6849] syz.3.884: attempt to access beyond end of device [ 131.211859][ T6849] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 131.398408][ T6849] Buffer I/O error on dev loop3, logical block 145, async page read [ 131.410428][ T6849] Buffer I/O error on dev loop3, logical block 146, async page read [ 131.455366][ T6849] Buffer I/O error on dev loop3, logical block 147, async page read [ 131.456703][ T6849] Buffer I/O error on dev loop3, logical block 148, async page read [ 131.458061][ T6849] Buffer I/O error on dev loop3, logical block 149, async page read [ 131.459400][ T6849] Buffer I/O error on dev loop3, logical block 150, async page read [ 131.460676][ T6849] Buffer I/O error on dev loop3, logical block 151, async page read [ 131.462237][ T6849] Buffer I/O error on dev loop3, logical block 152, async page read [ 131.495995][ T6849] Buffer I/O error on dev loop3, logical block 145, async page read [ 131.497507][ T6849] Buffer I/O error on dev loop3, logical block 146, async page read [ 136.012808][ T6841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 142.107620][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 142.243978][ T6898] loop4: detected capacity change from 0 to 512 [ 142.245493][ T6898] EXT4-fs: Ignoring removed oldalloc option [ 142.247232][ T6898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.250415][ T6898] EXT4-fs (loop4): 1 truncate cleaned up [ 142.251364][ T6898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.262583][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 142.318122][ T6904] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.725603][ T6919] loop0: detected capacity change from 0 to 512 [ 142.729801][ T6919] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.903: invalid indirect mapped block 256 (level 2) [ 142.732659][ T6919] EXT4-fs (loop0): 2 truncates cleaned up [ 142.735614][ T6919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.812800][ T6900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 153.526082][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 154.971039][ T7002] loop2: detected capacity change from 0 to 512 [ 154.986260][ T7002] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.925: invalid indirect mapped block 256 (level 2) [ 154.989309][ T7002] EXT4-fs (loop2): 2 truncates cleaned up [ 154.990196][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.412789][ T7004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 158.733003][ T4329] Bluetooth: hci0: command 0x0406 tx timeout [ 158.733968][ T4329] Bluetooth: hci1: command 0x0406 tx timeout [ 158.734979][ T4329] Bluetooth: hci2: command 0x0406 tx timeout [ 158.736025][ T4329] Bluetooth: hci4: command 0x0406 tx timeout [ 158.736991][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 165.963851][ T4322] EXT4-fs (loop2): unmounting filesystem. [ 166.952280][ T7051] loop0: detected capacity change from 0 to 1024 [ 166.990119][ T7051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.997174][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.016119][ T7051] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 167.018224][ T7051] EXT4-fs (loop0): This should not happen!! Data will be lost [ 167.018224][ T7051] [ 167.020540][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.035824][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.038679][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.041402][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.051519][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.066076][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.071883][ T7065] raw_sendmsg: syz.3.944 forgot to set AF_INET. Fix it! [ 167.075753][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.078195][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: comm syz.0.941: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.209098][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 178.189559][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 178.211517][ T7107] loop3: detected capacity change from 0 to 4096 [ 178.235486][ T7107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.269379][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 187.373102][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.374158][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.857592][ T7179] loop0: detected capacity change from 0 to 512 [ 189.869675][ T7179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.892380][ T7179] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 189.896927][ T7179] EXT4-fs (loop0): Remounting filesystem read-only [ 189.908031][ T7179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.977: iget: bad extra_isize 58 (inode size 256) [ 189.910468][ T7179] EXT4-fs (loop0): Remounting filesystem read-only [ 189.914142][ T7179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.977: error while reading EA inode 11 err=-117 [ 189.932088][ T7179] EXT4-fs (loop0): Remounting filesystem read-only [ 189.933432][ T7179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.977: iget: bad extra_isize 58 (inode size 256) [ 189.935861][ T7179] EXT4-fs (loop0): Remounting filesystem read-only [ 189.936959][ T7179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.977: error while reading EA inode 11 err=-117 [ 189.945511][ T7179] EXT4-fs (loop0): Remounting filesystem read-only [ 189.946780][ T7179] EXT4-fs (loop0): 1 orphan inode deleted [ 189.947716][ T7179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.961347][ T7179] EXT4-fs error (device loop0): __ext4_iget:5091: inode #14: block 1886221359: comm syz.0.977: invalid block [ 189.972041][ T7179] EXT4-fs (loop0): Remounting filesystem read-only [ 190.324967][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 191.348977][ T7231] loop2: detected capacity change from 0 to 512 [ 191.385309][ T7231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.411884][ T4322] EXT4-fs (loop2): unmounting filesystem. [ 203.602951][ T7317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.853925][ T7335] device geneve1 entered promiscuous mode [ 213.855137][ T7335] device macsec1 entered promiscuous mode [ 213.977834][ T7340] device syzkaller1 entered promiscuous mode [ 213.990762][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 214.246586][ T7368] loop2: detected capacity change from 0 to 128 [ 214.292371][ T7368] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 214.601937][ T7368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.618019][ T7370] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 214.623299][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 214.965855][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 214.967786][ T7377] SQUASHFS error: Failed to read block 0x0: -5 [ 215.232241][ T7376] loop0: detected capacity change from 0 to 4096 [ 215.282241][ T7380] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.023800][ T7409] loop2: detected capacity change from 0 to 4096 [ 216.087650][ T7410] loop4: detected capacity change from 0 to 8 [ 216.092361][ T7410] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 216.233818][ T7410] process 'syz.4.1047' launched './file2' with NULL argv: empty string added [ 216.239741][ T7410] cramfs: Error -3 while decompressing! [ 216.240832][ T7410] cramfs: 00000000f92e5e55(26)->000000004bdd885d(4096) [ 216.242041][ T7410] cramfs: Error -3 while decompressing! [ 216.242977][ T7410] cramfs: 00000000770916bf(26)->00000000862705ef(4096) [ 216.244184][ T7410] cramfs: Error -3 while decompressing! [ 216.245189][ T7410] cramfs: 00000000b0240cd7(16)->000000001c7e1998(4096) [ 216.246770][ T7410] cramfs: Error -3 while decompressing! [ 216.247744][ T7410] cramfs: 00000000f92e5e55(26)->000000004bdd885d(4096) [ 216.319055][ T7347] udevd[7347]: incorrect cramfs checksum on /dev/loop4 [ 216.326196][ T7413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.426118][ T7414] udevd[7414]: incorrect cramfs checksum on /dev/loop4 [ 216.995095][ T7433] Unsupported ieee802154 address type: 0 [ 217.315597][ T7436] loop2: detected capacity change from 0 to 4096 [ 217.407127][ T7439] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 217.409171][ T7439] SQUASHFS error: Failed to read block 0x0: -5 [ 217.777290][ T4322] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 217.778339][ T4322] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 218.062481][ T7457] loop3: detected capacity change from 0 to 4096 [ 218.131113][ T7458] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.231259][ T7462] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 218.232983][ T7462] SQUASHFS error: Failed to read block 0x0: -5 [ 218.852565][ T7473] loop2: detected capacity change from 0 to 8 [ 218.856940][ T7473] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 218.884884][ T7473] cramfs: Error -3 while decompressing! [ 218.885767][ T7473] cramfs: 0000000005761a74(26)->000000008eb5ade9(4096) [ 218.886880][ T7473] cramfs: Error -3 while decompressing! [ 218.887800][ T7473] cramfs: 00000000c715c296(26)->00000000a43e2857(4096) [ 218.888927][ T7473] cramfs: Error -3 while decompressing! [ 218.889794][ T7473] cramfs: 00000000163e345b(16)->0000000015bd0d25(4096) [ 218.890890][ T7473] cramfs: Error -3 while decompressing! [ 218.891745][ T7473] cramfs: 0000000005761a74(26)->000000008eb5ade9(4096) [ 218.923026][ T7414] udevd[7414]: incorrect cramfs checksum on /dev/loop2 [ 218.946456][ T7474] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 218.968192][ T7474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.002441][ T7474] bond2: (slave veth3): Enslaving as an active interface with a down link [ 219.049550][ T7474] bond2: (slave dummy0): making interface the new active one [ 219.057580][ T7474] device dummy0 entered promiscuous mode [ 219.058666][ T7474] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 219.060565][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 219.572682][ T7513] loop4: detected capacity change from 0 to 4096 [ 219.609062][ T7521] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.460194][ T7543] loop3: detected capacity change from 0 to 8 [ 220.463261][ T7543] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 220.472556][ T7543] cramfs: Error -3 while decompressing! [ 220.473557][ T7543] cramfs: 00000000f92e5e55(26)->000000006c93153c(4096) [ 220.474748][ T7543] cramfs: Error -3 while decompressing! [ 220.475597][ T7543] cramfs: 00000000770916bf(26)->0000000039de5931(4096) [ 220.476702][ T7543] cramfs: Error -3 while decompressing! [ 220.477621][ T7543] cramfs: 00000000b0240cd7(16)->000000006b2d7c86(4096) [ 220.478812][ T7543] cramfs: Error -3 while decompressing! [ 220.479687][ T7543] cramfs: 00000000f92e5e55(26)->000000006c93153c(4096) [ 220.727575][ T7414] udevd[7414]: incorrect cramfs checksum on /dev/loop3 [ 220.744711][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 220.761861][ T7558] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 220.778572][ T7414] udevd[7414]: incorrect cramfs checksum on /dev/loop3 [ 221.261494][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 221.294487][ T7588] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 221.780015][ T7613] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 221.863738][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 222.140234][ T7637] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 222.142033][ T7637] SQUASHFS error: Failed to read block 0x0: -5 [ 222.410899][ T7642] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 223.085470][ T7661] loop0: detected capacity change from 0 to 4096 [ 223.112566][ T7663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.588537][ T7672] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 223.722055][ T7550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.999591][ T7688] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 224.001297][ T7688] SQUASHFS error: Failed to read block 0x0: -5 [ 224.320485][ T7701] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 224.633723][ T7702] loop4: detected capacity change from 0 to 40427 [ 224.642352][ T7702] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x3ffff [ 224.872465][ T7725] loop4: detected capacity change from 0 to 4096 [ 224.966723][ T7730] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.421824][ T7739] netlink: 'syz.1.1179': attribute type 1 has an invalid length. [ 226.061615][ T7759] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 226.063470][ T7759] SQUASHFS error: Failed to read block 0x0: -5 [ 226.312173][ T7765] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 226.864230][ T7783] loop3: detected capacity change from 0 to 4096 [ 226.910918][ T7785] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.919999][ T7787] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.921917][ T7787] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 226.963038][ T7787] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.964310][ T7787] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 227.341418][ T7795] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 227.488086][ T7706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.858973][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 227.860832][ T7816] SQUASHFS error: Failed to read block 0x0: -5 [ 228.056408][ T7827] loop0: detected capacity change from 0 to 128 [ 228.071496][ T7831] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 228.175783][ T7827] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 228.181240][ T7827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.187589][ T7835] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 228.189086][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 228.745440][ T7871] netlink: 'syz.0.1231': attribute type 1 has an invalid length. [ 229.420964][ T7896] loop3: detected capacity change from 0 to 128 [ 229.450252][ T7896] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 229.457273][ T7896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.475138][ T7896] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 229.477078][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 229.562315][ T7903] netlink: 'syz.3.1244': attribute type 1 has an invalid length. [ 229.868018][ T7906] random: crng reseeded on system resumption [ 230.079734][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 230.276346][ T7925] Unsupported ieee802154 address type: 0 [ 230.579188][ T7928] loop1: detected capacity change from 0 to 4096 [ 230.645976][ T4323] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 230.649437][ T4323] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 231.025382][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 231.241266][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 231.268475][ T7844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.876497][ T7970] random: crng reseeded on system resumption [ 232.144799][ T4524] device dummy0 left promiscuous mode [ 232.444725][ T7980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.462201][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 233.190712][ T8012] loop3: detected capacity change from 0 to 4096 [ 233.233706][ T8013] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.454432][ T8020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.539769][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1287'. [ 233.657308][ T8044] loop1: detected capacity change from 0 to 512 [ 233.659254][ T8044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.660906][ T8044] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (256 blocks) [ 234.181707][ T8047] loop1: detected capacity change from 0 to 32768 [ 234.228464][ T8047] JBD2: Ignoring recovery information on journal [ 234.251440][ T8047] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 234.298070][ T8058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.310176][ T4323] ocfs2: Unmounting device (7,1) on (node local) [ 234.401951][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 235.173349][ T8094] Unsupported ieee802154 address type: 0 [ 235.641668][ T8107] random: crng reseeded on system resumption [ 236.014584][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 236.035320][ T8111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.039470][ T8122] random: crng reseeded on system resumption [ 237.593641][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.603248][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.916089][ T8153] Unsupported ieee802154 address type: 0 [ 238.185038][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 238.310567][ T8159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.656251][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.659996][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.756485][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 238.784757][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.786350][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.838835][ T8202] loop2: detected capacity change from 0 to 4096 [ 238.846598][ T8202] ntfs3: Invalid value for dmask. [ 238.909518][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.105140][ T24] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 239.107542][ T24] usb 1-1: config 1 has no interface number 0 [ 239.108786][ T24] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 239.110645][ T24] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 239.138300][ T24] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 239.159876][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 239.169740][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.171210][ T24] usb 1-1: Product: syz [ 239.183773][ T24] usb 1-1: Manufacturer: syz [ 239.184644][ T24] usb 1-1: SerialNumber: syz [ 239.209730][ T8189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.212510][ T8189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.293072][ T24] usb 1-1: Expected 3 endpoints, found: 2 [ 239.420248][ T8210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.500681][ T7] usb 1-1: USB disconnect, device number 2 [ 240.187535][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'. [ 240.235397][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.238149][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.263450][ T8252] loop0: detected capacity change from 0 to 128 [ 240.266663][ T8252] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 240.910218][ T8268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.016590][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 241.124098][ T4739] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 242.209435][ T8307] loop3: detected capacity change from 0 to 32768 [ 242.235622][ T8313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.239038][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 242.244655][ T7414] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.694314][ T8337] loop3: detected capacity change from 0 to 1764 [ 244.005269][ T8342] random: crng reseeded on system resumption [ 244.082728][ C0] sched: RT throttling activated [ 244.209551][ T8334] Cannot find set identified by id 1 to match [ 244.217793][ T7414] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.343425][ T8350] loop2: detected capacity change from 0 to 128 [ 244.361743][ T8350] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 245.130934][ T8360] Bluetooth: MGMT ver 1.22 [ 245.211891][ T4738] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 245.221076][ T8366] device syzkaller1 entered promiscuous mode [ 245.290034][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 245.321023][ T8380] Unsupported ieee802154 address type: 0 [ 245.354552][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.356306][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.630751][ T8396] loop3: detected capacity change from 0 to 4096 [ 245.635474][ T8397] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.122554][ T8405] random: crng reseeded on system resumption [ 246.564262][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 247.117947][ T8438] Unsupported ieee802154 address type: 0 [ 247.160601][ T8440] loop1: detected capacity change from 0 to 128 [ 247.162474][ T8440] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 247.660076][ T8451] loop3: detected capacity change from 0 to 4096 [ 247.666478][ T8452] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.228511][ T5332] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 248.267127][ T8370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.827290][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.828495][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.952044][ T8491] loop3: detected capacity change from 0 to 4096 [ 248.966622][ T8494] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.496895][ T8506] random: crng reseeded on system resumption [ 252.922898][ T8512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.949766][ T8536] loop3: detected capacity change from 0 to 128 [ 252.978641][ T8536] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 253.181738][ T8538] loop1: detected capacity change from 0 to 4096 [ 253.230670][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 253.249701][ T8547] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.113013][ T5088] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 254.141124][ T8565] loop0: detected capacity change from 0 to 128 [ 254.158082][ T8565] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 254.631125][ T8580] loop2: detected capacity change from 0 to 4096 [ 254.652641][ T8584] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.698863][ T27] audit: type=1326 audit(254.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.705634][ T27] audit: type=1326 audit(254.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.712367][ T27] audit: type=1326 audit(254.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.720639][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 254.722837][ T27] audit: type=1326 audit(254.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.734045][ T27] audit: type=1326 audit(254.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.740526][ T27] audit: type=1326 audit(254.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.744469][ T27] audit: type=1326 audit(254.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.748147][ T27] audit: type=1326 audit(254.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.751805][ T27] audit: type=1326 audit(254.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.755617][ T27] audit: type=1326 audit(254.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.2.1453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff861771a8 code=0x7ffc0000 [ 254.938384][ T8598] random: crng reseeded on system resumption [ 255.249429][ T4662] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 255.268899][ T8601] loop0: detected capacity change from 0 to 736 [ 255.364552][ T8604] loop0: detected capacity change from 0 to 1024 [ 255.366294][ T8604] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.367958][ T8604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.383485][ T8604] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #11: comm syz.0.1459: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 255.387022][ T8604] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1459: couldn't read orphan inode 11 (err -117) [ 255.389204][ T8604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.400565][ T8604] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1459: Invalid block bitmap block 0 in block_group 0 [ 255.403983][ T8604] Unable to handle kernel paging request at virtual address ffffffffffffff93 [ 255.405574][ T8604] KASAN: maybe wild-memory-access in range [0x0003fffffffffc98-0x0003fffffffffc9f] [ 255.407549][ T8604] Mem abort info: [ 255.408135][ T8604] ESR = 0x0000000096000004 [ 255.409121][ T8604] EC = 0x25: DABT (current EL), IL = 32 bits [ 255.410491][ T8604] SET = 0, FnV = 0 [ 255.411096][ T8604] EA = 0, S1PTW = 0 [ 255.411957][ T8604] FSC = 0x04: level 0 translation fault [ 255.415683][ T8604] Data abort info: [ 255.416394][ T8604] ISV = 0, ISS = 0x00000004 [ 255.417286][ T8604] CM = 0, WnR = 0 [ 255.418179][ T8604] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dfcc000 [ 255.419577][ T8604] [ffffffffffffff93] pgd=0000000000000000, p4d=0000000000000000 [ 255.421202][ T8604] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 255.422392][ T8604] Modules linked in: [ 255.423046][ T8604] CPU: 1 PID: 8604 Comm: syz.0.1459 Not tainted syzkaller #0 [ 255.424239][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 255.425837][ T8604] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 255.427098][ T8604] pc : ext4_ext_map_blocks+0x2a70/0x570c [ 255.427957][ T8604] lr : ext4_ext_map_blocks+0x1654/0x570c [ 255.428843][ T8604] sp : ffff800021336f20 [ 255.429537][ T8604] x29: ffff8000213371a0 x28: dfff800000000000 x27: 0000000000000001 [ 255.430813][ T8604] x26: ffff8000213373e0 x25: 0000000000000001 x24: 0000000000000001 [ 255.432152][ T8604] x23: 0000000000000001 x22: ffff0000e2b5f108 x21: 0000000000000001 [ 255.433385][ T8604] x20: ffff8000213373e0 x19: ffffffffffffff8b x18: ffff800011b9bf60 [ 255.434655][ T8604] x17: 1fffe00033eaa57e x16: ffff8000082d92bc x15: ffff8000089da370 [ 255.435881][ T8604] x14: 0000000000000001 x13: 1ffff00002b4e732 x12: 0000000000080000 [ 255.437238][ T8604] x11: 00000000000238df x10: ffff80002304c000 x9 : ffff800008d259ac [ 255.438570][ T8604] x8 : 0000000000000000 x7 : ffff80000805983c x6 : ffff800008059a4c [ 255.439838][ T8604] x5 : ffff0000da51f2a8 x4 : ffff800021336a30 x3 : 0000000000000000 [ 255.441123][ T8604] x2 : 0000000000000006 x1 : 0000000000000000 x0 : ffffffffffffff93 [ 255.442423][ T8604] Call trace: [ 255.442990][ T8604] ext4_ext_map_blocks+0x2a70/0x570c [ 255.443909][ T8604] ext4_map_blocks+0x860/0x1778 [ 255.444692][ T8604] ext4_getblk+0x178/0x664 [ 255.445353][ T8604] ext4_bread+0x3c/0x1a8 [ 255.446057][ T8604] ext4_quota_write+0x204/0x534 [ 255.446865][ T8604] write_blk+0xf8/0x204 [ 255.447536][ T8604] do_insert_tree+0x80c/0xc34 [ 255.448342][ T8604] qtree_write_dquot+0x3d4/0x4f0 [ 255.449182][ T8604] v2_write_dquot+0xf0/0x180 [ 255.449975][ T8604] dquot_acquire+0x2a8/0x4d8 [ 255.450702][ T8604] ext4_acquire_dquot+0x270/0x428 [ 255.451538][ T8604] dqget+0x654/0xcc4 [ 255.452187][ T8604] __dquot_initialize+0x2fc/0xacc [ 255.453020][ T8604] dquot_initialize+0x24/0x34 [ 255.453827][ T8604] ext4_mkdir+0x150/0xa1c [ 255.454528][ T8604] vfs_mkdir+0x314/0x4d4 [ 255.455253][ T8604] do_mkdirat+0x1b8/0x3ec [ 255.455975][ T8604] __arm64_sys_mkdirat+0x90/0xa8 [ 255.456766][ T8604] invoke_syscall+0x98/0x2b4 [ 255.457523][ T8604] el0_svc_common+0x138/0x258 [ 255.458271][ T8604] do_el0_svc+0x58/0x130 [ 255.458963][ T8604] el0_svc+0x58/0x128 [ 255.459600][ T8604] el0t_64_sync_handler+0x84/0xf0 [ 255.460473][ T8604] el0t_64_sync+0x18c/0x190 [ 255.461237][ T8604] Code: 2a1803fb d343fc08 38fc6908 35006ba8 (79401276) [ 255.462386][ T8604] ---[ end trace 0000000000000000 ]--- [ 255.725231][ T8604] Kernel panic - not syncing: Oops: Fatal exception [ 255.726208][ T8604] SMP: stopping secondary CPUs [ 255.727011][ T8604] Kernel Offset: disabled [ 255.727743][ T8604] CPU features: 0x080000,000f0097,a65bfea7 [ 255.728686][ T8604] Memory Limit: none [ 255.981186][ T8604] Rebooting in 86400 seconds..