last executing test programs: 15m7.582920483s ago: executing program 32 (id=72): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 14m39.753342616s ago: executing program 33 (id=130): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x38, 0x0, 0x10, 0x212, 0x8, 0xffe, 0x6, 0x103}}) 11m59.522548435s ago: executing program 34 (id=638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@mpls_getnetconf={0x64, 0x52, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1800000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x65e90000}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@noauto_da_alloc}]}, 0x3, 0x4ab, &(0x7f0000000080)="$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") bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 9m40.354368991s ago: executing program 35 (id=1104): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x2, 0xb, 0x0, 0x100}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f0000002600)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xb21c, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts_2292={{0x30, 0x29, 0x32, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}}}], 0x48}}], 0x1, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close_range(0xffffffffffffffff, r5, 0x2) fstat(r5, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)) timer_create(0x2, 0x0, &(0x7f0000000540)) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 9m5.035261173s ago: executing program 1 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r1, 0x1, 0x20400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20048050) 9m3.342283225s ago: executing program 1 (id=1263): r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a24"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x20, @string={0x20, 0x3, "e4479f24dfaec5c14c69a770bc4e7854953af4899de55c78a802d76fd8da"}}, 0x0, 0x0, 0x0}, 0x0) 9m1.918335954s ago: executing program 1 (id=1268): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) listen(r9, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 9m1.56429981s ago: executing program 1 (id=1272): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2200c000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200103, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000003"]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x2004c860, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0x3}, 0x14) 9m0.087761219s ago: executing program 1 (id=1276): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x42, 0x5520, &(0x7f0000000940)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072b00000010000000050000009ab6f87aa62d871b08a4ab6e5fe43645cb14b648131f3e874620355c0f2566e1be650244813e94c0085cd8e1ce54c0"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) 8m54.766010097s ago: executing program 1 (id=1294): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) futex(0x0, 0x80, 0x2, &(0x7f0000000380), 0x0, 0x0) 8m39.509040012s ago: executing program 36 (id=1294): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) futex(0x0, 0x80, 0x2, &(0x7f0000000380), 0x0, 0x0) 7m15.282724578s ago: executing program 9 (id=1658): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000380)={0x7000202d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x2007}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="010026bd7000fbdbdf2505000000140001800d0001007564703a73797a3200000000", @ANYRESDEC, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x20008c05}, 0x4040140) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 7m14.258530778s ago: executing program 9 (id=1654): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) socket(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x80000, {{0xa, 0xffff, 0x3, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x2, @loopback, 0xfffffffd}}}, 0x108) process_vm_readv(r0, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/116, 0x74}, {0x0}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f00000006c0)=""/85, 0x55}], 0x6, &(0x7f0000000800), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000680)={@loopback={0x0, 0x3fc}, 0x66, r6}) 7m13.178153478s ago: executing program 9 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r3, &(0x7f0000002a80)={0x2020}, 0xfffffffe) 7m9.485556154s ago: executing program 9 (id=1667): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x7000202d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x2007}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="010026bd7000fbdbdf2505000000140001800d0001007564703a73797a3200000000", @ANYRESDEC, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x20008c05}, 0x4040140) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 7m9.267091092s ago: executing program 9 (id=1671): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) 7m8.796109362s ago: executing program 9 (id=1675): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800001700000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x57, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x3a322000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m53.325075843s ago: executing program 37 (id=1675): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800001700000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x57, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x3a322000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m44.047151816s ago: executing program 6 (id=2044): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) socket$xdp(0x2c, 0x3, 0x0) 5m39.989821561s ago: executing program 6 (id=2056): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 5m39.729390264s ago: executing program 6 (id=2059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x84) 5m39.628971373s ago: executing program 6 (id=2060): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5m38.707334012s ago: executing program 6 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_setaffinity(r1, 0x9, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xeff9bb9d4e6ac260, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 5m37.340005693s ago: executing program 6 (id=2065): r0 = syz_io_uring_setup(0x12ac, &(0x7f0000000400)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000800)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m21.916514101s ago: executing program 38 (id=2065): r0 = syz_io_uring_setup(0x12ac, &(0x7f0000000400)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000800)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m4.916258903s ago: executing program 3 (id=2507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020014004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001b40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 4m4.308926011s ago: executing program 3 (id=2511): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000140)=ANY=[@ANYBLOB='fscontext=unconfined_u,']) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) 4m2.553849653s ago: executing program 3 (id=2522): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) lseek(0xffffffffffffffff, 0x9, 0x0) membarrier(0x40, 0x0) membarrier(0x20, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x58) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)}], 0x1) membarrier(0x4, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000380)=0x6, 0x4) 4m2.200844399s ago: executing program 3 (id=2527): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x15000820) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 4m1.910419459s ago: executing program 3 (id=2530): syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x1000000000005) 4m1.164289849s ago: executing program 3 (id=2536): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) socket(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x80000, {{0xa, 0xffff, 0x3, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x2, @loopback, 0xfffffffd}}}, 0x108) process_vm_readv(r0, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/116, 0x74}, {0x0}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f00000006c0)=""/85, 0x55}], 0x6, &(0x7f0000000800), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000680)={@loopback={0x0, 0x3fc}, 0x66, r6}) 3m59.665834621s ago: executing program 39 (id=2536): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) socket(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x80000, {{0xa, 0xffff, 0x3, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x2, @loopback, 0xfffffffd}}}, 0x108) process_vm_readv(r0, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/116, 0x74}, {0x0}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f00000006c0)=""/85, 0x55}], 0x6, &(0x7f0000000800), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000680)={@loopback={0x0, 0x3fc}, 0x66, r6}) 8.299584315s ago: executing program 5 (id=3647): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 7.988442694s ago: executing program 5 (id=3650): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0}}], 0x1, 0x890) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x0, 0x2, 0xe}, 0x54) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) unshare(0x62000000) getpgid(0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000140)="630ba68646dc55c73a265cb047", 0x0, 0x81fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x4, 0x12d1, 0x4, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r7, &(0x7f00000005c0), 0x0}, 0x20) 7.988041153s ago: executing program 8 (id=3651): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) 7.987558254s ago: executing program 2 (id=3652): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000000080000000004000"}}}]}, 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 7.703180687s ago: executing program 8 (id=3653): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2000, 0x4) 4.757318145s ago: executing program 2 (id=3654): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x2020, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1e3) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x121000) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="ab", 0x1, 0x4000805, 0x0, 0x0) 4.644197413s ago: executing program 0 (id=3655): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet_nvme_of_msg(r1, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 4.643927584s ago: executing program 8 (id=3656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x0) 4.567738736s ago: executing program 4 (id=3658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.318240883s ago: executing program 8 (id=3659): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9", 0x3}], 0x1}}], 0x1, 0x2010) 4.236881176s ago: executing program 4 (id=3660): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, 0x0, 0x0, 0xefd, 0x9dec) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 3.409077955s ago: executing program 2 (id=3661): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.385652432s ago: executing program 5 (id=3662): signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20004081}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.140271783s ago: executing program 0 (id=3664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 2.926824505s ago: executing program 4 (id=3665): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000840)="3a82", 0x2}], 0x1}}], 0x1, 0x2000c044) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) 2.766959411s ago: executing program 5 (id=3666): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0), 0x10) 2.424619297s ago: executing program 0 (id=3668): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.376248611s ago: executing program 5 (id=3669): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) 2.204279064s ago: executing program 7 (id=3670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001ac0)="e4f1b7726363f4b29cff2f77b2f40f49947ac5e9efe992ff7e6707c020a8e0387f773869457b4b4e06b9031885513329f1e89731db338ce831436ac5a4ed2c44f42b894470098112caf7e88d31ae8fadfa190f0ba832b34a55e26466b5c5d6b36b4ca22fada906a986d6bea3348cf65541158e2a31411820c22903c5b4361ecd9ec00c0d90563f1edd1215f07fd66d56e070731435598aa5682f6b93024d8584c0c05123c3d37b849bc6fb5db8e87e62f9f9f9da2df6a7f4b0df9f6989eb2172dbdd913329b68aefa5c2d5a47e8b44b3e3cc", 0xd2}, {&(0x7f0000001bc0)="71a3888f36a66a34ac581bd9ac3465898f0b056ef2bc4c8bd7ec9330874ccb0b5a883b9ce257c238d7fb13072b2d4dafbeaaa41c394ffca6dce11814fcc5e47ece04bdfdfc779733d1e5bb160232afc830f7c536bb6213387fe43b1001dc47193746926360537c15b9cd7c114f017511308bc3c870e81510c2ecd218548f14cb96f6880ad1297ab611bc93c7a3c7a99bc6f2d846a8b7fd0e7fb756e7322ed601aeb5d8e20f255c45f5a02bc9a0f4fca89e430a19e97c1d9640edf98074b061be0aea64aed3860e76f2275e046e680245", 0xd0}, {&(0x7f00000002c0)="21d4feaf38aa12fe55378716c7633a708fbe07e18a4101ceeb8ba5e1599156fd672e947255ede47776c6e1eddd11d3a136dc524fd0d3a1483c1831", 0x3b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, 0x1c, &(0x7f0000000940)=[{0x0}, {&(0x7f0000001cc0)="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", 0x100c}, {&(0x7f0000000680)="62ea650d8d8080f9e4b91e4f86a234067ac3b13a377ed995be2111eb998c4f7488d841d03098204e9212c7988f8b2665abf656f571a399415a5ea5b9fd09bca2762b79ff0dc34f9d0f69e2853e68c781a99f65a36925c74025c4c09db4e64be312ffd86d8caff937707f62e6698575aa41414f02e1be420b6d4a0f396e8df804a16347794dfae7c98f36b39268ddb323d2", 0x91}, {&(0x7f0000000580)="091fe2b380f3a5cacc29c60598855999bc63d3914800633269a46a09218bfa9536c0fbceb9ef5c4001ca6beadfd0f1b018ac245e2860ade70674e2236ea799a0f52a48a28fa32c3fdc9184a54688d7f1d4575f93d25171f253819bcb9668d5f50d67", 0x62}, {&(0x7f0000000780)="03185586d7c932d32fc534abf4fbbcd1412128c62b30623270e1ca31bb41f1d4f37e3b61d242355013cbff8b9d54c010ced39e9095461ce3a70666205dbc51dc4172762e4118d32d0b6ba1c84a607868bc1ef1accd6eb7eade410d32363dfb0b785f3b5ad882640eb0f1ca4714599a79fd347c48e75e19dde0545736df3fa5aa4b1efea6d360638a8726ec06f806329229df0e041aa8ae9a901ec024fc52d599a7c9f27f34c7e134d1010bd239894e9da1", 0xb1}, {&(0x7f0000000480)="745ede6d7e6d02f2f826ff19d08bb6dbb3b101000000000000007250f1ae8e", 0x1f}, {&(0x7f0000000840)="f40b2341e62c88184f8992ace77f645f56727db4d3eb64f95603eb045baae81c164737907a2c54150488356568da8dbc0b0d6ba29f9e7e4bde2db41c3adb8e717d58cd15bc3f8667745393a41fb620597f0c9738792e1e5941c59cc0e094e23de4faf27a73", 0x65}, {0x0}], 0x8}}], 0x3, 0x0) 1.869586619s ago: executing program 8 (id=3671): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x83f) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 1.776280033s ago: executing program 7 (id=3672): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.580452543s ago: executing program 0 (id=3673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {0x0}], 0x2}}], 0x1, 0x2010) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.561710052s ago: executing program 4 (id=3674): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) 1.549598995s ago: executing program 7 (id=3675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.380081007s ago: executing program 5 (id=3676): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.342681824s ago: executing program 0 (id=3677): socket(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) 812.987439ms ago: executing program 2 (id=3678): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 640.861205ms ago: executing program 7 (id=3679): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00", 0x44}], 0x1) 625.401268ms ago: executing program 2 (id=3680): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000140)='\\*\x00', &(0x7f0000000200)='./file1\x00', r0) 418.673495ms ago: executing program 0 (id=3681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) 401.204329ms ago: executing program 4 (id=3682): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0x0) 317.272525ms ago: executing program 7 (id=3683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000540)=0x2000000, &(0x7f0000000600)}, 0x20) 159.913987ms ago: executing program 4 (id=3684): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 158.901887ms ago: executing program 2 (id=3685): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_matches\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000640)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nobh}, {@dax_inode}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$eJzs3E1vVFUfAPD/nU5p+wBP+/C88aaMorHRSGl5XbgAogkbExONwWVtC0EKGFoTaBopxkDiQsMn8GVn4idwpRujxoUvWwlbY0JMN6ALc82duVOnnU5bykwnpb9fMsO595475/zvvYe555y5DWDDKmVvScSWiPg5Inori/MzlCr/3JudHvl9dnokiTR9+beknO/u7PRINWt1v835Qn8hovBuErvqi+2auDJ1bnh8fOxSvmJgspCnzg+fGTszdmHo6NGDB3qOHB461JQ4szrd3fn2xd07Tr5288WRUzdf/+azrL5pvr02joq+8vumFZfQUbemFKX5x7LGkyuv+rqwtSadFLP3Qvsqw4plV212ujrL7b83OspLFb3xwjttrRzQUmmapl11a+e+y2bSWklS2SFNr6XAQyCJdtcAaI/qF/3d2aynOj1S3w9+uN05HuUeUBb3vfxV2VIs92BLfZW+UWeLyv9PRJya+ePD7BWLjkMAADTXF8cjbpyIYnbfUX1VthTifzX5/pnPDfVFxL8iYltE/Du/f/lvRDnv/yNie80+W1cwC1BasFx///NDT56ovV1tmuz+77l8bmv+/d9czfs68qWt5fg7k9Nnx8f258ekPzq7suXB+o+eG1b78vmfPmhUfqnm/i97ZeVX7wXzevxaXDBANzo8OfygcVfduVY+sFfr40+imFRTETsiYucqPj87Zmef/nR3o+3z4s/irIv//cYfXlxFhRZIP454qnL+Z2JB/JHP/yXl+cnzbw5MXJl69mzt/OTgkcNDhwa6Y3xs/0D1qqj37ffXX8qTdd2IJc5/tWm0dCItO///WPT6n5u57MtSc/O1E/dfxvVbNxr2aVZ7/W9KXimnq/Ozl4cnJy8NRmxKZurXD/297+Xhnnn5s/j79y7e/rdF/PlRvt+uiMgu4kci4tGI2JPX/bGIeDwi9i4R/9cnnnijURdy+fhbK4t/9L7Of6PEse8iFt/Uce6rz2vL/PF2RLxXqou/Mxqd/4PlVH++ZnR4snu5uJaq6diliaQYscqrGQAAANafPRGxJZLCvnygaUsUCvv2RWyeG0GZmHzm9MW3LoxWnhHoi85CdaSrt2Y8dDAfG86Ws72Gapaz7QfK48ZpmqY92XLWfx/f3t7QYcPb3KD9Z36pf6QFeNjc1zxaoyfagHVpYfu/teI9m/+DDGBtNeF3NMA6pf3DxrXi9t+qp+CAtlms/V+NuNeGqgBrbLH2/2rdmmNrUhdgben/w8a1+vbvxwCw3vn+hw1p+ef6V5fYdnKJPEmxNYU2ThRiyTzRl/85gCtT56r3NEt/4O1CRHNq2NHUSHvmndPConm6oxllRWHZPMXl/xBDSxPdDUsvNLWswoPt3hURy1y9cxfb1WpiqtXHsNwIPmnv/04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7q8AAAD//92p0rs=") socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='attr/fscreate\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19000000040000000400000002000000000000004e05d178", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) futex(&(0x7f0000000bc0)=0x1, 0x10b, 0x1, &(0x7f0000000c40), &(0x7f0000000c80), 0x1) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, 0x0, 0x0) pipe2(0x0, 0x0) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0xff6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) 140.585679ms ago: executing program 7 (id=3686): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x2020, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1e3) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x121000) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="ab", 0x1, 0x4000805, 0x0, 0x0) 0s ago: executing program 8 (id=3687): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000380)={0x7000202d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x2007}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x20008c05}, 0x4040140) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): ess `syz.8.2292'. [ 754.029563][T13441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.740999][T14083] tmpfs: Unknown parameter 'fscontext' [ 755.700284][T13441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.798643][T14105] loop4: detected capacity change from 0 to 512 [ 755.809220][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2306'. [ 755.821824][T14105] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 755.897493][T14105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 755.942999][T14105] System zones: 1-12 [ 755.947178][T14105] EXT4-fs (loop4): orphan cleanup on readonly fs [ 756.030103][T14105] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.2305: invalid indirect mapped block 2 (level 2) [ 756.088884][T14105] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 756.092165][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 756.107772][ C1] EXT4-fs (loop4): initial error at time 1771737122: ext4_free_branches:1020: inode 11 [ 756.117484][ C1] EXT4-fs (loop4): last error at time 1771737122: ext4_free_branches:1020: inode 11 [ 756.131936][T14105] EXT4-fs (loop4): Remounting filesystem read-only [ 756.167828][T14105] EXT4-fs (loop4): 1 truncate cleaned up [ 756.218355][T14105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 756.282834][T14119] netlink: 'syz.3.2308': attribute type 12 has an invalid length. [ 756.340133][T14119] netlink: 'syz.3.2308': attribute type 29 has an invalid length. [ 756.370156][T14119] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2308'. [ 756.473315][T14124] syzkaller0: entered promiscuous mode [ 756.530853][T14124] syzkaller0: entered allmulticast mode [ 756.957001][T13441] veth0_vlan: entered promiscuous mode [ 756.999802][T13441] veth1_vlan: entered promiscuous mode [ 757.171558][T13441] veth0_macvtap: entered promiscuous mode [ 757.222362][T13441] veth1_macvtap: entered promiscuous mode [ 757.327161][T13441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.391057][T13441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.522917][T13979] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.566452][T13979] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.633656][T13979] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.665197][ T85] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.803360][T14157] tmpfs: Unknown parameter 'fscontext' [ 758.562877][ T5835] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 759.464152][T14162] bridge2: entered promiscuous mode [ 759.469387][T14162] bridge2: entered allmulticast mode [ 759.540351][ T30] audit: type=1326 audit(1771737125.606:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 759.655593][T14166] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2320'. [ 759.702346][ T30] audit: type=1326 audit(1771737125.606:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 759.797591][ T30] audit: type=1326 audit(1771737125.636:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f531755cece code=0x7ffc0000 [ 759.873802][T13979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.881645][T13979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.902209][ T30] audit: type=1326 audit(1771737125.636:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f531755cece code=0x7ffc0000 [ 760.025987][ T30] audit: type=1326 audit(1771737125.636:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 760.057277][T13979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.108830][T13979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.133454][ T30] audit: type=1326 audit(1771737125.686:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 760.952228][ T30] audit: type=1326 audit(1771737125.686:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 761.550669][T14205] IPv4: Oversized IP packet from 172.20.20.24 [ 761.558446][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 761.565004][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 761.675441][T14207] netlink: 'syz.7.2334': attribute type 10 has an invalid length. [ 761.775152][T14207] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 761.801721][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 761.960680][T14216] tmpfs: Unknown parameter 'fscontext' [ 762.608090][T14208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.767119][T14207] bond_slave_0: entered promiscuous mode [ 762.773262][T14207] bond_slave_1: entered promiscuous mode [ 762.778988][T14207] syz_tun: entered promiscuous mode [ 762.872046][T14230] x_tables: duplicate underflow at hook 1 [ 762.938790][T14207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 763.514884][T14207] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 763.596020][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 763.634274][T14207] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 763.748290][T14207] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 765.318668][T14269] loop4: detected capacity change from 0 to 512 [ 765.347247][T14269] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 765.406339][T14269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 765.422866][T14269] System zones: 1-12 [ 765.427530][T14269] EXT4-fs (loop4): orphan cleanup on readonly fs [ 765.468068][T14269] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.2348: invalid indirect mapped block 2 (level 2) [ 765.522272][T14269] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 765.532190][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 765.547854][ C0] EXT4-fs (loop4): initial error at time 1771737131: ext4_free_branches:1020: inode 11 [ 765.557599][ C0] EXT4-fs (loop4): last error at time 1771737131: ext4_free_branches:1020: inode 11 [ 765.622731][T14269] EXT4-fs (loop4): Remounting filesystem read-only [ 765.629530][T14269] EXT4-fs (loop4): 1 truncate cleaned up [ 765.659314][T14269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 766.212638][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2360'. [ 766.234601][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 767.724263][T14322] syzkaller0: entered promiscuous mode [ 767.752551][T14322] syzkaller0: entered allmulticast mode [ 767.895153][T14341] loop4: detected capacity change from 0 to 512 [ 767.953351][T14341] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 768.023196][T14341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 768.031245][T14341] System zones: 1-12 [ 768.096980][T14341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 768.104383][T14341] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.2373: invalid indirect mapped block 2 (level 2) [ 768.118681][T14341] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 768.122166][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 768.137788][ C0] EXT4-fs (loop4): initial error at time 1771737134: ext4_free_branches:1020: inode 11 [ 768.147522][ C0] EXT4-fs (loop4): last error at time 1771737134: ext4_free_branches:1020: inode 11 [ 768.170299][T14341] EXT4-fs (loop4): Remounting filesystem read-only [ 768.256317][T14341] EXT4-fs (loop4): 1 truncate cleaned up [ 768.272994][T14341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 768.614148][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 770.625659][T14381] C: renamed from team_slave_0 (while UP) [ 770.664141][T14381] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 770.689066][T14381] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2386'. [ 770.691335][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 770.702507][T14381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 771.253808][T14397] mmap: syz.4.2388 (14397) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 773.338777][T14438] loop5: detected capacity change from 0 to 512 [ 773.441034][T14438] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 773.497045][T14438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 773.542303][T14438] System zones: 1-12 [ 773.546639][T14438] EXT4-fs (loop5): orphan cleanup on readonly fs [ 773.553712][T14438] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2401: invalid indirect mapped block 2 (level 2) [ 773.567005][T14438] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 773.572151][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 773.587780][ C0] EXT4-fs (loop5): initial error at time 1771737139: ext4_free_branches:1020: inode 11 [ 773.597541][ C0] EXT4-fs (loop5): last error at time 1771737139: ext4_free_branches:1020: inode 11 [ 773.602234][T14438] EXT4-fs (loop5): Remounting filesystem read-only [ 773.733566][T14438] EXT4-fs (loop5): 1 truncate cleaned up [ 773.741965][T14438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 774.394969][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 775.090628][T14486] batadv_slave_1: entered promiscuous mode [ 775.105204][T14483] batadv_slave_1: left promiscuous mode [ 775.397705][T14496] loop7: detected capacity change from 0 to 512 [ 775.586422][T14494] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2420'. [ 776.719618][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2427'. [ 776.735889][T14518] tipc: Failed to remove unknown binding: 66,0,0/0:3222238237/3222238238 [ 776.745064][T14518] tipc: Failed to remove unknown binding: 66,0,0/0:3222238237/3222238238 [ 777.125582][T14532] veth1_to_bridge: mtu greater than device maximum [ 777.228064][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2433'. [ 777.504320][T14541] loop7: detected capacity change from 0 to 512 [ 777.568451][T14539] loop4: detected capacity change from 0 to 2048 [ 777.639187][T14541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.737397][T14541] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.878139][T14541] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 778.111404][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.439589][T14566] tipc: Failed to remove unknown binding: 66,0,0/0:279214746/279214747 [ 778.490347][T14566] tipc: Failed to remove unknown binding: 66,0,0/0:279214746/279214747 [ 778.503398][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 778.515156][T14565] loop7: detected capacity change from 0 to 512 [ 778.556370][T14571] loop5: detected capacity change from 0 to 512 [ 778.557660][T14565] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 778.586782][T14563] batadv0: entered promiscuous mode [ 778.618483][T14563] macvtap1: entered promiscuous mode [ 778.625738][T14563] macvtap1: entered allmulticast mode [ 778.631118][T14563] batadv0: entered allmulticast mode [ 778.632907][T14565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 778.638294][T14563] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 778.687773][T14565] System zones: 1-12 [ 778.691957][T14565] EXT4-fs (loop7): orphan cleanup on readonly fs [ 778.700806][T14571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.736581][T14571] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 778.758018][T14572] batadv0: left allmulticast mode [ 778.776202][T14565] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.2440: invalid indirect mapped block 2 (level 2) [ 778.825196][T14572] batadv0: left promiscuous mode [ 778.856461][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.865765][T14565] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 778.866599][T14565] EXT4-fs (loop7): Remounting filesystem read-only [ 778.866849][T14565] EXT4-fs (loop7): 1 truncate cleaned up [ 778.869025][T14565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 779.648084][T14592] loop5: detected capacity change from 0 to 1764 [ 779.859973][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 780.052205][ T30] audit: type=1326 audit(1771737146.106:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.221071][ T30] audit: type=1326 audit(1771737146.106:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.244147][ T30] audit: type=1326 audit(1771737146.116:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.352478][ T30] audit: type=1326 audit(1771737146.116:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.522232][ T30] audit: type=1326 audit(1771737146.146:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.630005][ T30] audit: type=1326 audit(1771737146.146:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.756445][ T30] audit: type=1326 audit(1771737146.146:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.847970][ T30] audit: type=1326 audit(1771737146.146:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.936462][T14618] loop5: detected capacity change from 0 to 2048 [ 780.946819][ T30] audit: type=1326 audit(1771737146.146:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 780.956116][T14620] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1311697269/1311697270 [ 781.013350][T14281] loop5: p1 p2 [ 781.051415][ T30] audit: type=1326 audit(1771737146.146:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.0.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 781.075824][T14620] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1311697269/1311697270 [ 781.099590][T14618] loop5: p1 p2 [ 781.296703][T14228] udevd[14228]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 781.314915][T14281] udevd[14281]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 781.438435][T14228] udevd[14228]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 781.451673][T14281] udevd[14281]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 785.594386][T14710] loop5: detected capacity change from 0 to 512 [ 785.681539][T14710] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2490: inode has both inline data and extents flags [ 785.758837][T14710] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 785.762197][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 785.777804][ C1] EXT4-fs (loop5): initial error at time 1771737151: ext4_orphan_get:1391: inode 15 [ 785.787241][ C1] EXT4-fs (loop5): last error at time 1771737151: ext4_orphan_get:1391: inode 15 [ 785.815118][T14710] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2490: couldn't read orphan inode 15 (err -117) [ 785.852280][T14710] loop5: lost filesystem error report for type 5 error -117 [ 785.862976][T14710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 786.228068][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 786.613868][T14731] tmpfs: Unknown parameter 'fscontext' [ 787.967674][T14749] random: crng reseeded on system resumption [ 790.287572][T14772] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2509'. [ 790.666995][ T30] audit: type=1326 audit(1771737156.766:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 790.851692][ T30] audit: type=1326 audit(1771737156.766:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 791.334588][T14798] tmpfs: Unknown parameter 'fscontext' [ 791.859539][ T30] audit: type=1326 audit(1771737156.806:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 791.883996][ T30] audit: type=1326 audit(1771737156.806:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 791.907345][ T30] audit: type=1326 audit(1771737156.806:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531759c629 code=0x7ffc0000 [ 792.455336][ T30] audit: type=1326 audit(1771737158.556:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628679c629 code=0x7ffc0000 [ 792.484715][T14821] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2525'. [ 792.533698][ T30] audit: type=1326 audit(1771737158.566:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628679c629 code=0x7ffc0000 [ 792.596257][T14824] syzkaller0: entered promiscuous mode [ 792.601855][T14824] syzkaller0: entered allmulticast mode [ 792.656226][ T30] audit: type=1326 audit(1771737158.566:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f628679c629 code=0x7ffc0000 [ 792.729883][ T30] audit: type=1326 audit(1771737158.566:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628679c629 code=0x7ffc0000 [ 792.765760][ T30] audit: type=1326 audit(1771737158.566:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628679c629 code=0x7ffc0000 [ 793.134243][T14843] syzkaller0: entered promiscuous mode [ 793.140971][T14843] syzkaller0: entered allmulticast mode [ 793.260376][ T5961] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 793.310601][ T5961] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 793.532399][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 793.832405][T14859] loop4: detected capacity change from 0 to 1024 [ 793.852385][ T24] usb 1-1: device descriptor read/64, error -71 [ 793.942290][T14861] tmpfs: Unknown parameter 'fscontext' [ 794.092792][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 794.498244][ T24] usb 1-1: device descriptor read/64, error -71 [ 794.782539][ T24] usb usb1-port1: attempt power cycle [ 795.162312][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 795.204056][ T24] usb 1-1: device descriptor read/8, error -71 [ 795.452489][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 795.514377][ T24] usb 1-1: device descriptor read/8, error -71 [ 795.626285][ T24] usb usb1-port1: unable to enumerate USB device [ 795.644588][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 795.659791][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 795.699777][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 795.725642][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 795.738609][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 796.805357][T14906] usb usb8: usbfs: process 14906 (syz.0.2545) did not claim interface 0 before use [ 797.846510][ T5835] Bluetooth: hci2: command tx timeout [ 798.242951][ T6298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.485090][ T6298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.845788][ T6298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.124307][ T6298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.422407][T14967] syzkaller0: entered promiscuous mode [ 799.427922][T14967] syzkaller0: entered allmulticast mode [ 799.680278][T14969] loop7: detected capacity change from 0 to 8192 [ 799.771547][T14969] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 799.916857][T14981] loop5: detected capacity change from 0 to 4096 [ 799.934503][ T5835] Bluetooth: hci2: command tx timeout [ 800.041559][T14981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.208317][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 800.208344][ T30] audit: type=1326 audit(1771737166.316:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.303314][ T30] audit: type=1326 audit(1771737166.366:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.328033][ T30] audit: type=1326 audit(1771737166.366:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.350877][ T30] audit: type=1326 audit(1771737166.376:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.381000][ T30] audit: type=1326 audit(1771737166.376:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.496896][ T30] audit: type=1326 audit(1771737166.376:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.564035][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.614975][ T30] audit: type=1326 audit(1771737166.376:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 800.700302][ T30] audit: type=1326 audit(1771737166.376:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 801.382653][ T30] audit: type=1326 audit(1771737166.376:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14990 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1bbf19c629 code=0x7ffc0000 [ 801.691698][T15008] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2579'. [ 801.706897][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2579'. [ 802.008578][ T5835] Bluetooth: hci2: command tx timeout [ 802.125081][T15026] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2585'. [ 804.088289][ T5835] Bluetooth: hci2: command tx timeout [ 805.191911][T15093] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2599'. [ 805.241555][ T6298] bridge_slave_1: left allmulticast mode [ 805.250551][ T6298] bridge_slave_1: left promiscuous mode [ 805.272811][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.283913][T15092] loop4: detected capacity change from 0 to 4096 [ 805.303863][ T6298] bridge_slave_0: left allmulticast mode [ 805.334698][T15092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.355883][ T6298] bridge_slave_0: left promiscuous mode [ 805.374645][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.469534][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.096096][ T6298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.121038][ T6298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.140180][ T6298] bond0 (unregistering): Released all slaves [ 806.205539][T14879] chnl_net:caif_netlink_parms(): no params data found [ 808.011311][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.022198][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.072826][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.081253][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.114741][T14879] bridge_slave_0: entered allmulticast mode [ 808.164339][T14879] bridge_slave_0: entered promiscuous mode [ 808.205533][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.250192][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.272537][T15145] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2611'. [ 808.286807][T14879] bridge_slave_1: entered allmulticast mode [ 808.324353][T14879] bridge_slave_1: entered promiscuous mode [ 808.403707][ T6298] hsr_slave_0: left promiscuous mode [ 808.441032][ T6298] hsr_slave_1: left promiscuous mode [ 808.466389][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.505951][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.548382][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.575655][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.720103][ T6298] veth1_macvtap: left promiscuous mode [ 808.753590][ T6298] veth0_macvtap: left promiscuous mode [ 808.776726][ T6298] veth1_vlan: left promiscuous mode [ 808.800876][ T6298] veth0_vlan: left promiscuous mode [ 809.707743][T15165] loop5: detected capacity change from 0 to 4096 [ 809.804470][T15165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.081859][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.093388][ T6298] team0 (unregistering): Port device team_slave_1 removed [ 810.173033][ T6298] team0 (unregistering): Port device team_slave_0 removed [ 810.684779][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.756170][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.175170][T15182] syzkaller0: entered promiscuous mode [ 811.212175][T15182] syzkaller0: entered allmulticast mode [ 811.244675][T14879] team0: Port device team_slave_0 added [ 811.265615][T14879] team0: Port device team_slave_1 added [ 812.693153][T15203] loop5: detected capacity change from 0 to 256 [ 813.063025][T15205] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2626'. [ 813.625071][T15209] xt_hashlimit: size too large, truncated to 1048576 [ 813.951609][T15211] loop5: detected capacity change from 0 to 128 [ 814.001783][T15211] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 814.100528][T15211] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 814.248086][T15215] loop4: detected capacity change from 0 to 4096 [ 814.299985][T15215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.399148][T12068] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.632778][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.629941][T15230] loop5: detected capacity change from 0 to 1024 [ 815.653882][T15230] EXT4-fs: Ignoring removed orlov option [ 815.671093][T15230] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 815.765202][T15230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.806096][T15235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2638'. [ 815.865447][ T30] audit: type=1800 audit(1771737181.976:400): pid=15230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2637" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 816.274409][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.500602][T15243] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 817.777347][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.825524][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.977272][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.046791][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.096940][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.191318][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.224933][T15252] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 818.503060][T15262] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2650'. [ 818.797752][T14879] hsr_slave_0: entered promiscuous mode [ 818.802652][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 818.835203][T14879] hsr_slave_1: entered promiscuous mode [ 818.850791][T14879] debugfs: 'hsr0' already exists in 'hsr' [ 818.868097][T14879] Cannot create hsr debugfs directory [ 818.912808][T15274] loop7: detected capacity change from 0 to 512 [ 818.934160][T15274] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 819.046147][T15274] EXT4-fs (loop7): 1 truncate cleaned up [ 819.101370][T15274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.432289][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.491536][T15285] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 819.532949][T15285] bond1 (unregistering): Released all slaves [ 820.554580][T15308] netlink: 'syz.0.2661': attribute type 4 has an invalid length. [ 820.955979][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2664'. [ 821.062510][T15320] tipc: Started in network mode [ 821.067421][T15320] tipc: Node identity ac1414aa, cluster identity 4711 [ 821.100687][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2667'. [ 821.111778][T15320] tipc: Enabled bearer , priority 10 [ 821.325023][ T30] audit: type=1326 audit(1771737187.436:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15324 comm="syz.8.2669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x0 [ 821.489814][T14879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 821.550902][T14879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 821.611063][T14879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 821.666257][T14879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 821.971099][T15354] loop4: detected capacity change from 0 to 4096 [ 822.075910][T15354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.101909][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.237263][ T5963] tipc: Node number set to 2886997162 [ 822.275658][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.308135][T15361] loop5: detected capacity change from 0 to 1764 [ 822.344364][T15361] iso9660: Unknown parameter 'sbsectorÿ' [ 822.357185][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.364382][T13977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.429236][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.462381][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.469564][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.699404][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2680'. [ 823.753656][ T30] audit: type=1326 audit(1771737189.856:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4209d9c629 code=0x7ffc0000 [ 823.868932][ T30] audit: type=1326 audit(1771737189.896:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f4209d9c629 code=0x7ffc0000 [ 823.961895][T15397] loop4: detected capacity change from 0 to 128 [ 823.993276][ T30] audit: type=1326 audit(1771737189.896:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4209d9c629 code=0x7ffc0000 [ 824.076639][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.094305][ T30] audit: type=1326 audit(1771737189.896:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4209d9c629 code=0x7ffc0000 [ 824.114250][T15397] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.151909][T15407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.159610][T15407] batadv_slave_0: entered promiscuous mode [ 824.245937][T15397] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 824.505276][T14879] veth0_vlan: entered promiscuous mode [ 824.608633][T14879] veth1_vlan: entered promiscuous mode [ 824.813601][T14879] veth0_macvtap: entered promiscuous mode [ 824.830071][T10584] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.879440][T14879] veth1_macvtap: entered promiscuous mode [ 825.045123][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.137537][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.248739][ T7267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.289102][ T7267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.344592][ T7267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.403542][ T7267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.765659][T15444] loop5: detected capacity change from 0 to 512 [ 825.812614][T15444] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 825.932321][T15444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 825.982490][T15444] System zones: 1-12 [ 825.988949][T15444] EXT4-fs (loop5): orphan cleanup on readonly fs [ 826.083013][T15444] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2694: invalid indirect mapped block 2 (level 2) [ 826.146975][T15444] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 826.152165][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 826.167779][ C0] EXT4-fs (loop5): initial error at time 1771737192: ext4_free_branches:1020: inode 11 [ 826.177486][ C0] EXT4-fs (loop5): last error at time 1771737192: ext4_free_branches:1020: inode 11 [ 826.203086][T15452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2697'. [ 826.269652][T15444] EXT4-fs (loop5): Remounting filesystem read-only [ 826.289023][T15444] EXT4-fs (loop5): 1 truncate cleaned up [ 826.331464][T15444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 826.982517][T15466] x_tables: duplicate underflow at hook 1 [ 828.157999][T15472] loop7: detected capacity change from 0 to 4096 [ 828.177426][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 828.276098][T15472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.487377][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.503052][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.717093][ T7267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.747151][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.762321][ T7267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.469751][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2710'. [ 830.417393][T15523] loop2: detected capacity change from 0 to 4096 [ 830.490061][T15523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.997462][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.383836][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2727'. [ 831.566267][T15559] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2729'. [ 831.627367][T15559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2729'. [ 831.668482][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2731'. [ 831.822838][T15559] geneve0: entered allmulticast mode [ 831.849479][T15568] loop7: detected capacity change from 0 to 512 [ 831.888815][T15568] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 831.944618][T15568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 832.000627][T15568] System zones: 1-12 [ 832.005955][T15568] EXT4-fs (loop7): orphan cleanup on readonly fs [ 832.012866][T15568] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.2733: invalid indirect mapped block 2 (level 2) [ 832.026205][T15568] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 832.032180][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 832.047754][ C0] EXT4-fs (loop7): initial error at time 1771737198: ext4_free_branches:1020: inode 11 [ 832.057457][ C0] EXT4-fs (loop7): last error at time 1771737198: ext4_free_branches:1020: inode 11 [ 832.075741][T15568] EXT4-fs (loop7): Remounting filesystem read-only [ 832.163483][T15568] EXT4-fs (loop7): 1 truncate cleaned up [ 832.216864][T15568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 832.324882][T15585] loop2: detected capacity change from 0 to 128 [ 832.513206][T15585] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 832.561161][T15585] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.215225][T14879] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 833.246637][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 833.452315][T15600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2745'. [ 833.667181][T15607] loop2: detected capacity change from 0 to 4096 [ 833.769144][T15607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.952482][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.703758][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 836.854373][T15658] loop4: detected capacity change from 0 to 4096 [ 836.965757][T15658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.385735][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.420234][T15673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2764'. [ 837.929016][T15686] syzkaller0: entered promiscuous mode [ 837.937686][T15686] syzkaller0: entered allmulticast mode [ 837.963735][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2771'. [ 838.287080][T15697] loop2: detected capacity change from 0 to 512 [ 839.043165][T15697] EXT4-fs (loop2): Test dummy encryption mode enabled [ 839.072680][T15697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 839.108804][T15697] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2774: bad orphan inode 131083 [ 839.139179][T15697] loop2: lost filesystem error report for type 5 error -117 [ 839.142164][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 839.155917][ C0] EXT4-fs (loop2): initial error at time 1771737205: ext4_orphan_get:1417 [ 839.164491][ C0] EXT4-fs (loop2): last error at time 1771737205: ext4_orphan_get:1417 [ 839.225770][T15697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.520959][T15718] netlink: 'syz.2.2774': attribute type 4 has an invalid length. [ 839.530287][T15714] loop4: detected capacity change from 0 to 4096 [ 839.671328][T15714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.976047][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2783'. [ 840.015161][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.075160][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.973769][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 842.062312][T15762] netlink: 2160 bytes leftover after parsing attributes in process `syz.4.2791'. [ 842.112227][T15762] netlink: 2160 bytes leftover after parsing attributes in process `syz.4.2791'. [ 842.277353][T15772] loop5: detected capacity change from 0 to 512 [ 842.332691][T15772] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 842.390981][T15772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 842.489956][T15772] System zones: 1-12 [ 842.536838][T15781] loop4: detected capacity change from 0 to 4096 [ 842.548175][T15772] EXT4-fs (loop5): orphan cleanup on readonly fs [ 842.561434][T15780] loop7: detected capacity change from 0 to 512 [ 842.585516][T15772] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2795: invalid indirect mapped block 2 (level 2) [ 842.618882][T15772] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 842.622163][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 842.637773][ C1] EXT4-fs (loop5): initial error at time 1771737208: ext4_free_branches:1020: inode 11 [ 842.647482][ C1] EXT4-fs (loop5): last error at time 1771737208: ext4_free_branches:1020: inode 11 [ 842.678484][T15781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.691351][T15772] EXT4-fs (loop5): Remounting filesystem read-only [ 842.741523][T15780] EXT4-fs (loop7): Test dummy encryption mode enabled [ 842.748924][T15772] EXT4-fs (loop5): 1 truncate cleaned up [ 842.802863][T15780] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 842.819157][T15772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 842.976439][T15780] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2798: bad orphan inode 131083 [ 843.027677][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2799'. [ 843.077532][T15780] loop7: lost filesystem error report for type 5 error -117 [ 843.082168][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 843.095947][ C0] EXT4-fs (loop7): initial error at time 1771737209: ext4_orphan_get:1417 [ 843.104500][ C0] EXT4-fs (loop7): last error at time 1771737209: ext4_orphan_get:1417 [ 843.130045][T15780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.190443][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.758587][T15795] netlink: 'syz.7.2798': attribute type 4 has an invalid length. [ 843.989045][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 844.313074][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.239039][T15843] loop4: detected capacity change from 0 to 512 [ 846.322961][T15843] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 846.385137][T15843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 846.648608][T15843] System zones: 1-12 [ 846.993564][T15843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 847.272889][T15843] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.2815: invalid indirect mapped block 2 (level 2) [ 847.276318][T15853] syz.2.2817 (15853) used greatest stack depth: 19120 bytes left [ 847.362484][T15843] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 847.363162][T15843] EXT4-fs (loop4): Remounting filesystem read-only [ 847.372391][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 847.372432][ C1] EXT4-fs (loop4): initial error at time 1771737213: ext4_free_branches:1020: inode 11 [ 847.372492][ C1] EXT4-fs (loop4): last error at time 1771737213: ext4_free_branches:1020: inode 11 [ 847.506845][T15843] EXT4-fs (loop4): 1 truncate cleaned up [ 847.546377][T15843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 847.633638][T15870] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 847.633638][T15870] The task syz.7.2819 (15870) triggered the difference, watch for misbehavior. [ 848.320526][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2819'. [ 848.606013][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 851.742553][T15961] loop7: detected capacity change from 0 to 512 [ 851.784577][T15961] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 851.852603][T15961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 851.897736][T15961] System zones: 1-12 [ 851.901944][T15961] EXT4-fs (loop7): orphan cleanup on readonly fs [ 851.958437][T15961] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.2837: invalid indirect mapped block 2 (level 2) [ 851.971703][T15961] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 851.972151][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 851.987722][ C0] EXT4-fs (loop7): initial error at time 1771737218: ext4_free_branches:1020: inode 11 [ 851.997442][ C0] EXT4-fs (loop7): last error at time 1771737218: ext4_free_branches:1020: inode 11 [ 852.011805][T15961] EXT4-fs (loop7): Remounting filesystem read-only [ 852.042994][T15961] EXT4-fs (loop7): 1 truncate cleaned up [ 852.050766][T15961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 853.221078][T15978] syzkaller0: entered promiscuous mode [ 853.275248][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 853.299940][T15978] syzkaller0: entered allmulticast mode [ 853.883229][T15970] loop4: detected capacity change from 0 to 8192 [ 855.360235][T15996] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 855.371174][T15996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 855.380805][T15996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 855.967554][T16025] loop5: detected capacity change from 0 to 512 [ 855.990953][T16025] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 856.041891][T16024] loop2: detected capacity change from 0 to 4096 [ 856.086381][T16025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 856.103056][T16024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.192498][T16025] System zones: 1-12 [ 856.403240][T16025] EXT4-fs (loop5): orphan cleanup on readonly fs [ 856.410060][T16025] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2856: invalid indirect mapped block 2 (level 2) [ 857.052233][T16036] bridge1: entered promiscuous mode [ 857.057568][T16036] bridge1: entered allmulticast mode [ 857.174281][T16025] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 857.182160][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 857.197771][ C0] EXT4-fs (loop5): initial error at time 1771737223: ext4_free_branches:1020: inode 11 [ 857.207470][ C0] EXT4-fs (loop5): last error at time 1771737223: ext4_free_branches:1020: inode 11 [ 857.240708][T16025] EXT4-fs (loop5): Remounting filesystem read-only [ 858.132562][T16025] EXT4-fs (loop5): 1 truncate cleaned up [ 858.140349][T16025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 858.284732][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.186863][ T9454] Bluetooth: hci4: Frame reassembly failed (-84) [ 859.257419][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 861.212210][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 861.220260][ T5834] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 861.242024][T16099] syzkaller0: entered promiscuous mode [ 861.292270][T16099] syzkaller0: entered allmulticast mode [ 861.398391][ T30] audit: type=1326 audit(1771737227.456:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 861.499682][ T30] audit: type=1326 audit(1771737227.496:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 861.645827][ T30] audit: type=1326 audit(1771737227.506:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe932f5cece code=0x7ffc0000 [ 861.772211][ T30] audit: type=1326 audit(1771737227.506:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe932f5cece code=0x7ffc0000 [ 861.851453][T16123] loop2: detected capacity change from 0 to 512 [ 861.901279][T16123] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 862.013359][T16123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 862.021435][T16123] System zones: 1-12 [ 862.063712][ T30] audit: type=1326 audit(1771737227.506:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 862.089423][T16123] EXT4-fs (loop2): orphan cleanup on readonly fs [ 862.268119][T16123] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.2877: invalid indirect mapped block 2 (level 2) [ 862.425592][ T30] audit: type=1326 audit(1771737227.506:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 862.831849][T16123] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 862.833288][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 862.848898][ C1] EXT4-fs (loop2): initial error at time 1771737228: ext4_free_branches:1020: inode 11 [ 862.858609][ C1] EXT4-fs (loop2): last error at time 1771737228: ext4_free_branches:1020: inode 11 [ 862.887378][T16123] EXT4-fs (loop2): Remounting filesystem read-only [ 862.955454][ T30] audit: type=1326 audit(1771737227.526:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 862.962501][T16123] EXT4-fs (loop2): 1 truncate cleaned up [ 862.992236][ T30] audit: type=1326 audit(1771737227.526:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.8.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 863.134685][T16123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 864.001872][T16153] loop7: detected capacity change from 0 to 4096 [ 864.547273][T16153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.614513][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 865.617962][T16161] bridge1: entered promiscuous mode [ 865.640231][T16161] bridge1: entered allmulticast mode [ 865.761664][T16164] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2887'. [ 865.859009][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2887'. [ 865.911937][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.923821][ T30] audit: type=1326 audit(1771737232.016:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16168 comm="syz.8.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 865.946675][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 866.032384][ T30] audit: type=1326 audit(1771737232.016:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16168 comm="syz.8.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 867.538572][T16193] syzkaller0: entered promiscuous mode [ 867.570777][T16193] syzkaller0: entered allmulticast mode [ 867.619473][T16217] loop5: detected capacity change from 0 to 512 [ 867.655214][T16217] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 867.701697][T16217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 867.715979][T16217] System zones: 1-12 [ 867.720400][T16217] EXT4-fs (loop5): orphan cleanup on readonly fs [ 867.731593][T16217] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2901: invalid indirect mapped block 2 (level 2) [ 867.746319][T16217] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 867.746747][T16217] EXT4-fs (loop5): Remounting filesystem read-only [ 867.755911][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 867.755942][ C1] EXT4-fs (loop5): initial error at time 1771737233: ext4_free_branches:1020: inode 11 [ 867.755999][ C1] EXT4-fs (loop5): last error at time 1771737233: ext4_free_branches:1020: inode 11 [ 867.812597][T16217] EXT4-fs (loop5): 1 truncate cleaned up [ 867.890316][T16225] loop7: detected capacity change from 0 to 256 [ 867.934477][T16217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 868.111151][T16225] FAT-fs (loop7): Directory bread(block 64) failed [ 868.170481][T16225] FAT-fs (loop7): Directory bread(block 65) failed [ 868.230621][T16225] FAT-fs (loop7): Directory bread(block 66) failed [ 868.282304][T16225] FAT-fs (loop7): Directory bread(block 67) failed [ 868.356584][T16225] FAT-fs (loop7): Directory bread(block 68) failed [ 868.366567][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 868.366589][ T30] audit: type=1326 audit(1771737234.466:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.8.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 868.569381][T16225] FAT-fs (loop7): Directory bread(block 69) failed [ 868.716914][T16225] FAT-fs (loop7): Directory bread(block 70) failed [ 868.821099][T16225] FAT-fs (loop7): Directory bread(block 71) failed [ 868.871807][T16225] FAT-fs (loop7): Directory bread(block 72) failed [ 868.943475][T16225] FAT-fs (loop7): Directory bread(block 73) failed [ 869.046972][ T30] audit: type=1326 audit(1771737234.466:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.8.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 869.074036][ T30] audit: type=1326 audit(1771737234.466:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.8.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 869.086596][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 869.107071][ T30] audit: type=1326 audit(1771737234.466:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.8.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 869.447668][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.480772][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.232469][T16257] random: crng reseeded on system resumption [ 871.237886][T16268] loop2: detected capacity change from 0 to 512 [ 871.335462][ T30] audit: type=1326 audit(1771737237.436:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 871.389435][ T30] audit: type=1326 audit(1771737237.446:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 871.414117][ T30] audit: type=1326 audit(1771737237.446:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 871.436906][ T30] audit: type=1326 audit(1771737237.446:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe932f9c629 code=0x7ffc0000 [ 871.463974][T16268] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.2919: invalid indirect mapped block 256 (level 2) [ 871.478444][T16268] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 871.481647][T16268] EXT4-fs (loop2): 2 truncates cleaned up [ 871.490854][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 871.490887][ C0] EXT4-fs (loop2): initial error at time 1771737237: ext4_free_branches:1020: inode 11 [ 871.490942][ C0] EXT4-fs (loop2): last error at time 1771737237: ext4_free_branches:1020: inode 11 [ 871.574698][T16268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.790457][ T1204] kernel write not supported for file /1017/gid_map (pid: 1204 comm: kworker/1:2) [ 872.973500][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.077435][T16303] usb usb8: usbfs: process 16303 (syz.8.2932) did not claim interface 0 before use [ 874.416197][T16340] loop2: detected capacity change from 0 to 512 [ 874.488851][T16340] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 874.561260][T16340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 874.618790][T16340] System zones: 1-12 [ 874.646737][T16340] EXT4-fs (loop2): orphan cleanup on readonly fs [ 874.681091][T16340] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.2945: invalid indirect mapped block 2 (level 2) [ 874.711811][T16340] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 874.712165][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 874.727757][ C0] EXT4-fs (loop2): initial error at time 1771737240: ext4_free_branches:1020: inode 11 [ 874.737468][ C0] EXT4-fs (loop2): last error at time 1771737240: ext4_free_branches:1020: inode 11 [ 874.749500][T16340] EXT4-fs (loop2): Remounting filesystem read-only [ 874.772574][T16340] EXT4-fs (loop2): 1 truncate cleaned up [ 874.827664][T16340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 875.008780][T16356] loop4: detected capacity change from 0 to 256 [ 875.573979][T16356] FAT-fs (loop4): Directory bread(block 64) failed [ 875.620820][T16356] FAT-fs (loop4): Directory bread(block 65) failed [ 875.665931][T16356] FAT-fs (loop4): Directory bread(block 66) failed [ 875.729580][T16356] FAT-fs (loop4): Directory bread(block 67) failed [ 875.772347][T16356] FAT-fs (loop4): Directory bread(block 68) failed [ 875.806185][T16356] FAT-fs (loop4): Directory bread(block 69) failed [ 875.863468][T16356] FAT-fs (loop4): Directory bread(block 70) failed [ 875.884980][T16356] FAT-fs (loop4): Directory bread(block 71) failed [ 875.928178][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 875.934432][T16356] FAT-fs (loop4): Directory bread(block 72) failed [ 875.957692][T16356] FAT-fs (loop4): Directory bread(block 73) failed [ 877.281761][T16380] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2953'. [ 878.012469][T16393] loop7: detected capacity change from 0 to 1764 [ 878.280457][T16409] loop5: detected capacity change from 0 to 512 [ 878.368339][T16409] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 878.445380][T16409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 878.462402][T16409] System zones: 1-12 [ 878.466645][T16409] EXT4-fs (loop5): orphan cleanup on readonly fs [ 878.537917][T16409] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2966: invalid indirect mapped block 2 (level 2) [ 878.626185][T16409] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 878.626712][T16409] EXT4-fs (loop5): Remounting filesystem read-only [ 878.635936][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 878.635969][ C0] EXT4-fs (loop5): initial error at time 1771737244: ext4_free_branches:1020: inode 11 [ 878.636020][ C0] EXT4-fs (loop5): last error at time 1771737244: ext4_free_branches:1020: inode 11 [ 878.766134][T16409] EXT4-fs (loop5): 1 truncate cleaned up [ 878.820426][T16409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 879.518419][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 882.187236][T16489] loop7: detected capacity change from 0 to 512 [ 882.289378][T16489] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 882.610590][T16496] random: crng reseeded on system resumption [ 882.824842][T16489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 883.041027][T16489] System zones: 1-12 [ 883.076068][T16489] EXT4-fs (loop7): orphan cleanup on readonly fs [ 883.202470][T16489] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 33619980: comm syz.7.2992: invalid block [ 883.342038][T16489] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 883.352157][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 883.367765][ C1] EXT4-fs (loop7): initial error at time 1771737249: ext4_get_branch:178: inode 11: block 33619980 [ 883.378571][ C1] EXT4-fs (loop7): last error at time 1771737249: ext4_get_branch:178: inode 11: block 33619980 [ 883.402984][T16489] EXT4-fs (loop7): Remounting filesystem read-only [ 883.462574][T16489] EXT4-fs (loop7): 1 truncate cleaned up [ 883.530284][T16489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 884.997055][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 886.470604][T16564] random: crng reseeded on system resumption [ 890.625560][T16597] syzkaller0: entered promiscuous mode [ 890.655782][T16597] syzkaller0: entered allmulticast mode [ 893.599526][T16653] loop4: detected capacity change from 0 to 512 [ 893.682216][T16653] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 894.050759][T16653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 894.572625][T16653] System zones: 1-12 [ 894.582775][T16653] EXT4-fs (loop4): orphan cleanup on readonly fs [ 894.650917][T16653] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3040: invalid block [ 894.784125][T16653] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 894.792168][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 894.807787][ C1] EXT4-fs (loop4): initial error at time 1771737260: ext4_get_branch:178: inode 11: block 33619980 [ 894.818545][ C1] EXT4-fs (loop4): last error at time 1771737260: ext4_get_branch:178: inode 11: block 33619980 [ 894.841446][T16653] EXT4-fs (loop4): Remounting filesystem read-only [ 894.913445][T16653] EXT4-fs (loop4): 1 truncate cleaned up [ 894.921226][T16653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 896.299020][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 896.411923][T16671] syzkaller0: entered promiscuous mode [ 896.440814][T16671] syzkaller0: entered allmulticast mode [ 898.517795][T16720] loop2: detected capacity change from 0 to 512 [ 898.604445][T16720] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 898.788117][T16720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 898.930884][T16720] System zones: 1-12 [ 898.959165][T16720] EXT4-fs (loop2): orphan cleanup on readonly fs [ 899.123691][T16720] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3059: invalid indirect mapped block 2 (level 2) [ 899.532234][T16720] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 899.542165][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 899.557772][ C1] EXT4-fs (loop2): initial error at time 1771737265: ext4_free_branches:1020: inode 11 [ 899.567478][ C1] EXT4-fs (loop2): last error at time 1771737265: ext4_free_branches:1020: inode 11 [ 899.578800][T16720] EXT4-fs (loop2): Remounting filesystem read-only [ 899.635399][T16720] EXT4-fs (loop2): 1 truncate cleaned up [ 899.710855][T16720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 902.195822][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 903.012499][T16781] loop7: detected capacity change from 0 to 256 [ 903.167761][T16781] FAT-fs (loop7): Directory bread(block 64) failed [ 903.179676][T16773] syzkaller0: entered promiscuous mode [ 903.234712][T16781] FAT-fs (loop7): Directory bread(block 65) failed [ 903.241344][T16781] FAT-fs (loop7): Directory bread(block 66) failed [ 903.283296][T16773] syzkaller0: entered allmulticast mode [ 903.289914][T16781] FAT-fs (loop7): Directory bread(block 67) failed [ 903.309503][T16781] FAT-fs (loop7): Directory bread(block 68) failed [ 903.350605][T16791] loop4: detected capacity change from 0 to 512 [ 903.359053][T16781] FAT-fs (loop7): Directory bread(block 69) failed [ 903.499295][T16781] FAT-fs (loop7): Directory bread(block 70) failed [ 903.509125][T16791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 903.533311][T16781] FAT-fs (loop7): Directory bread(block 71) failed [ 903.575014][T16781] FAT-fs (loop7): Directory bread(block 72) failed [ 903.581568][T16781] FAT-fs (loop7): Directory bread(block 73) failed [ 903.612914][T16791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 903.620949][T16791] System zones: 1-12 [ 903.696345][T16791] EXT4-fs (loop4): orphan cleanup on readonly fs [ 904.003730][T16791] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.3083: invalid indirect mapped block 2 (level 2) [ 904.710363][T16791] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 904.712198][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 904.727996][ C0] EXT4-fs (loop4): initial error at time 1771737270: ext4_free_branches:1020: inode 11 [ 904.737891][ C0] EXT4-fs (loop4): last error at time 1771737270: ext4_free_branches:1020: inode 11 [ 905.636385][T16791] EXT4-fs (loop4): Remounting filesystem read-only [ 905.682545][T16791] EXT4-fs (loop4): 1 truncate cleaned up [ 905.729158][T16806] netlink: 'syz.5.3087': attribute type 4 has an invalid length. [ 905.745599][T16791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 909.833019][T16847] loop5: detected capacity change from 0 to 1024 [ 909.853501][T16847] EXT4-fs: Ignoring removed orlov option [ 909.872756][T16847] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 910.024165][T16847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.112253][ T30] audit: type=1800 audit(1771737276.216:427): pid=16847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3102" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 910.172978][T16852] netlink: 'syz.8.3103': attribute type 4 has an invalid length. [ 910.380903][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.337876][T16854] macvlan0: entered promiscuous mode [ 911.364641][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 911.402062][T16854] dummy0: entered promiscuous mode [ 911.411854][T16854] hsr1: entered promiscuous mode [ 911.463280][T16854] hsr1: entered allmulticast mode [ 911.468366][T16854] macvlan0: entered allmulticast mode [ 911.545220][T16854] veth1_vlan: entered allmulticast mode [ 911.572337][T16854] dummy0: entered allmulticast mode [ 912.155693][T16882] loop4: detected capacity change from 0 to 256 [ 912.325599][T16890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.374519][T16882] FAT-fs (loop4): Directory bread(block 64) failed [ 912.392411][T16890] batadv_slave_0: entered promiscuous mode [ 912.412596][T16882] FAT-fs (loop4): Directory bread(block 65) failed [ 912.419214][T16882] FAT-fs (loop4): Directory bread(block 66) failed [ 912.430250][T16892] loop7: detected capacity change from 0 to 512 [ 912.467980][T16882] FAT-fs (loop4): Directory bread(block 67) failed [ 912.492684][T16892] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 912.553213][T16882] FAT-fs (loop4): Directory bread(block 68) failed [ 912.588334][T16892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 912.620130][T16882] FAT-fs (loop4): Directory bread(block 69) failed [ 912.646691][T16892] System zones: 1-12 [ 912.692482][T16882] FAT-fs (loop4): Directory bread(block 70) failed [ 912.699060][T16882] FAT-fs (loop4): Directory bread(block 71) failed [ 912.719979][T16892] EXT4-fs (loop7): orphan cleanup on readonly fs [ 912.799853][T16892] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.3119: invalid indirect mapped block 2 (level 2) [ 912.862424][T16882] FAT-fs (loop4): Directory bread(block 72) failed [ 912.902307][T16892] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 912.912186][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 912.927829][ C1] EXT4-fs (loop7): initial error at time 1771737279: ext4_free_branches:1020: inode 11 [ 912.937645][ C1] EXT4-fs (loop7): last error at time 1771737279: ext4_free_branches:1020: inode 11 [ 912.944547][T16882] FAT-fs (loop4): Directory bread(block 73) failed [ 913.187865][T16892] EXT4-fs (loop7): Remounting filesystem read-only [ 913.565988][T16892] EXT4-fs (loop7): 1 truncate cleaned up [ 913.679639][T16892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 916.300119][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 917.661314][T16934] loop2: detected capacity change from 0 to 1764 [ 917.676004][T16931] macvlan0: entered promiscuous mode [ 917.758005][T16931] dummy0: entered promiscuous mode [ 917.877526][T16931] debugfs: 'hsr1' already exists in 'hsr' [ 917.949323][T16931] Cannot create hsr debugfs directory [ 918.037596][T16931] hsr1: entered promiscuous mode [ 918.089608][T16931] hsr1: entered allmulticast mode [ 918.136913][T16931] macvlan0: entered allmulticast mode [ 918.218428][T16931] veth1_vlan: entered allmulticast mode [ 918.225617][T16931] dummy0: entered allmulticast mode [ 918.420982][T16953] loop5: detected capacity change from 0 to 512 [ 918.500257][T16953] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 918.570002][T16953] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 918.623106][T16953] System zones: 1-12 [ 918.627558][T16953] EXT4-fs (loop5): orphan cleanup on readonly fs [ 918.639139][T16953] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.3138: invalid indirect mapped block 2 (level 2) [ 918.656076][T16953] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 918.662164][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 918.677723][ C1] EXT4-fs (loop5): initial error at time 1771737284: ext4_free_branches:1020: inode 11 [ 918.687411][ C1] EXT4-fs (loop5): last error at time 1771737284: ext4_free_branches:1020: inode 11 [ 918.699099][T16953] EXT4-fs (loop5): Remounting filesystem read-only [ 918.706910][T16953] EXT4-fs (loop5): 1 truncate cleaned up [ 918.715131][T16953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 918.736024][T16961] loop7: detected capacity change from 0 to 256 [ 918.929413][T16961] FAT-fs (loop7): Directory bread(block 64) failed [ 918.972638][T16961] FAT-fs (loop7): Directory bread(block 65) failed [ 918.979682][T16961] FAT-fs (loop7): Directory bread(block 66) failed [ 918.986697][T16961] FAT-fs (loop7): Directory bread(block 67) failed [ 918.994000][T16961] FAT-fs (loop7): Directory bread(block 68) failed [ 919.002012][T16961] FAT-fs (loop7): Directory bread(block 69) failed [ 919.018863][T16961] FAT-fs (loop7): Directory bread(block 70) failed [ 919.037968][T16961] FAT-fs (loop7): Directory bread(block 71) failed [ 919.086307][T16961] FAT-fs (loop7): Directory bread(block 72) failed [ 919.349607][T16961] FAT-fs (loop7): Directory bread(block 73) failed [ 919.791030][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 920.177866][T16984] loop2: detected capacity change from 0 to 1764 [ 921.470530][T17006] loop2: detected capacity change from 0 to 512 [ 921.494364][T17006] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 921.524482][T17006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 921.565911][T17006] System zones: 1-12 [ 921.570122][T17006] EXT4-fs (loop2): orphan cleanup on readonly fs [ 921.611194][T17006] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3157: invalid indirect mapped block 2 (level 2) [ 921.722268][T17006] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 921.728508][T17006] EXT4-fs (loop2): Remounting filesystem read-only [ 921.737723][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 921.737755][ C1] EXT4-fs (loop2): initial error at time 1771737287: ext4_free_branches:1020: inode 11 [ 921.737808][ C1] EXT4-fs (loop2): last error at time 1771737287: ext4_free_branches:1020: inode 11 [ 921.853103][T17006] EXT4-fs (loop2): 1 truncate cleaned up [ 921.891866][T17006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 922.723904][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 922.883129][T17033] loop4: detected capacity change from 0 to 1764 [ 923.097766][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 923.623641][T17046] syzkaller0: entered promiscuous mode [ 923.661302][T17046] syzkaller0: entered allmulticast mode [ 923.940769][T17075] loop4: detected capacity change from 0 to 256 [ 924.137217][T17075] FAT-fs (loop4): Directory bread(block 64) failed [ 924.152359][T17075] FAT-fs (loop4): Directory bread(block 65) failed [ 924.158955][T17075] FAT-fs (loop4): Directory bread(block 66) failed [ 924.192981][T17075] FAT-fs (loop4): Directory bread(block 67) failed [ 924.199595][T17075] FAT-fs (loop4): Directory bread(block 68) failed [ 924.269766][T17075] FAT-fs (loop4): Directory bread(block 69) failed [ 924.302624][T17075] FAT-fs (loop4): Directory bread(block 70) failed [ 924.333262][T17075] FAT-fs (loop4): Directory bread(block 71) failed [ 924.339913][T17075] FAT-fs (loop4): Directory bread(block 72) failed [ 924.365210][T17075] FAT-fs (loop4): Directory bread(block 73) failed [ 926.200512][T17107] loop5: detected capacity change from 0 to 1764 [ 927.121442][T17115] loop5: detected capacity change from 0 to 1024 [ 927.146924][T17115] EXT4-fs: Ignoring removed orlov option [ 927.187939][T17115] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 927.240326][T17115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.382953][ T30] audit: type=1800 audit(1771737293.446:428): pid=17115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3192" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 927.519449][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.313432][T17137] loop2: detected capacity change from 0 to 256 [ 928.370399][T17137] FAT-fs (loop2): Directory bread(block 64) failed [ 928.385961][T17137] FAT-fs (loop2): Directory bread(block 65) failed [ 928.407041][T17137] FAT-fs (loop2): Directory bread(block 66) failed [ 928.432230][T17137] FAT-fs (loop2): Directory bread(block 67) failed [ 928.438856][T17137] FAT-fs (loop2): Directory bread(block 68) failed [ 928.463967][T17137] FAT-fs (loop2): Directory bread(block 69) failed [ 928.470631][T17137] FAT-fs (loop2): Directory bread(block 70) failed [ 928.506600][T17137] FAT-fs (loop2): Directory bread(block 71) failed [ 928.519193][T17137] FAT-fs (loop2): Directory bread(block 72) failed [ 928.530557][T17137] FAT-fs (loop2): Directory bread(block 73) failed [ 929.392966][T17150] loop5: detected capacity change from 0 to 1024 [ 929.400869][T17150] EXT4-fs: Ignoring removed orlov option [ 929.408978][T17150] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 929.461092][T17150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.481394][ T30] audit: type=1800 audit(1771737295.586:429): pid=17150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3207" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 929.598866][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.480926][T17183] loop2: detected capacity change from 0 to 256 [ 930.686776][T17183] FAT-fs (loop2): Directory bread(block 64) failed [ 930.727882][T17183] FAT-fs (loop2): Directory bread(block 65) failed [ 930.748327][T17183] FAT-fs (loop2): Directory bread(block 66) failed [ 930.792958][T17183] FAT-fs (loop2): Directory bread(block 67) failed [ 930.831224][T17183] FAT-fs (loop2): Directory bread(block 68) failed [ 930.857310][T17183] FAT-fs (loop2): Directory bread(block 69) failed [ 930.867517][T17183] FAT-fs (loop2): Directory bread(block 70) failed [ 930.888203][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.896331][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.915976][T17183] FAT-fs (loop2): Directory bread(block 71) failed [ 930.926204][T17201] loop7: detected capacity change from 0 to 512 [ 930.936250][T17183] FAT-fs (loop2): Directory bread(block 72) failed [ 930.963680][T17183] FAT-fs (loop2): Directory bread(block 73) failed [ 930.977778][T17201] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 931.074949][T17201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 931.112671][T17201] System zones: 1-12 [ 931.116905][T17201] EXT4-fs (loop7): orphan cleanup on readonly fs [ 931.124183][T17201] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.3224: invalid indirect mapped block 2 (level 2) [ 931.137501][T17201] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 931.142164][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 931.157767][ C1] EXT4-fs (loop7): initial error at time 1771737297: ext4_free_branches:1020: inode 11 [ 931.167954][ C1] EXT4-fs (loop7): last error at time 1771737297: ext4_free_branches:1020: inode 11 [ 931.298283][T17201] EXT4-fs (loop7): Remounting filesystem read-only [ 931.323744][T17195] syzkaller0: entered promiscuous mode [ 931.332590][T17201] EXT4-fs (loop7): 1 truncate cleaned up [ 931.383479][T17201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 931.383827][T17195] syzkaller0: entered allmulticast mode [ 934.079632][T17267] loop4: detected capacity change from 0 to 256 [ 934.186564][T17267] FAT-fs (loop4): Directory bread(block 64) failed [ 934.193303][T17267] FAT-fs (loop4): Directory bread(block 65) failed [ 934.209004][T17267] FAT-fs (loop4): Directory bread(block 66) failed [ 934.216157][T17267] FAT-fs (loop4): Directory bread(block 67) failed [ 934.223138][T17267] FAT-fs (loop4): Directory bread(block 68) failed [ 934.229668][T17267] FAT-fs (loop4): Directory bread(block 69) failed [ 934.236324][T17267] FAT-fs (loop4): Directory bread(block 70) failed [ 934.244736][T17267] FAT-fs (loop4): Directory bread(block 71) failed [ 934.251384][T17267] FAT-fs (loop4): Directory bread(block 72) failed [ 934.259956][T17267] FAT-fs (loop4): Directory bread(block 73) failed [ 934.766858][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 935.977871][T17305] loop2: detected capacity change from 0 to 512 [ 936.033254][T17305] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 936.069008][T17305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 936.127995][T17305] System zones: 1-12 [ 936.143532][T17305] EXT4-fs (loop2): orphan cleanup on readonly fs [ 936.224238][T17305] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3255: invalid indirect mapped block 2 (level 2) [ 936.293626][T17305] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 936.301955][T17305] EXT4-fs (loop2): Remounting filesystem read-only [ 936.311170][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 936.311205][ C0] EXT4-fs (loop2): initial error at time 1771737302: ext4_free_branches:1020: inode 11 [ 936.311263][ C0] EXT4-fs (loop2): last error at time 1771737302: ext4_free_branches:1020: inode 11 [ 936.382360][T17305] EXT4-fs (loop2): 1 truncate cleaned up [ 936.444215][T17305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 936.702446][T17323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3258'. [ 937.483356][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 938.587514][T17373] loop5: detected capacity change from 0 to 512 [ 938.672247][T17373] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 938.728795][T17373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 938.754061][T17373] System zones: 1-12 [ 938.758326][T17373] EXT4-fs (loop5): orphan cleanup on readonly fs [ 938.779145][T17373] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.3275: invalid indirect mapped block 2 (level 2) [ 938.882667][T17373] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 938.885758][T17373] EXT4-fs (loop5): Remounting filesystem read-only [ 938.895018][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 938.895057][ C0] EXT4-fs (loop5): initial error at time 1771737304: ext4_free_branches:1020: inode 11 [ 938.895110][ C0] EXT4-fs (loop5): last error at time 1771737304: ext4_free_branches:1020: inode 11 [ 939.010506][T17386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'. [ 939.063286][T17373] EXT4-fs (loop5): 1 truncate cleaned up [ 939.127406][T17373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 940.825661][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 942.734369][T17424] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3291'. [ 943.023200][T17434] loop7: detected capacity change from 0 to 512 [ 943.131249][T17434] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 943.285753][T17434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 943.395942][T17441] loop5: detected capacity change from 0 to 256 [ 943.403608][T17434] System zones: 1-12 [ 943.411147][T17434] EXT4-fs (loop7): orphan cleanup on readonly fs [ 943.432710][T17434] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.3294: invalid indirect mapped block 2 (level 2) [ 943.497968][T17434] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 943.502207][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 943.517900][ C0] EXT4-fs (loop7): initial error at time 1771737309: ext4_free_branches:1020: inode 11 [ 943.527666][ C0] EXT4-fs (loop7): last error at time 1771737309: ext4_free_branches:1020: inode 11 [ 943.537483][T17434] EXT4-fs (loop7): Remounting filesystem read-only [ 943.548327][T17434] EXT4-fs (loop7): 1 truncate cleaned up [ 943.572094][T17434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 943.661857][T17441] FAT-fs (loop5): Directory bread(block 64) failed [ 943.680090][T17441] FAT-fs (loop5): Directory bread(block 65) failed [ 943.717974][T17441] FAT-fs (loop5): Directory bread(block 66) failed [ 943.742359][T17441] FAT-fs (loop5): Directory bread(block 67) failed [ 943.769528][T17441] FAT-fs (loop5): Directory bread(block 68) failed [ 943.828565][T17441] FAT-fs (loop5): Directory bread(block 69) failed [ 943.882456][T17441] FAT-fs (loop5): Directory bread(block 70) failed [ 943.947287][T17441] FAT-fs (loop5): Directory bread(block 71) failed [ 944.071039][T17441] FAT-fs (loop5): Directory bread(block 72) failed [ 944.295331][T17441] FAT-fs (loop5): Directory bread(block 73) failed [ 944.672950][T13441] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 945.147014][T17470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3309'. [ 946.730216][T17500] loop2: detected capacity change from 0 to 512 [ 946.837056][T17500] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 946.919006][T17500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 946.969766][T17500] System zones: 1-12 [ 946.992576][T17500] EXT4-fs (loop2): orphan cleanup on readonly fs [ 946.999706][T17500] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3316: invalid indirect mapped block 2 (level 2) [ 947.137048][T17500] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 947.137637][T17500] EXT4-fs (loop2): Remounting filesystem read-only [ 947.146899][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 947.146997][ C1] EXT4-fs (loop2): initial error at time 1771737313: ext4_free_branches:1020: inode 11 [ 947.147094][ C1] EXT4-fs (loop2): last error at time 1771737313: ext4_free_branches:1020: inode 11 [ 947.342988][T17500] EXT4-fs (loop2): 1 truncate cleaned up [ 947.366713][T17500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 947.766969][T17514] loop4: detected capacity change from 0 to 256 [ 948.430970][T17514] FAT-fs (loop4): Directory bread(block 64) failed [ 948.455770][T17514] FAT-fs (loop4): Directory bread(block 65) failed [ 948.466642][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 948.477006][T17514] FAT-fs (loop4): Directory bread(block 66) failed [ 948.507582][T17514] FAT-fs (loop4): Directory bread(block 67) failed [ 948.545411][T17514] FAT-fs (loop4): Directory bread(block 68) failed [ 948.552002][T17514] FAT-fs (loop4): Directory bread(block 69) failed [ 948.623967][T17514] FAT-fs (loop4): Directory bread(block 70) failed [ 948.630595][T17514] FAT-fs (loop4): Directory bread(block 71) failed [ 948.676688][T17514] FAT-fs (loop4): Directory bread(block 72) failed [ 948.713420][T17514] FAT-fs (loop4): Directory bread(block 73) failed [ 948.883984][T17523] syzkaller0: entered promiscuous mode [ 948.940617][T17523] syzkaller0: entered allmulticast mode [ 949.561441][T17547] loop2: detected capacity change from 0 to 512 [ 949.716764][T17547] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 949.813145][T17547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 949.856471][T17547] System zones: 1-12 [ 949.872378][T17547] EXT4-fs (loop2): orphan cleanup on readonly fs [ 949.881025][T17547] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3337: invalid indirect mapped block 2 (level 2) [ 950.351855][T17547] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 950.362219][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 950.377974][ C1] EXT4-fs (loop2): initial error at time 1771737316: ext4_free_branches:1020: inode 11 [ 950.387708][ C1] EXT4-fs (loop2): last error at time 1771737316: ext4_free_branches:1020: inode 11 [ 950.524716][T17547] EXT4-fs (loop2): Remounting filesystem read-only [ 950.574964][T17547] EXT4-fs (loop2): 1 truncate cleaned up [ 950.673463][T17547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 954.261496][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 956.396482][T17623] syzkaller0: entered promiscuous mode [ 956.428902][T17623] syzkaller0: entered allmulticast mode [ 959.085057][T17667] loop5: detected capacity change from 0 to 256 [ 959.189414][T17667] FAT-fs (loop5): Directory bread(block 64) failed [ 959.221703][T17667] FAT-fs (loop5): Directory bread(block 65) failed [ 959.265995][T17667] FAT-fs (loop5): Directory bread(block 66) failed [ 959.298212][T17667] FAT-fs (loop5): Directory bread(block 67) failed [ 959.325538][T17667] FAT-fs (loop5): Directory bread(block 68) failed [ 959.360864][T17667] FAT-fs (loop5): Directory bread(block 69) failed [ 959.383811][T17667] FAT-fs (loop5): Directory bread(block 70) failed [ 959.404234][T17667] FAT-fs (loop5): Directory bread(block 71) failed [ 959.419252][T17667] FAT-fs (loop5): Directory bread(block 72) failed [ 959.434083][T17667] FAT-fs (loop5): Directory bread(block 73) failed [ 961.943026][T17689] loop2: detected capacity change from 0 to 512 [ 961.981252][T17689] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 962.023554][T17689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 962.081521][T17689] System zones: 1-12 [ 962.122583][T17689] EXT4-fs (loop2): orphan cleanup on readonly fs [ 962.160281][T17689] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3375: invalid indirect mapped block 2 (level 2) [ 962.215951][T17705] loop5: detected capacity change from 0 to 256 [ 962.222920][T17689] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 962.224118][T17689] EXT4-fs (loop2): Remounting filesystem read-only [ 962.233367][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 962.233406][ C1] EXT4-fs (loop2): initial error at time 1771737328: ext4_free_branches:1020: inode 11 [ 962.233461][ C1] EXT4-fs (loop2): last error at time 1771737328: ext4_free_branches:1020: inode 11 [ 962.356476][T17689] EXT4-fs (loop2): 1 truncate cleaned up [ 962.370648][T17705] FAT-fs (loop5): Directory bread(block 64) failed [ 962.394628][T17705] FAT-fs (loop5): Directory bread(block 65) failed [ 962.403705][T17689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 962.433055][T17705] FAT-fs (loop5): Directory bread(block 66) failed [ 962.453806][T17705] FAT-fs (loop5): Directory bread(block 67) failed [ 962.469634][T17705] FAT-fs (loop5): Directory bread(block 68) failed [ 962.489504][T17710] netlink: 79 bytes leftover after parsing attributes in process `syz.7.3382'. [ 962.524127][T17705] FAT-fs (loop5): Directory bread(block 69) failed [ 962.570737][T17705] FAT-fs (loop5): Directory bread(block 70) failed [ 962.597843][T17705] FAT-fs (loop5): Directory bread(block 71) failed [ 962.651348][T17705] FAT-fs (loop5): Directory bread(block 72) failed [ 962.700920][T17705] FAT-fs (loop5): Directory bread(block 73) failed [ 964.061161][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 964.790538][T17727] syzkaller0: entered promiscuous mode [ 964.796440][T17727] syzkaller0: entered allmulticast mode [ 967.627957][T17771] loop7: detected capacity change from 0 to 256 [ 967.679988][T17771] FAT-fs (loop7): Directory bread(block 64) failed [ 967.707836][T17771] FAT-fs (loop7): Directory bread(block 65) failed [ 967.716345][T17774] loop4: detected capacity change from 0 to 512 [ 967.716363][T17771] FAT-fs (loop7): Directory bread(block 66) failed [ 967.729736][T17771] FAT-fs (loop7): Directory bread(block 67) failed [ 967.753426][T17771] FAT-fs (loop7): Directory bread(block 68) failed [ 967.763100][T17774] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 967.772220][T17771] FAT-fs (loop7): Directory bread(block 69) failed [ 967.779244][T17771] FAT-fs (loop7): Directory bread(block 70) failed [ 967.834137][T17774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 967.843060][T17774] System zones: 1-12 [ 967.843494][T17771] FAT-fs (loop7): Directory bread(block 71) failed [ 967.853175][T17774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 967.882405][T17771] FAT-fs (loop7): Directory bread(block 72) failed [ 967.888948][T17771] FAT-fs (loop7): Directory bread(block 73) failed [ 967.906380][T17774] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.3398: invalid indirect mapped block 2 (level 2) [ 967.959382][T17774] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 967.959912][T17774] EXT4-fs (loop4): Remounting filesystem read-only [ 967.969112][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 967.969145][ C0] EXT4-fs (loop4): initial error at time 1771737334: ext4_free_branches:1020: inode 11 [ 967.969196][ C0] EXT4-fs (loop4): last error at time 1771737334: ext4_free_branches:1020: inode 11 [ 968.003335][T17774] EXT4-fs (loop4): 1 truncate cleaned up [ 968.027955][T17774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 970.196258][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 970.944893][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'. [ 971.514493][T17832] loop4: detected capacity change from 0 to 1024 [ 971.554942][T17832] EXT4-fs: Ignoring removed orlov option [ 971.636604][T17832] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 971.691125][T17832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.753008][ T30] audit: type=1800 audit(1771737337.856:430): pid=17832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3413" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 972.075007][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.129000][T17851] syzkaller0: entered promiscuous mode [ 973.146242][T17851] syzkaller0: entered allmulticast mode [ 973.508780][T17876] loop4: detected capacity change from 0 to 512 [ 973.542724][T17876] EXT4-fs (loop4): 1 truncate cleaned up [ 973.577302][T17876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.796657][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.971409][T17913] loop4: detected capacity change from 0 to 512 [ 974.991801][T17913] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 975.039010][T17913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 975.068710][T17913] System zones: 1-12 [ 975.073595][T17913] EXT4-fs (loop4): orphan cleanup on readonly fs [ 975.080541][T17913] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.3438: invalid indirect mapped block 2 (level 2) [ 975.107860][T17913] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 975.108918][T17913] EXT4-fs (loop4): Remounting filesystem read-only [ 975.118155][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 975.118189][ C1] EXT4-fs (loop4): initial error at time 1771737341: ext4_free_branches:1020: inode 11 [ 975.118243][ C1] EXT4-fs (loop4): last error at time 1771737341: ext4_free_branches:1020: inode 11 [ 975.156183][T17913] EXT4-fs (loop4): 1 truncate cleaned up [ 975.169110][T17913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 976.627583][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 977.307683][T17945] loop7: detected capacity change from 0 to 256 [ 977.399648][T17945] FAT-fs (loop7): Directory bread(block 64) failed [ 977.426678][T17945] FAT-fs (loop7): Directory bread(block 65) failed [ 977.453409][T17945] FAT-fs (loop7): Directory bread(block 66) failed [ 977.492263][T17945] FAT-fs (loop7): Directory bread(block 67) failed [ 977.529487][T17945] FAT-fs (loop7): Directory bread(block 68) failed [ 977.554513][T17945] FAT-fs (loop7): Directory bread(block 69) failed [ 977.601948][T17945] FAT-fs (loop7): Directory bread(block 70) failed [ 977.657100][T17945] FAT-fs (loop7): Directory bread(block 71) failed [ 977.724193][T17945] FAT-fs (loop7): Directory bread(block 72) failed [ 977.730744][T17945] FAT-fs (loop7): Directory bread(block 73) failed [ 978.776012][T17958] syzkaller0: entered promiscuous mode [ 978.808247][T17961] loop2: detected capacity change from 0 to 512 [ 978.826788][T17958] syzkaller0: entered allmulticast mode [ 978.899091][T17961] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 978.973794][T17961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 979.002549][T17961] System zones: 1-12 [ 979.009844][T17961] EXT4-fs (loop2): orphan cleanup on readonly fs [ 979.056871][T17961] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.3454: invalid block [ 979.139471][T17961] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 979.142637][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 979.158328][ C0] EXT4-fs (loop2): initial error at time 1771737345: ext4_get_branch:178: inode 11: block 33619980 [ 979.169132][ C0] EXT4-fs (loop2): last error at time 1771737345: ext4_get_branch:178: inode 11: block 33619980 [ 979.179663][T17961] EXT4-fs (loop2): Remounting filesystem read-only [ 979.242681][T17961] EXT4-fs (loop2): 1 truncate cleaned up [ 979.250511][T17961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 983.267658][T14879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 983.910235][T18017] loop2: detected capacity change from 0 to 256 [ 984.555307][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3468'. [ 984.609731][T18017] FAT-fs (loop2): Directory bread(block 64) failed [ 984.675329][T18017] FAT-fs (loop2): Directory bread(block 65) failed [ 984.749067][T18017] FAT-fs (loop2): Directory bread(block 66) failed [ 984.772247][T18017] FAT-fs (loop2): Directory bread(block 67) failed [ 984.799555][T18017] FAT-fs (loop2): Directory bread(block 68) failed [ 984.848840][T18017] FAT-fs (loop2): Directory bread(block 69) failed [ 984.892436][T18017] FAT-fs (loop2): Directory bread(block 70) failed [ 984.919460][T18017] FAT-fs (loop2): Directory bread(block 71) failed [ 984.983962][T18017] FAT-fs (loop2): Directory bread(block 72) failed [ 984.990540][T18017] FAT-fs (loop2): Directory bread(block 73) failed [ 985.261981][T18034] loop4: detected capacity change from 0 to 512 [ 985.331480][T18034] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 985.382331][T18034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 985.390430][T18034] System zones: 1-12 [ 985.410647][T18034] EXT4-fs (loop4): orphan cleanup on readonly fs [ 985.438861][T18034] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.3474: invalid indirect mapped block 2 (level 2) [ 985.453350][T18034] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 985.462172][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 985.477858][ C0] EXT4-fs (loop4): initial error at time 1771737351: ext4_free_branches:1020: inode 11 [ 985.487631][ C0] EXT4-fs (loop4): last error at time 1771737351: ext4_free_branches:1020: inode 11 [ 985.498193][T18034] EXT4-fs (loop4): Remounting filesystem read-only [ 985.522775][T18034] EXT4-fs (loop4): 1 truncate cleaned up [ 985.656674][T18034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 987.224299][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 989.447063][T18078] loop4: detected capacity change from 0 to 256 [ 989.498081][T18078] FAT-fs (loop4): Directory bread(block 64) failed [ 989.510435][T18078] FAT-fs (loop4): Directory bread(block 65) failed [ 989.544246][T18078] FAT-fs (loop4): Directory bread(block 66) failed [ 989.563011][T18078] FAT-fs (loop4): Directory bread(block 67) failed [ 989.599656][T18078] FAT-fs (loop4): Directory bread(block 68) failed [ 989.611963][T18078] FAT-fs (loop4): Directory bread(block 69) failed [ 989.629081][T18078] FAT-fs (loop4): Directory bread(block 70) failed [ 989.639151][T18078] FAT-fs (loop4): Directory bread(block 71) failed [ 989.662117][T18078] FAT-fs (loop4): Directory bread(block 72) failed [ 989.668810][T18078] FAT-fs (loop4): Directory bread(block 73) failed [ 990.400285][T18092] loop5: detected capacity change from 0 to 512 [ 990.449196][T18092] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 990.480734][ T30] audit: type=1804 audit(1771737356.586:431): pid=18088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3490" name="/newroot/586/file0" dev="tmpfs" ino=3062 res=1 errno=0 [ 990.541059][T18092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 990.561801][T18092] System zones: 1-12 [ 990.574047][T18090] syzkaller0: entered promiscuous mode [ 990.591873][T18092] EXT4-fs (loop5): orphan cleanup on readonly fs [ 990.604716][T18090] syzkaller0: entered allmulticast mode [ 990.612727][T18092] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.3494: invalid indirect mapped block 2 (level 2) [ 990.715196][T18092] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 990.715695][T18092] EXT4-fs (loop5): Remounting filesystem read-only [ 990.724965][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 990.724999][ C1] EXT4-fs (loop5): initial error at time 1771737356: ext4_free_branches:1020: inode 11 [ 990.725054][ C1] EXT4-fs (loop5): last error at time 1771737356: ext4_free_branches:1020: inode 11 [ 990.772566][T18092] EXT4-fs (loop5): 1 truncate cleaned up [ 990.886245][T18092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 991.152727][T18098] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3498'. [ 992.326715][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.333420][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.344520][T12068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 995.992036][T18144] loop4: detected capacity change from 0 to 256 [ 996.164196][T18144] FAT-fs (loop4): Directory bread(block 64) failed [ 996.180576][T18152] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3513'. [ 996.190792][T18144] FAT-fs (loop4): Directory bread(block 65) failed [ 996.242389][T18144] FAT-fs (loop4): Directory bread(block 66) failed [ 996.248956][T18144] FAT-fs (loop4): Directory bread(block 67) failed [ 996.292460][T18144] FAT-fs (loop4): Directory bread(block 68) failed [ 996.299038][T18144] FAT-fs (loop4): Directory bread(block 69) failed [ 996.310277][T18144] FAT-fs (loop4): Directory bread(block 70) failed [ 996.323437][T18144] FAT-fs (loop4): Directory bread(block 71) failed [ 996.330062][T18144] FAT-fs (loop4): Directory bread(block 72) failed [ 996.337262][T18144] FAT-fs (loop4): Directory bread(block 73) failed [ 997.895753][T18180] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3520'. [ 998.428888][T18185] syzkaller0: entered promiscuous mode [ 998.471912][T18185] syzkaller0: entered allmulticast mode [ 999.400012][T18202] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3529'. [ 999.728585][T18215] loop7: detected capacity change from 0 to 256 [ 999.786354][T18215] FAT-fs (loop7): Directory bread(block 64) failed [ 999.801934][T18215] FAT-fs (loop7): Directory bread(block 65) failed [ 999.821924][T18215] FAT-fs (loop7): Directory bread(block 66) failed [ 999.839850][T18215] FAT-fs (loop7): Directory bread(block 67) failed [ 999.854518][T18215] FAT-fs (loop7): Directory bread(block 68) failed [ 999.881437][T18215] FAT-fs (loop7): Directory bread(block 69) failed [ 999.916275][T18215] FAT-fs (loop7): Directory bread(block 70) failed [ 999.930774][T18215] FAT-fs (loop7): Directory bread(block 71) failed [ 999.949473][T18215] FAT-fs (loop7): Directory bread(block 72) failed [ 999.968073][T18215] FAT-fs (loop7): Directory bread(block 73) failed [ 1001.679590][ T30] audit: type=1326 audit(1771737367.786:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.2.3544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ec179c629 code=0x0 [ 1002.755735][T18255] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3551'. [ 1002.956733][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.993626][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1003.012577][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1003.044757][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1003.075065][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1003.216857][T18265] loop4: detected capacity change from 0 to 512 [ 1003.316270][T18265] EXT4-fs (loop4): 1 truncate cleaned up [ 1003.427662][T18265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.692698][T10584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.837067][T18285] loop2: detected capacity change from 0 to 256 [ 1004.022343][T18285] FAT-fs (loop2): Directory bread(block 64) failed [ 1004.041597][T18285] FAT-fs (loop2): Directory bread(block 65) failed [ 1004.102626][T18285] FAT-fs (loop2): Directory bread(block 66) failed [ 1004.152369][T18285] FAT-fs (loop2): Directory bread(block 67) failed [ 1004.213607][T18285] FAT-fs (loop2): Directory bread(block 68) failed [ 1004.292371][T18285] FAT-fs (loop2): Directory bread(block 69) failed [ 1004.920246][T18285] FAT-fs (loop2): Directory bread(block 70) failed [ 1004.952299][T18285] FAT-fs (loop2): Directory bread(block 71) failed [ 1005.012594][T18285] FAT-fs (loop2): Directory bread(block 72) failed [ 1005.071820][T18285] FAT-fs (loop2): Directory bread(block 73) failed [ 1005.225100][ T5834] Bluetooth: hci4: command tx timeout [ 1006.155436][T18260] chnl_net:caif_netlink_parms(): no params data found [ 1007.008890][T18338] loop4: detected capacity change from 0 to 128 [ 1007.169954][T18260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.221722][T18260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.229390][T18260] bridge_slave_0: entered allmulticast mode [ 1007.245204][T18260] bridge_slave_0: entered promiscuous mode [ 1007.282752][ T5834] Bluetooth: hci4: command tx timeout [ 1007.322326][T18260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.330034][T18260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.337814][T18260] bridge_slave_1: entered allmulticast mode [ 1007.385778][T18260] bridge_slave_1: entered promiscuous mode [ 1008.235951][T18260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.352643][T18343] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1008.374685][T18343] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1008.397440][T18260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.620590][T18343] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1008.660831][T18343] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1008.719544][T18343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1008.749636][T18373] loop2: detected capacity change from 0 to 256 [ 1008.766657][T18343] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1008.808158][T18260] team0: Port device team_slave_0 added [ 1008.825702][T18260] team0: Port device team_slave_1 added [ 1008.864379][T18343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1008.890170][T18373] FAT-fs (loop2): Directory bread(block 64) failed [ 1008.922737][T18343] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1008.940272][T18373] FAT-fs (loop2): Directory bread(block 65) failed [ 1008.977510][T18373] FAT-fs (loop2): Directory bread(block 66) failed [ 1009.000296][T18343] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1009.025107][T18373] FAT-fs (loop2): Directory bread(block 67) failed [ 1009.053914][T18343] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1009.062383][T18260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.072827][T18373] FAT-fs (loop2): Directory bread(block 68) failed [ 1009.103488][T18343] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1009.110224][T18260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.146028][T18373] FAT-fs (loop2): Directory bread(block 69) failed [ 1009.154467][T18343] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1009.175479][T18373] FAT-fs (loop2): Directory bread(block 70) failed [ 1009.193476][T18343] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1009.208392][T18373] FAT-fs (loop2): Directory bread(block 71) failed [ 1009.221704][T18373] FAT-fs (loop2): Directory bread(block 72) failed [ 1009.240238][T18260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.263590][T18373] FAT-fs (loop2): Directory bread(block 73) failed [ 1009.302219][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 1009.347298][T18260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.400250][T18260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.776207][T18260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.115490][T18260] hsr_slave_0: entered promiscuous mode [ 1010.140406][T18260] hsr_slave_1: entered promiscuous mode [ 1010.151203][T18260] debugfs: 'hsr0' already exists in 'hsr' [ 1010.162191][T18260] Cannot create hsr debugfs directory [ 1010.272721][T18384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.283817][ T5963] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1010.323038][T18384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.652924][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 1010.732768][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.884557][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1011.046527][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1011.130218][ T5834] Bluetooth: hci4: command 0x0419 tx timeout [ 1011.158985][T18260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.362238][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 1011.448491][T18260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.808172][T18260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.059289][T18260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.615283][T18413] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1012.632688][T18413] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1012.644226][T18413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1012.664134][T18413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1012.674747][T18413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1012.689828][T18413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1012.753004][T18260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1012.813374][T18260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1012.866079][T18260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1012.923016][T18260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1013.021266][T18440] loop7: detected capacity change from 0 to 256 [ 1013.039158][T18437] syzkaller0: entered promiscuous mode [ 1013.055582][T18437] syzkaller0: entered allmulticast mode [ 1013.284325][T18440] FAT-fs (loop7): Directory bread(block 64) failed [ 1013.322263][T18440] FAT-fs (loop7): Directory bread(block 65) failed [ 1013.329057][T18440] FAT-fs (loop7): Directory bread(block 66) failed [ 1013.341322][T18440] FAT-fs (loop7): Directory bread(block 67) failed [ 1013.368936][T18440] FAT-fs (loop7): Directory bread(block 68) failed [ 1013.399147][T18440] FAT-fs (loop7): Directory bread(block 69) failed [ 1013.433545][T18440] FAT-fs (loop7): Directory bread(block 70) failed [ 1013.469619][T18440] FAT-fs (loop7): Directory bread(block 71) failed [ 1013.503931][T18440] FAT-fs (loop7): Directory bread(block 72) failed [ 1013.535054][T18440] FAT-fs (loop7): Directory bread(block 73) failed [ 1013.538290][T18260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.661595][T18260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.724855][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.732053][T13977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.752090][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.759343][T13977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.082993][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 1014.244386][T18260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1014.276846][T18260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1014.437988][T18471] ipt_REJECT: ECHOREPLY no longer supported. [ 1015.283884][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 1015.289965][ T5834] Bluetooth: hci4: command 0x0419 tx timeout [ 1015.296089][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1015.333873][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 1015.337507][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.161764][T18260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.245822][T18260] veth0_vlan: entered promiscuous mode [ 1017.261925][T18260] veth1_vlan: entered promiscuous mode [ 1017.323096][T18260] veth0_macvtap: entered promiscuous mode [ 1017.337221][T18260] veth1_macvtap: entered promiscuous mode [ 1017.362466][ T5834] Bluetooth: hci4: command 0x0419 tx timeout [ 1017.547638][T18260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.758014][T18260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.097904][T18502] syzkaller0: entered promiscuous mode [ 1018.153211][T18502] syzkaller0: entered allmulticast mode [ 1018.205546][T13981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.257987][T13981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.287632][T13981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.807098][T18533] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1018.984473][T18534] loop4: detected capacity change from 0 to 512 [ 1019.362896][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3624'. [ 1019.442449][ T5834] Bluetooth: hci4: command 0x0419 tx timeout [ 1020.462183][T13981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.804884][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.852382][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.045610][T18544] loop2: detected capacity change from 0 to 256 [ 1021.220455][ T7267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.249401][T18544] FAT-fs (loop2): Directory bread(block 64) failed [ 1021.264103][ T7267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.331858][T18552] ipt_REJECT: ECHOREPLY no longer supported. [ 1022.188999][T18544] FAT-fs (loop2): Directory bread(block 65) failed [ 1023.401876][T18544] FAT-fs (loop2): Directory bread(block 66) failed [ 1023.488978][T18544] FAT-fs (loop2): Directory bread(block 67) failed [ 1023.532961][T18544] FAT-fs (loop2): Directory bread(block 68) failed [ 1023.539527][T18544] FAT-fs (loop2): Directory bread(block 69) failed [ 1023.644723][T18544] FAT-fs (loop2): Directory bread(block 70) failed [ 1023.703790][T18544] FAT-fs (loop2): Directory bread(block 71) failed [ 1023.710447][T18544] FAT-fs (loop2): Directory bread(block 72) failed [ 1023.797740][T18544] FAT-fs (loop2): Directory bread(block 73) failed [ 1025.358463][T18580] syzkaller0: entered promiscuous mode [ 1025.377676][T18580] syzkaller0: entered allmulticast mode [ 1025.448405][T18590] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1025.728540][T18591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1026.222202][ T30] audit: type=1804 audit(1771737392.286:433): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3636" name="/newroot/369/file0" dev="tmpfs" ino=1950 res=1 errno=0 [ 1026.659438][T18603] syzkaller0: entered promiscuous mode [ 1026.702262][T18603] syzkaller0: entered allmulticast mode [ 1026.880425][T18612] loop7: detected capacity change from 0 to 256 [ 1027.146695][T18612] FAT-fs (loop7): Directory bread(block 64) failed [ 1027.196127][T18612] FAT-fs (loop7): Directory bread(block 65) failed [ 1027.283253][T18612] FAT-fs (loop7): Directory bread(block 66) failed [ 1027.293407][T18612] FAT-fs (loop7): Directory bread(block 67) failed [ 1027.352984][T18628] ipt_REJECT: ECHOREPLY no longer supported. [ 1027.397411][T18612] FAT-fs (loop7): Directory bread(block 68) failed [ 1028.257352][T18612] FAT-fs (loop7): Directory bread(block 69) failed [ 1028.354679][T18612] FAT-fs (loop7): Directory bread(block 70) failed [ 1028.361235][T18612] FAT-fs (loop7): Directory bread(block 71) failed [ 1029.280479][T18612] FAT-fs (loop7): Directory bread(block 72) failed [ 1029.718404][T18612] FAT-fs (loop7): Directory bread(block 73) failed [ 1031.965670][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1032.303284][ T1205] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1032.451690][T18671] syzkaller0: entered promiscuous mode [ 1032.462395][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 1032.487303][T18671] syzkaller0: entered allmulticast mode [ 1032.495805][ T1205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.536506][ T1205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.605970][ T1205] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1032.665781][ T1205] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1032.675470][ T1205] usb 3-1: Product: syz [ 1032.679827][ T1205] usb 3-1: Manufacturer: syz [ 1032.751575][ T1205] hub 3-1:4.0: USB hub found [ 1032.993351][ T1205] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1033.114842][ T1205] usb 3-1: USB disconnect, device number 10 [ 1033.230538][T18695] veth0_vlan: entered allmulticast mode [ 1033.261342][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3671'. [ 1033.956575][T18695] veth1_vlan (unregistering): left allmulticast mode [ 1034.436694][T18695] macvlan0 (unregistering): left promiscuous mode [ 1034.693562][T18724] syzkaller0: entered promiscuous mode [ 1034.699074][T18724] syzkaller0: entered allmulticast mode [ 1034.846983][T18732] loop2: detected capacity change from 0 to 512 [ 1034.884548][T18731] loop4: detected capacity change from 0 to 512 [ 1034.914546][T18731] EXT4-fs: Ignoring removed nobh option [ 1034.927618][T18732] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1035.010019][T18732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 1035.053772][T18731] [ 1035.056147][T18731] ====================================================== [ 1035.057415][T18732] System zones: [ 1035.063157][T18731] WARNING: possible circular locking dependency detected [ 1035.063176][T18731] syzkaller #0 Not tainted [ 1035.063193][T18731] ------------------------------------------------------ [ 1035.063207][T18731] syz.4.3684/18731 is trying to acquire lock: [ 1035.063226][T18731] ffff888062164b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 1035.077027][T18732] 1-12 [ 1035.078199][T18731] [ 1035.078199][T18731] but task is already holding lock: [ 1035.111028][T18731] ffff88806c03a728 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x606/0x8b0 [ 1035.119901][T18732] [ 1035.120918][T18731] [ 1035.120918][T18731] which lock already depends on the new lock. [ 1035.120918][T18731] [ 1035.120931][T18731] [ 1035.120931][T18731] the existing dependency chain (in reverse order) is: [ 1035.120945][T18731] [ 1035.120945][T18731] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1035.120998][T18731] down_write+0x8b/0x1f0 [ 1035.121046][T18731] ext4_destroy_inline_data+0x2d/0xe0 [ 1035.121096][T18731] ext4_do_writepages+0x1185/0x3f50 [ 1035.121134][T18731] ext4_writepages+0x347/0x790 [ 1035.121171][T18731] do_writepages+0x278/0x600 [ 1035.121218][T18731] filemap_writeback+0x22d/0x2e0 [ 1035.121275][T18731] file_write_and_wait_range+0xcd/0x140 [ 1035.121333][T18731] generic_buffers_fsync_noflush+0x77/0x490 [ 1035.121373][T18731] ext4_sync_file+0x63e/0xf10 [ 1035.121406][T18731] vfs_fsync_range+0x9b/0x190 [ 1035.121457][T18731] ext4_buffered_write_iter+0x2e2/0x440 [ 1035.121514][T18731] ext4_file_write_iter+0xa2f/0x1d40 [ 1035.121569][T18731] iter_file_splice_write+0x82b/0x10a0 [ 1035.121617][T18731] direct_splice_actor+0x192/0x6c0 [ 1035.121665][T18731] splice_direct_to_actor+0x345/0xa30 [ 1035.121712][T18731] do_splice_direct+0x174/0x240 [ 1035.121758][T18731] do_sendfile+0xadc/0xe20 [ 1035.121793][T18731] __x64_sys_sendfile64+0x1d8/0x220 [ 1035.121844][T18731] do_syscall_64+0x106/0xf80 [ 1035.121883][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.121921][T18731] [ 1035.121921][T18731] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1035.121976][T18731] __lock_acquire+0x14b8/0x2630 [ 1035.122029][T18731] lock_acquire+0x1cf/0x380 [ 1035.281331][T18731] ext4_writepages+0x21d/0x790 [ 1035.286640][T18731] do_writepages+0x278/0x600 [ 1035.291772][T18731] __writeback_single_inode+0x164/0x13c0 [ 1035.297935][T18731] writeback_single_inode+0x4d3/0xf30 [ 1035.303843][T18731] write_inode_now+0x174/0x1f0 [ 1035.309137][T18731] iput.part.0+0x7f3/0xf50 [ 1035.314075][T18731] iput+0x35/0x40 [ 1035.318230][T18731] ext4_xattr_block_set+0x6f7/0x3660 [ 1035.324064][T18731] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1035.330506][T18731] __ext4_expand_extra_isize+0x346/0x480 [ 1035.336683][T18731] __ext4_mark_inode_dirty+0x693/0x8b0 [ 1035.342674][T18731] ext4_evict_inode+0x860/0x17c0 [ 1035.348140][T18731] evict+0x3c2/0xad0 [ 1035.352558][T18731] iput.part.0+0x605/0xf50 [ 1035.357499][T18731] iput+0x35/0x40 [ 1035.361658][T18731] ext4_orphan_cleanup+0x71e/0x11e0 [ 1035.367388][T18731] ext4_fill_super+0x9009/0xb470 [ 1035.372861][T18731] get_tree_bdev_flags+0x38c/0x620 [ 1035.378505][T18731] vfs_get_tree+0x92/0x320 [ 1035.383446][T18731] path_mount+0x7d0/0x23d0 [ 1035.388406][T18731] __x64_sys_mount+0x293/0x310 [ 1035.393715][T18731] do_syscall_64+0x106/0xf80 [ 1035.398919][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.405339][T18731] [ 1035.405339][T18731] other info that might help us debug this: [ 1035.405339][T18731] [ 1035.415557][T18731] Possible unsafe locking scenario: [ 1035.415557][T18731] [ 1035.423001][T18731] CPU0 CPU1 [ 1035.428356][T18731] ---- ---- [ 1035.433717][T18731] lock(&ei->xattr_sem); [ 1035.438050][T18731] lock(&sbi->s_writepages_rwsem); [ 1035.445767][T18731] lock(&ei->xattr_sem); [ 1035.452639][T18731] rlock(&sbi->s_writepages_rwsem); [ 1035.457925][T18731] [ 1035.457925][T18731] *** DEADLOCK *** [ 1035.457925][T18731] [ 1035.466052][T18731] 3 locks held by syz.4.3684/18731: [ 1035.471247][T18731] #0: ffff88802d3560e0 (&type->s_umount_key#29/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1035.481410][T18731] #1: ffff88802d356610 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 1035.489975][T18731] #2: ffff88806c03a728 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x606/0x8b0 [ 1035.500298][T18731] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1035.500298][T18731] stack backtrace: [ 1035.506191][T18731] CPU: 0 UID: 0 PID: 18731 Comm: syz.4.3684 Not tainted syzkaller #0 PREEMPT(full) [ 1035.506232][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.506257][T18731] Call Trace: [ 1035.506269][T18731] [ 1035.506283][T18731] dump_stack_lvl+0x100/0x190 [ 1035.506335][T18731] print_circular_bug.cold+0x178/0x1c7 [ 1035.506392][T18731] check_noncircular+0x146/0x160 [ 1035.506444][T18731] __lock_acquire+0x14b8/0x2630 [ 1035.506497][T18731] ? update_load_avg+0x1fd/0x1ba0 [ 1035.506550][T18731] lock_acquire+0x1cf/0x380 [ 1035.506597][T18731] ? do_writepages+0x278/0x600 [ 1035.506643][T18731] ? __pfx___might_resched+0x10/0x10 [ 1035.506679][T18731] ext4_writepages+0x21d/0x790 [ 1035.506715][T18731] ? do_writepages+0x278/0x600 [ 1035.506758][T18731] ? set_next_entity+0x11b/0x9c0 [ 1035.506809][T18731] ? __pfx_ext4_writepages+0x10/0x10 [ 1035.506852][T18731] ? do_writepages+0x4b5/0x600 [ 1035.506896][T18731] ? do_writepages+0x4b5/0x600 [ 1035.506939][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.506982][T18731] ? __pfx_ext4_writepages+0x10/0x10 [ 1035.507020][T18731] do_writepages+0x278/0x600 [ 1035.507067][T18731] ? __pfx_do_writepages+0x10/0x10 [ 1035.507112][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507152][T18731] ? mark_held_locks+0x40/0x70 [ 1035.507201][T18731] __writeback_single_inode+0x164/0x13c0 [ 1035.507245][T18731] ? find_held_lock+0x2b/0x80 [ 1035.507282][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507324][T18731] ? __pfx___writeback_single_inode+0x10/0x10 [ 1035.507363][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507403][T18731] ? do_raw_spin_unlock+0x145/0x1e0 [ 1035.507434][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507478][T18731] writeback_single_inode+0x4d3/0xf30 [ 1035.507521][T18731] write_inode_now+0x174/0x1f0 [ 1035.507559][T18731] ? __pfx_write_inode_now+0x10/0x10 [ 1035.507620][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507660][T18731] ? find_held_lock+0x2b/0x80 [ 1035.507696][T18731] ? iput.part.0+0x7e6/0xf50 [ 1035.507725][T18731] ? iput.part.0+0x7e6/0xf50 [ 1035.507753][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507798][T18731] iput.part.0+0x7f3/0xf50 [ 1035.507827][T18731] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1035.507864][T18731] iput+0x35/0x40 [ 1035.507891][T18731] ext4_xattr_block_set+0x6f7/0x3660 [ 1035.507944][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.507987][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.508032][T18731] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 1035.508086][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.508126][T18731] ? xattr_find_entry+0x240/0x2e0 [ 1035.508175][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.508215][T18731] ? ext4_xattr_block_find+0x59/0x430 [ 1035.508271][T18731] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1035.508340][T18731] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1035.508399][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.508439][T18731] ? dquot_initialize_needed+0x183/0x2a0 [ 1035.508479][T18731] __ext4_expand_extra_isize+0x346/0x480 [ 1035.508533][T18731] __ext4_mark_inode_dirty+0x693/0x8b0 [ 1035.508572][T18731] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1035.508619][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.508659][T18731] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 1035.508694][T18731] ? ext4_evict_inode+0x6e2/0x17c0 [ 1035.508734][T18731] ext4_evict_inode+0x860/0x17c0 [ 1035.508775][T18731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1035.508810][T18731] ? evict+0x37e/0xad0 [ 1035.508837][T18731] ? evict+0x37e/0xad0 [ 1035.508863][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.508906][T18731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1035.508944][T18731] evict+0x3c2/0xad0 [ 1035.508973][T18731] ? __pfx_evict+0x10/0x10 [ 1035.509000][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509045][T18731] ? iput.part.0+0x5fd/0xf50 [ 1035.509073][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509118][T18731] iput.part.0+0x605/0xf50 [ 1035.509146][T18731] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1035.509183][T18731] iput+0x35/0x40 [ 1035.509210][T18731] ext4_orphan_cleanup+0x71e/0x11e0 [ 1035.509259][T18731] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1035.509301][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509342][T18731] ? ext4_register_li_request+0xef/0xa00 [ 1035.509389][T18731] ext4_fill_super+0x9009/0xb470 [ 1035.509449][T18731] ? __pfx_ext4_fill_super+0x10/0x10 [ 1035.509492][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509537][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509576][T18731] ? sb_set_blocksize+0x1fe/0x290 [ 1035.509631][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509671][T18731] ? setup_bdev_super+0x425/0x730 [ 1035.509707][T18731] get_tree_bdev_flags+0x38c/0x620 [ 1035.509743][T18731] ? __pfx_ext4_fill_super+0x10/0x10 [ 1035.509788][T18731] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1035.509827][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509870][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509910][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.509950][T18731] ? security_capable+0x80/0x260 [ 1035.509992][T18731] vfs_get_tree+0x92/0x320 [ 1035.510021][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.510063][T18731] path_mount+0x7d0/0x23d0 [ 1035.510118][T18731] ? __pfx_path_mount+0x10/0x10 [ 1035.510167][T18731] ? lockdep_hardirqs_on+0x78/0x100 [ 1035.510204][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.510251][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.510291][T18731] ? kmem_cache_free+0x124/0x6a0 [ 1035.510351][T18731] ? __x64_sys_mount+0x293/0x310 [ 1035.510401][T18731] __x64_sys_mount+0x293/0x310 [ 1035.510454][T18731] ? __pfx___x64_sys_mount+0x10/0x10 [ 1035.510507][T18731] ? do_user_addr_fault+0x8d6/0x12f0 [ 1035.510540][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.510583][T18731] do_syscall_64+0x106/0xf80 [ 1035.510620][T18731] ? irqentry_exit+0x138/0x670 [ 1035.510658][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.510692][T18731] RIP: 0033:0x7f179d59d8ca [ 1035.510717][T18731] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.510749][T18731] RSP: 002b:00007f179e399e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1035.510780][T18731] RAX: ffffffffffffffda RBX: 00007f179e399ee0 RCX: 00007f179d59d8ca [ 1035.510803][T18731] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f179e399ea0 [ 1035.510824][T18731] RBP: 0000200000000180 R08: 00007f179e399ee0 R09: 0000000000800718 [ 1035.510846][T18731] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 1035.510867][T18731] R13: 00007f179e399ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 1035.510899][T18731] [ 1035.526020][T18732] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1036.215614][T18732] EXT4-fs (loop2): ext4_process_orphan: truncating inode 11 to 67125895 bytes [ 1036.237680][T18731] ------------[ cut here ]------------ [ 1036.243178][T18731] EA inode 11 i_nlink=1026 [ 1036.243200][T18731] WARNING: fs/ext4/xattr.c:1057 at ext4_xattr_inode_update_ref+0x477/0x590, CPU#0: syz.4.3684/18731 [ 1036.260482][T18731] Modules linked in: [ 1036.264471][T18731] CPU: 0 UID: 0 PID: 18731 Comm: syz.4.3684 Not tainted syzkaller #0 PREEMPT(full) [ 1036.273912][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1036.284148][T18731] RIP: 0010:ext4_xattr_inode_update_ref+0x47e/0x590 [ 1036.290777][T18731] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 01 00 00 48 8d 3d f9 84 fe 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a eb a6 e8 76 e2 26 ff 48 8d 7b 40 48 b8 00 00 00 00 [ 1036.310599][T18731] RSP: 0018:ffffc9000d7cf188 EFLAGS: 00010246 [ 1036.316720][T18731] RAX: dffffc0000000000 RBX: ffff888078354f58 RCX: ffffc9000e4f1000 [ 1036.325101][T18731] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff90e01d50 [ 1036.332441][T18732] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.3685: invalid indirect mapped block 2 (level 2) [ 1036.333124][T18731] RBP: ffffc9000d7cf250 R08: 0000000000000005 R09: 0000000000000001 [ 1036.355442][T18731] R10: 0000000000000402 R11: 0000000000000001 R12: 0000000000000402 [ 1036.364430][T18731] R13: 1ffff92001af9e34 R14: 00000000ffffffff R15: 0000000000000000 [ 1036.373226][T18731] FS: 00007f179e39a6c0(0000) GS:ffff888124348000(0000) knlGS:0000000000000000 [ 1036.382566][T18731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1036.389166][T18731] CR2: 0000559d420caf40 CR3: 000000007c82d000 CR4: 0000000000350ef0 [ 1036.398012][T18731] Call Trace: [ 1036.401291][T18731] [ 1036.404673][T18731] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1036.411049][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.417080][T18731] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1036.422849][T18731] ext4_xattr_set_entry+0x185b/0x20b0 [ 1036.428269][T18731] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1036.434832][T18731] ? xattr_find_entry+0x240/0x2e0 [ 1036.439896][T18731] ext4_xattr_ibody_set+0x3d3/0x5d0 [ 1036.445491][T18731] ext4_expand_extra_isize_ea+0x180d/0x1d70 [ 1036.451438][T18731] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1036.459652][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.466435][T18731] ? dquot_initialize_needed+0x183/0x2a0 [ 1036.472095][T18731] __ext4_expand_extra_isize+0x346/0x480 [ 1036.478058][T18731] __ext4_mark_inode_dirty+0x693/0x8b0 [ 1036.483939][T18731] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1036.489951][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.495955][T18731] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 1036.502761][T18731] ? ext4_evict_inode+0x6e2/0x17c0 [ 1036.507895][T18731] ext4_evict_inode+0x860/0x17c0 [ 1036.513095][T18731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1036.518749][T18731] ? evict+0x37e/0xad0 [ 1036.523153][T18731] ? evict+0x37e/0xad0 [ 1036.527243][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.533696][T18731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1036.539090][T18731] evict+0x3c2/0xad0 [ 1036.543395][T18731] ? __pfx_evict+0x10/0x10 [ 1036.547823][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.554327][T18731] ? iput.part.0+0x5fd/0xf50 [ 1036.560250][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.566984][T18731] iput.part.0+0x605/0xf50 [ 1036.571636][T18731] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1036.576048][T18732] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1036.577193][T18731] iput+0x35/0x40 [ 1036.577235][T18732] EXT4-fs (loop2): Remounting filesystem read-only [ 1036.586343][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1036.586371][ C1] EXT4-fs (loop2): initial error at time 1771737402: ext4_free_branches:1020: inode 11 [ 1036.586422][ C1] EXT4-fs (loop2): last error at time 1771737402: ext4_free_branches:1020: inode 11 [ 1036.586602][T18731] ext4_orphan_cleanup+0x71e/0x11e0 [ 1036.591092][T18732] EXT4-fs (loop2): 1 truncate cleaned up [ 1036.597029][T18731] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1036.604181][T18732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1036.653813][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.660125][T18731] ? ext4_register_li_request+0xef/0xa00 [ 1036.666642][T18731] ext4_fill_super+0x9009/0xb470 [ 1036.671602][T18731] ? __pfx_ext4_fill_super+0x10/0x10 [ 1036.677674][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.683362][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.688996][T18731] ? sb_set_blocksize+0x1fe/0x290 [ 1036.694076][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.699730][T18731] ? setup_bdev_super+0x425/0x730 [ 1036.704940][T18731] get_tree_bdev_flags+0x38c/0x620 [ 1036.710077][T18731] ? __pfx_ext4_fill_super+0x10/0x10 [ 1036.715494][T18731] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1036.721151][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.726828][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.732510][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.738146][T18731] ? security_capable+0x80/0x260 [ 1036.743152][T18731] vfs_get_tree+0x92/0x320 [ 1036.747585][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.753306][T18731] path_mount+0x7d0/0x23d0 [ 1036.757770][T18731] ? __pfx_path_mount+0x10/0x10 [ 1036.763631][T18731] ? lockdep_hardirqs_on+0x78/0x100 [ 1036.768836][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.775280][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.780936][T18731] ? kmem_cache_free+0x124/0x6a0 [ 1036.785958][T18731] ? __x64_sys_mount+0x293/0x310 [ 1036.790935][T18731] __x64_sys_mount+0x293/0x310 [ 1036.795754][T18731] ? __pfx___x64_sys_mount+0x10/0x10 [ 1036.801077][T18731] ? do_user_addr_fault+0x8d6/0x12f0 [ 1036.806608][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.812365][T18731] do_syscall_64+0x106/0xf80 [ 1036.816978][T18731] ? irqentry_exit+0x138/0x670 [ 1036.821744][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.827678][T18731] RIP: 0033:0x7f179d59d8ca [ 1036.832100][T18731] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.851788][T18731] RSP: 002b:00007f179e399e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1036.860226][T18731] RAX: ffffffffffffffda RBX: 00007f179e399ee0 RCX: 00007f179d59d8ca [ 1036.869018][T18731] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f179e399ea0 [ 1036.877810][T18731] RBP: 0000200000000180 R08: 00007f179e399ee0 R09: 0000000000800718 [ 1036.885843][T18731] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 1036.893854][T18731] R13: 00007f179e399ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 1036.901866][T18731] [ 1036.904934][T18731] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1036.912222][T18731] CPU: 0 UID: 0 PID: 18731 Comm: syz.4.3684 Not tainted syzkaller #0 PREEMPT(full) [ 1036.921712][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1036.931761][T18731] Call Trace: [ 1036.935025][T18731] [ 1036.937949][T18731] dump_stack_lvl+0x100/0x190 [ 1036.942637][T18731] vpanic+0x552/0x970 [ 1036.946614][T18731] ? __pfx_vpanic+0x10/0x10 [ 1036.951107][T18731] ? lock_release+0x263/0x320 [ 1036.955799][T18731] panic+0xd1/0xe0 [ 1036.959513][T18731] ? __pfx_panic+0x10/0x10 [ 1036.963937][T18731] check_panic_on_warn.cold+0x19/0x34 [ 1036.969336][T18731] ? ext4_xattr_inode_update_ref+0x477/0x590 [ 1036.975349][T18731] __warn.cold+0x191/0x348 [ 1036.979762][T18731] __report_bug+0x296/0x3d0 [ 1036.984258][T18731] ? ext4_xattr_inode_update_ref+0x477/0x590 [ 1036.990249][T18731] ? __pfx___report_bug+0x10/0x10 [ 1036.995271][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.000922][T18731] ? rcu_is_watching+0x12/0xc0 [ 1037.005684][T18731] report_bug_entry+0xe1/0x290 [ 1037.010445][T18731] ? ext4_xattr_inode_update_ref+0x47e/0x590 [ 1037.016437][T18731] handle_bug+0x1c9/0x2a0 [ 1037.020783][T18731] exc_invalid_op+0x17/0x50 [ 1037.025301][T18731] asm_exc_invalid_op+0x1a/0x20 [ 1037.030159][T18731] RIP: 0010:ext4_xattr_inode_update_ref+0x47e/0x590 [ 1037.036769][T18731] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 01 00 00 48 8d 3d f9 84 fe 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a eb a6 e8 76 e2 26 ff 48 8d 7b 40 48 b8 00 00 00 00 [ 1037.056388][T18731] RSP: 0018:ffffc9000d7cf188 EFLAGS: 00010246 [ 1037.062460][T18731] RAX: dffffc0000000000 RBX: ffff888078354f58 RCX: ffffc9000e4f1000 [ 1037.070434][T18731] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff90e01d50 [ 1037.078402][T18731] RBP: ffffc9000d7cf250 R08: 0000000000000005 R09: 0000000000000001 [ 1037.086374][T18731] R10: 0000000000000402 R11: 0000000000000001 R12: 0000000000000402 [ 1037.094341][T18731] R13: 1ffff92001af9e34 R14: 00000000ffffffff R15: 0000000000000000 [ 1037.102331][T18731] ? ext4_xattr_inode_update_ref+0x451/0x590 [ 1037.108354][T18731] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1037.114708][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.120355][T18731] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1037.125842][T18731] ext4_xattr_set_entry+0x185b/0x20b0 [ 1037.131245][T18731] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1037.136986][T18731] ? xattr_find_entry+0x240/0x2e0 [ 1037.142035][T18731] ext4_xattr_ibody_set+0x3d3/0x5d0 [ 1037.147260][T18731] ext4_expand_extra_isize_ea+0x180d/0x1d70 [ 1037.153206][T18731] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1037.159578][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.165224][T18731] ? dquot_initialize_needed+0x183/0x2a0 [ 1037.170871][T18731] __ext4_expand_extra_isize+0x346/0x480 [ 1037.176534][T18731] __ext4_mark_inode_dirty+0x693/0x8b0 [ 1037.182009][T18731] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1037.188005][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.193649][T18731] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 1037.199288][T18731] ? ext4_evict_inode+0x6e2/0x17c0 [ 1037.204414][T18731] ext4_evict_inode+0x860/0x17c0 [ 1037.209364][T18731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1037.214742][T18731] ? evict+0x37e/0xad0 [ 1037.218812][T18731] ? evict+0x37e/0xad0 [ 1037.222877][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.228523][T18731] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1037.233903][T18731] evict+0x3c2/0xad0 [ 1037.237802][T18731] ? __pfx_evict+0x10/0x10 [ 1037.242215][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.247863][T18731] ? iput.part.0+0x5fd/0xf50 [ 1037.252451][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.258112][T18731] iput.part.0+0x605/0xf50 [ 1037.262533][T18731] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1037.267831][T18731] iput+0x35/0x40 [ 1037.271470][T18731] ext4_orphan_cleanup+0x71e/0x11e0 [ 1037.276698][T18731] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1037.282351][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.288002][T18731] ? ext4_register_li_request+0xef/0xa00 [ 1037.293653][T18731] ext4_fill_super+0x9009/0xb470 [ 1037.298624][T18731] ? __pfx_ext4_fill_super+0x10/0x10 [ 1037.303922][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.309568][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.315211][T18731] ? sb_set_blocksize+0x1fe/0x290 [ 1037.320262][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.325906][T18731] ? setup_bdev_super+0x425/0x730 [ 1037.330936][T18731] get_tree_bdev_flags+0x38c/0x620 [ 1037.336058][T18731] ? __pfx_ext4_fill_super+0x10/0x10 [ 1037.341358][T18731] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1037.347000][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.352649][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.358293][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.363941][T18731] ? security_capable+0x80/0x260 [ 1037.368892][T18731] vfs_get_tree+0x92/0x320 [ 1037.373309][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.378967][T18731] path_mount+0x7d0/0x23d0 [ 1037.383411][T18731] ? __pfx_path_mount+0x10/0x10 [ 1037.388287][T18731] ? lockdep_hardirqs_on+0x78/0x100 [ 1037.393499][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.399147][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.404789][T18731] ? kmem_cache_free+0x124/0x6a0 [ 1037.409757][T18731] ? __x64_sys_mount+0x293/0x310 [ 1037.414713][T18731] __x64_sys_mount+0x293/0x310 [ 1037.419501][T18731] ? __pfx___x64_sys_mount+0x10/0x10 [ 1037.424810][T18731] ? do_user_addr_fault+0x8d6/0x12f0 [ 1037.430099][T18731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.435833][T18731] do_syscall_64+0x106/0xf80 [ 1037.440434][T18731] ? irqentry_exit+0x138/0x670 [ 1037.445206][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.451106][T18731] RIP: 0033:0x7f179d59d8ca [ 1037.455517][T18731] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.475133][T18731] RSP: 002b:00007f179e399e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1037.483552][T18731] RAX: ffffffffffffffda RBX: 00007f179e399ee0 RCX: 00007f179d59d8ca [ 1037.491523][T18731] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f179e399ea0 [ 1037.499494][T18731] RBP: 0000200000000180 R08: 00007f179e399ee0 R09: 0000000000800718 [ 1037.507466][T18731] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 1037.515436][T18731] R13: 00007f179e399ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 1037.523418][T18731] [ 1037.526518][T18731] Kernel Offset: disabled [ 1037.530824][T18731] Rebooting in 86400 seconds..