last executing test programs: 1m48.506755955s ago: executing program 3 (id=558): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 1m48.066475426s ago: executing program 3 (id=563): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000ac0)=ANY=[], 0xff, 0x576, &(0x7f0000000bc0)="$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") 1m47.400703131s ago: executing program 3 (id=566): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)}], 0x1}}], 0x3, 0x400c0) 1m46.899102846s ago: executing program 3 (id=569): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m46.206224774s ago: executing program 3 (id=573): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 1m45.863794005s ago: executing program 3 (id=577): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13c3b936}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4) 1m30.635068433s ago: executing program 32 (id=577): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13c3b936}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4) 6.756956559s ago: executing program 4 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = dup(r2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000780)={&(0x7f00000004c0), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x68, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x100}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000001c0)={0x0, r7, 0x8, 0x10001, 0x1697, 0x3}) unshare(0x62040200) 5.143355525s ago: executing program 0 (id=1051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0) 4.972000025s ago: executing program 1 (id=1053): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x16, "337e4530f0ead9936890b807026965d85c3116934efc"}}) 4.741014943s ago: executing program 0 (id=1054): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000e00)={0x17c04, r1, 0x6, 0x24000003, 0x400000006, 0x3}) 4.535856525s ago: executing program 5 (id=1056): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 4.510320737s ago: executing program 1 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000008000000085f18ef44e69edca0c85abd74485e43394e726e9dcdd586695b42228a1997a55a4d22c387ea65319e5b6e76c6865fab0c179e9409e1acec2bf9b89c03031c1339adc888dea455c45caa39d5c5"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32000000"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.337166756s ago: executing program 4 (id=1058): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000}) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 3.914439172s ago: executing program 0 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3.814898139s ago: executing program 1 (id=1061): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) socket(0x1e, 0x6, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r7, &(0x7f00000001c0)=""/200, 0xc8, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007aadc00f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 3.746072612s ago: executing program 5 (id=1062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) 3.622563239s ago: executing program 2 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.520950961s ago: executing program 0 (id=1064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0) 3.279240599s ago: executing program 5 (id=1065): vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000b80)="ba82e810f7c173192e8b512d40495588aaeef50f71ca4a16a877fc0c2899513cf97e00f8c7ffab0c17588c7b87001c1793d4603663d9339bfd23ca2a88b87e6f22401004189ba981dd197a0d8979ba40e7ffb235df38ee6d8e06880b7ca85ee14e6a2b6baef81702102089198816232795", 0x71}], 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 3.27588038s ago: executing program 2 (id=1066): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x17d, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 2.777997341s ago: executing program 4 (id=1067): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) capset(0x0, 0x0) socket$inet6(0xa, 0x6, 0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 2.587051689s ago: executing program 0 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = dup(r2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000780)={&(0x7f00000004c0), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x68, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x100}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000001c0)={0x0, r7, 0x8, 0x10001, 0x1697, 0x3}) unshare(0x62040200) 2.386203932s ago: executing program 1 (id=1069): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) getdents64(r1, 0x0, 0x607a9e0a432a4785) pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001600)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x1c800) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1cb041, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001680)=0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2.120047942s ago: executing program 5 (id=1070): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0xc000, 0x973f, 0x81, 0x1}) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000e00)={0x17c04, r1, 0x6, 0x24000003, 0x400000006, 0x3}) 2.014746665s ago: executing program 2 (id=1071): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x100000000000000) 1.4832765s ago: executing program 1 (id=1072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) select(0x0, 0x0, &(0x7f0000000a00)={0x5, 0x0, 0x5, 0x400, 0xfffffffffffffffa, 0x401, 0xc4b, 0x4}, 0x0, &(0x7f0000000b80)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) setreuid(0xee01, 0xee01) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.321803794s ago: executing program 4 (id=1073): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000002c0)={0x80, 0x2, 0xf}) tkill(r0, 0x7) 1.172636046s ago: executing program 5 (id=1074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xc) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x10}}], 0x1, 0x5d2dd0c54751f8e3) 1.167672189s ago: executing program 2 (id=1075): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.061763189s ago: executing program 1 (id=1076): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000580), 0x7, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/171, 0xab}], 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000800)=[{0x0}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x2) 908.769137ms ago: executing program 4 (id=1077): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x43, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 694.624933ms ago: executing program 2 (id=1078): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x103, 0x70bd2d, 0xffffffff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x40000) 621.287121ms ago: executing program 4 (id=1079): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) socket(0x1e, 0x6, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r7, &(0x7f00000001c0)=""/200, 0xc8, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007aadc00f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 562.420789ms ago: executing program 5 (id=1080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 310.111441ms ago: executing program 2 (id=1081): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 0 (id=1082): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x0, 0xfa8, r1, &(0x7f0000000200), 0x0, 0x600}]) kernel console output (not intermixed with test programs): T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.638013][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.658388][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.744577][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.776978][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.842883][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.942806][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.160365][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.355647][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.394262][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.444135][ T5813] Bluetooth: hci0: command tx timeout [ 176.449753][ T5821] Bluetooth: hci1: command tx timeout [ 176.497746][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.505302][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.522787][ T5821] Bluetooth: hci3: command tx timeout [ 176.528394][ T5813] Bluetooth: hci2: command tx timeout [ 176.575113][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.613857][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.644587][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.652337][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.684076][ T5813] Bluetooth: hci4: command tx timeout [ 176.704421][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.763124][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.770412][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.790897][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.839059][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.846561][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.896442][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.949685][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.957220][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.026994][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.034535][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.078498][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.086006][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.146881][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.162077][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.169508][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.335427][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.432991][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.440442][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.458162][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.465513][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.696582][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.010059][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.256991][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.334247][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.355906][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.394754][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.621246][ T5804] veth0_vlan: entered promiscuous mode [ 179.785606][ T5804] veth1_vlan: entered promiscuous mode [ 179.873535][ T5814] veth0_vlan: entered promiscuous mode [ 179.944038][ T5812] veth0_vlan: entered promiscuous mode [ 179.957534][ T5815] veth0_vlan: entered promiscuous mode [ 180.029872][ T5814] veth1_vlan: entered promiscuous mode [ 180.040673][ T5815] veth1_vlan: entered promiscuous mode [ 180.092889][ T5812] veth1_vlan: entered promiscuous mode [ 180.185064][ T5804] veth0_macvtap: entered promiscuous mode [ 180.305633][ T5804] veth1_macvtap: entered promiscuous mode [ 180.426942][ T5815] veth0_macvtap: entered promiscuous mode [ 180.459132][ T5814] veth0_macvtap: entered promiscuous mode [ 180.480730][ T5812] veth0_macvtap: entered promiscuous mode [ 180.500035][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.537961][ T5814] veth1_macvtap: entered promiscuous mode [ 180.573743][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.584773][ T5812] veth1_macvtap: entered promiscuous mode [ 180.648346][ T4398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.688770][ T5815] veth1_macvtap: entered promiscuous mode [ 180.698499][ T4398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.741499][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.767043][ T4398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.827036][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.877330][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.885470][ T4398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.901801][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.948549][ T4398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.988646][ T4137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.009751][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.028447][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.040698][ T4137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.078557][ T4137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.147208][ T4137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.187076][ T4137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.223017][ T4137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.267848][ T4137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.352323][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.361571][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.472276][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.481266][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.728067][ T5805] veth0_vlan: entered promiscuous mode [ 181.801884][ T5805] veth1_vlan: entered promiscuous mode [ 182.089066][ T5805] veth0_macvtap: entered promiscuous mode [ 182.133006][ T5805] veth1_macvtap: entered promiscuous mode [ 182.339904][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.415326][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.499801][ T4092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.554905][ T4092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.597661][ T4092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.642499][ T4092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.072289][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.080300][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.106243][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.114392][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.338182][ T3655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.346406][ T3655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.433259][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.441254][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.442867][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.458202][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.709025][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.718058][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.834682][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.878076][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.886727][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.909959][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.918869][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.394106][ T5995] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.405454][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.405542][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.982806][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.990814][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.351196][ T6007] loop2: detected capacity change from 0 to 128 [ 188.450823][ T6007] EXT4-fs: Ignoring removed nobh option [ 188.537718][ T6007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.643830][ T6007] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.854275][ T6007] EXT4-fs (loop2): resizing filesystem from 64 to 2 blocks [ 188.861790][ T6007] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 189.228440][ T5814] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.236256][ T6019] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 189.318362][ T6019] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 189.588680][ T6027] loop2: detected capacity change from 0 to 128 [ 190.618641][ T30] audit: type=1326 audit(1766065544.807:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 190.641470][ T30] audit: type=1326 audit(1766065544.807:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 190.889973][ T30] audit: type=1326 audit(1766065544.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 190.912435][ T30] audit: type=1326 audit(1766065544.887:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 190.937035][ T30] audit: type=1326 audit(1766065544.887:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f0d58df90 code=0x7ffc0000 [ 190.959374][ T30] audit: type=1326 audit(1766065544.887:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 190.983409][ T30] audit: type=1326 audit(1766065544.887:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 191.005982][ T30] audit: type=1326 audit(1766065544.887:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 191.029584][ T30] audit: type=1326 audit(1766065544.897:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 191.053136][ T30] audit: type=1326 audit(1766065544.897:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.4.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 193.075913][ T6061] loop0: detected capacity change from 0 to 4096 [ 193.204833][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.342568][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.480177][ T3784] Bluetooth: hci5: Frame reassembly failed (-84) [ 196.236893][ T6094] loop4: detected capacity change from 0 to 128 [ 196.442806][ T6076] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 196.455433][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 196.462483][ T5813] Bluetooth: hci0: command 0x0c20 tx timeout [ 199.134539][ T6128] loop3: detected capacity change from 0 to 1024 [ 199.228298][ T6128] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 199.241849][ T6128] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 199.252183][ T6128] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 199.303067][ T6128] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.50: iget: special inode unallocated [ 199.395027][ T6128] EXT4-fs (loop3): no journal found [ 199.400433][ T6128] EXT4-fs (loop3): can't get journal size [ 199.458376][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.812367][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.014423][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 200.410437][ T6142] loop0: detected capacity change from 0 to 512 [ 200.514954][ T6142] journal_path: Non-blockdev passed as './bus' [ 200.521515][ T6142] EXT4-fs: error: could not find journal device path [ 201.477917][ T6146] loop3: detected capacity change from 0 to 8192 [ 201.538489][ T6146] ======================================================= [ 201.538489][ T6146] WARNING: The mand mount option has been deprecated and [ 201.538489][ T6146] and is ignored by this kernel. Remove the mand [ 201.538489][ T6146] option from the mount to silence this warning. [ 201.538489][ T6146] ======================================================= [ 201.738803][ T6155] macvtap1: entered promiscuous mode [ 201.744488][ T6155] macvtap1: entered allmulticast mode [ 202.629760][ T6164] loop0: detected capacity change from 0 to 512 [ 202.712187][ T6164] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 202.725554][ T6164] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.843086][ T6164] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 202.953034][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 202.960760][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.756490][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.496217][ T6190] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.219809][ T6201] capability: warning: `syz.4.80' uses 32-bit capabilities (legacy support in use) [ 206.852438][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 206.852507][ T30] audit: type=1326 audit(1766065561.027:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 206.982056][ T30] audit: type=1326 audit(1766065561.077:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.010046][ T30] audit: type=1326 audit(1766065561.087:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.034351][ T30] audit: type=1326 audit(1766065561.087:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.056847][ T30] audit: type=1326 audit(1766065561.087:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.079354][ T30] audit: type=1326 audit(1766065561.117:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.107035][ T30] audit: type=1326 audit(1766065561.117:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.131358][ T30] audit: type=1326 audit(1766065561.157:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.153899][ T30] audit: type=1326 audit(1766065561.157:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.176270][ T30] audit: type=1326 audit(1766065561.157:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 207.794904][ T6224] Illegal XDP return value 4294967274 on prog (id 45) dev syz_tun, expect packet loss! [ 208.323586][ T6230] Zero length message leads to an empty skb [ 208.756803][ T6235] loop4: detected capacity change from 0 to 512 [ 208.824066][ T6235] EXT4-fs: Ignoring removed i_version option [ 208.915013][ T6235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.275356][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 209.530628][ T6249] usb usb7: usbfs: process 6249 (syz.3.101) did not claim interface 0 before use [ 209.735350][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.603330][ T6259] syzkaller0: entered promiscuous mode [ 210.609006][ T6259] syzkaller0: entered allmulticast mode [ 211.848403][ T6278] loop2: detected capacity change from 0 to 512 [ 211.915336][ T6278] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 211.923959][ T6278] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 211.949574][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 211.959103][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 212.051641][ T6278] EXT4-fs (loop2): 1 truncate cleaned up [ 212.060042][ T6278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.144062][ T6278] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 212.354149][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.837114][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'. [ 212.876946][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 212.877014][ T30] audit: type=1326 audit(1766065567.067:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 212.890193][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 212.905894][ T30] audit: type=1326 audit(1766065567.067:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 212.942189][ T30] audit: type=1326 audit(1766065567.067:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.171619][ T6296] hsr_slave_0 (unregistering): left promiscuous mode [ 213.265226][ T30] audit: type=1326 audit(1766065567.157:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.287735][ T30] audit: type=1326 audit(1766065567.157:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.311093][ T30] audit: type=1326 audit(1766065567.157:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.334615][ T30] audit: type=1326 audit(1766065567.157:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.362401][ T30] audit: type=1326 audit(1766065567.157:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.386498][ T30] audit: type=1326 audit(1766065567.157:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 213.409156][ T30] audit: type=1326 audit(1766065567.167:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 214.573945][ T6315] loop1: detected capacity change from 0 to 512 [ 214.593924][ T6314] syzkaller0: entered promiscuous mode [ 214.599713][ T6314] syzkaller0: entered allmulticast mode [ 214.669316][ T6315] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 214.679724][ T6315] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 214.734011][ T6315] EXT4-fs (loop1): 1 truncate cleaned up [ 214.741621][ T6315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.784619][ T6317] process 'syz.0.132' launched '/dev/fd/5' with NULL argv: empty string added [ 214.796120][ T6319] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 214.928869][ T6315] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 215.196458][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.524151][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'. [ 215.652628][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 215.850057][ T6334] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.022514][ T6349] syzkaller0: entered promiscuous mode [ 217.036632][ T6349] syzkaller0: entered allmulticast mode [ 218.128958][ T6356] loop1: detected capacity change from 0 to 512 [ 218.245956][ T6356] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 218.257786][ T6356] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 218.303619][ T6361] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 218.404984][ T6356] EXT4-fs (loop1): 1 truncate cleaned up [ 218.414277][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.519026][ T6356] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 218.944353][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.062832][ T6400] loop3: detected capacity change from 0 to 512 [ 221.116080][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 221.116145][ T30] audit: type=1326 audit(1766065575.297:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.175579][ T6400] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 221.184046][ T6400] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 221.252545][ T30] audit: type=1326 audit(1766065575.347:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.275262][ T30] audit: type=1326 audit(1766065575.367:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.297849][ T30] audit: type=1326 audit(1766065575.367:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.319845][ T6400] EXT4-fs (loop3): 1 truncate cleaned up [ 221.321039][ T30] audit: type=1326 audit(1766065575.367:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.334444][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.350159][ T30] audit: type=1326 audit(1766065575.367:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.350371][ T30] audit: type=1326 audit(1766065575.367:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.350564][ T30] audit: type=1326 audit(1766065575.367:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.350754][ T30] audit: type=1326 audit(1766065575.367:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.350944][ T30] audit: type=1326 audit(1766065575.377:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 221.733354][ T6400] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 222.064568][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.460440][ T6410] syz.3.167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 222.869939][ T6416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.170'. [ 224.556512][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.564743][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.749595][ T6433] loop0: detected capacity change from 0 to 512 [ 224.932068][ T6433] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 224.940489][ T6433] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 225.193492][ T6433] EXT4-fs (loop0): 1 truncate cleaned up [ 225.201316][ T6433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.544437][ T6440] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.727088][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.414313][ T6450] netlink: 64 bytes leftover after parsing attributes in process `syz.2.183'. [ 228.246100][ T6475] loop0: detected capacity change from 0 to 512 [ 228.270203][ T6477] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 228.278455][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 228.317471][ T6475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.406426][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.502499][ T6475] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.601200][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 228.601266][ T30] audit: type=1800 audit(1766065582.787:69): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.193" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 228.726048][ T6484] netlink: 64 bytes leftover after parsing attributes in process `syz.2.196'. [ 228.866615][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.653213][ T6497] loop3: detected capacity change from 0 to 512 [ 229.734147][ T6497] msdos: Unexpected value for 'flush' [ 230.229721][ T6493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.245595][ T6493] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.311388][ T6493] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.353708][ T6493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.359967][ T6493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.385776][ T6493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.456771][ T6493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.463726][ T6493] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 230.509086][ T6493] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 230.569356][ T6493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.577075][ T6493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 230.612367][ T6493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 230.631674][ T6493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.638270][ T6493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 230.684725][ T6493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 230.861139][ T6517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.209'. [ 231.229988][ T30] audit: type=1326 audit(1766065585.417:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.2.212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x0 [ 231.563092][ T5808] Bluetooth: hci0: command 0x0c20 tx timeout [ 231.622906][ T6532] loop1: detected capacity change from 0 to 512 [ 231.634767][ T6532] msdos: Unexpected value for 'flush' [ 232.522635][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.529351][ T5813] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.602903][ T5808] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.701343][ T5808] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.645964][ T5808] Bluetooth: hci0: command 0x0c20 tx timeout [ 234.286725][ T14] Bluetooth: hci5: Frame reassembly failed (-84) [ 234.664063][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.670342][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.690172][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.763485][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.723522][ T5821] Bluetooth: hci0: command 0x0c20 tx timeout [ 236.362947][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 236.364308][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 236.712848][ T5808] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.719061][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.772366][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.843407][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 237.252804][ T30] audit: type=1326 audit(1766065591.417:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.275542][ T30] audit: type=1326 audit(1766065591.437:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.298212][ T30] audit: type=1326 audit(1766065591.447:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.642724][ T30] audit: type=1326 audit(1766065591.587:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.665358][ T30] audit: type=1326 audit(1766065591.587:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.688508][ T30] audit: type=1326 audit(1766065591.587:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.716052][ T30] audit: type=1326 audit(1766065591.587:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.740585][ T30] audit: type=1326 audit(1766065591.597:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 237.765086][ T30] audit: type=1326 audit(1766065591.617:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 239.031434][ T6608] loop3: detected capacity change from 0 to 512 [ 239.250465][ T6608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.242: error while reading EA inode 32 err=-116 [ 239.267525][ T6608] EXT4-fs (loop3): Remounting filesystem read-only [ 239.274831][ T6608] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 239.286311][ T6608] EXT4-fs (loop3): 1 orphan inode deleted [ 239.294889][ T6608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.535741][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.022789][ T4137] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.737055][ T6640] netlink: 136 bytes leftover after parsing attributes in process `syz.1.253'. [ 240.746461][ T6640] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.045575][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 242.052105][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 242.641695][ T6669] vlan2: entered allmulticast mode [ 242.647142][ T6669] dummy0: entered allmulticast mode [ 243.601777][ T24] IPVS: starting estimator thread 0... [ 243.645459][ T6681] netlink: 92 bytes leftover after parsing attributes in process `syz.4.270'. [ 243.692647][ T6682] IPVS: using max 240 ests per chain, 12000 per kthread [ 244.987983][ T5088] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.020130][ T6711] syzkaller0: entered promiscuous mode [ 246.026103][ T6711] syzkaller0: entered allmulticast mode [ 246.336967][ T6714] loop2: detected capacity change from 0 to 2048 [ 246.465756][ T6714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.495236][ T6719] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.595225][ T30] audit: type=1800 audit(1766065600.787:80): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 246.759412][ T6723] loop0: detected capacity change from 0 to 128 [ 246.846281][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.857021][ T6723] syz.0.283: attempt to access beyond end of device [ 246.857021][ T6723] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 246.907169][ T6723] syz.0.283: attempt to access beyond end of device [ 246.907169][ T6723] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 246.921365][ T6723] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 246.938983][ T6723] syz.0.283: attempt to access beyond end of device [ 246.938983][ T6723] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 246.958089][ T6723] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 247.004379][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 247.006713][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 247.018951][ T6723] syz.0.283: attempt to access beyond end of device [ 247.018951][ T6723] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 247.047208][ T6723] syz.0.283: attempt to access beyond end of device [ 247.047208][ T6723] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 247.061181][ T6723] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 247.070078][ T6723] syz.0.283: attempt to access beyond end of device [ 247.070078][ T6723] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 247.084028][ T6723] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 247.227671][ T6724] syz.0.283: attempt to access beyond end of device [ 247.227671][ T6724] loop0: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 247.611498][ T30] audit: type=1326 audit(1766065601.797:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.1.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x0 [ 249.586206][ T6751] loop0: detected capacity change from 0 to 512 [ 249.740480][ T6751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.294: error while reading EA inode 32 err=-116 [ 249.822411][ T6751] EXT4-fs (loop0): Remounting filesystem read-only [ 249.829482][ T6751] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 249.840120][ T6751] EXT4-fs (loop0): 1 orphan inode deleted [ 249.848464][ T6751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.950187][ T6751] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.997153][ T3655] Bluetooth: hci5: Frame reassembly failed (-84) [ 250.744965][ T6762] loop4: detected capacity change from 0 to 2048 [ 250.887893][ T6762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.063733][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.043177][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 252.082969][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 254.978722][ T6823] loop1: detected capacity change from 0 to 128 [ 255.107697][ T4398] Bluetooth: hci5: Frame reassembly failed (-84) [ 256.841785][ T6842] loop0: detected capacity change from 0 to 512 [ 257.164441][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 257.178392][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 257.403796][ T6842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.416833][ T6842] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.535864][ T30] audit: type=1800 audit(1766065611.717:82): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.326" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 258.273977][ T6851] netlink: 316 bytes leftover after parsing attributes in process `syz.3.328'. [ 258.466142][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.856506][ T6859] loop0: detected capacity change from 0 to 512 [ 258.931189][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 259.014593][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.027775][ T6859] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.061219][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 259.084944][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 259.999559][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.350919][ T6878] pim6reg1: entered promiscuous mode [ 261.356784][ T6878] pim6reg1: entered allmulticast mode [ 261.657136][ T14] Bluetooth: hci5: Frame reassembly failed (-84) [ 263.475407][ T6892] netlink: 64 bytes leftover after parsing attributes in process `syz.1.342'. [ 263.642927][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 267.022103][ T3566] Bluetooth: hci5: Frame reassembly failed (-84) [ 267.108015][ T6926] 9p: Could not find request transport: fd0x0000000000000004 [ 267.607329][ T6936] netlink: 76 bytes leftover after parsing attributes in process `syz.3.360'. [ 268.457727][ T6954] loop0: detected capacity change from 0 to 512 [ 268.560784][ T6954] ------------[ cut here ]------------ [ 268.570878][ T6954] EA inode 11 i_nlink=2 [ 268.570981][ T6954] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x73c/0x800, CPU#0: syz.0.368/6954 [ 268.586451][ T6954] Modules linked in: [ 268.590566][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(none) [ 268.600076][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.610552][ T6954] RIP: 0010:ext4_xattr_inode_update_ref+0x7b6/0x800 [ 268.617603][ T6954] Code: 06 00 00 44 89 b3 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 e4 75 38 45 85 ff 75 40 48 8b 7d c0 48 8b 75 d0 8b 55 b0 <67> 48 0f b9 3a e9 b9 fd ff ff 44 89 ef e8 c8 3e 57 ff 45 85 ff 0f [ 268.646260][ T6954] RSP: 0018:ffff888070df6d88 EFLAGS: 00010246 [ 268.654956][ T6954] RAX: 0000000000000000 RBX: ffff888116bace10 RCX: 00000000005b3a97 [ 268.663273][ T6954] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff9273d140 [ 268.671413][ T6954] RBP: ffff888070df6e10 R08: ffffea000000000f R09: 0000000000000000 [ 268.679758][ T6954] R10: ffff8880705f6cd0 R11: 0000000000000002 R12: 0000000000000000 [ 268.688059][ T6954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.696776][ T6954] FS: 00007f8d167786c0(0000) GS:ffff8881aacf9000(0000) knlGS:0000000000000000 [ 268.706039][ T6954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.712899][ T6954] CR2: 00007fa84d2c9f98 CR3: 000000004ff6e000 CR4: 00000000003526f0 [ 268.721068][ T6954] Call Trace: [ 268.724718][ T6954] [ 268.727810][ T6954] ext4_xattr_set_entry+0x1169/0x3440 [ 268.733640][ T6954] ext4_xattr_ibody_set+0x437/0xa40 [ 268.747553][ T6954] ext4_expand_extra_isize_ea+0x2ea9/0x3bb0 [ 268.756353][ T6954] __ext4_expand_extra_isize+0x571/0x6f0 [ 268.762473][ T6954] __ext4_mark_inode_dirty+0x654/0x970 [ 268.768203][ T6954] ext4_evict_inode+0x167b/0x23d0 [ 268.773598][ T6954] ? __pfx_ext4_evict_inode+0x10/0x10 [ 268.779194][ T6954] evict+0x6a9/0xca0 [ 268.783397][ T6954] ? kmsan_get_metadata+0xfb/0x160 [ 268.788758][ T6954] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 268.795491][ T6954] iput+0xc6f/0x1070 [ 268.799686][ T6954] ext4_process_orphan+0x49a/0x520 [ 268.805142][ T6954] ext4_orphan_cleanup+0x10a6/0x1e30 [ 268.810676][ T6954] ext4_fill_super+0xa5d3/0xae50 [ 268.816239][ T6954] ? kmsan_get_metadata+0xfb/0x160 [ 268.821603][ T6954] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.827766][ T6954] ? sb_set_blocksize+0x24e/0x390 [ 268.833152][ T6954] get_tree_bdev_flags+0x6e6/0x920 [ 268.838493][ T6954] ? __pfx_ext4_fill_super+0x10/0x10 [ 268.852842][ T6954] ? __pfx_ext4_fill_super+0x10/0x10 [ 268.858396][ T6954] ? __pfx_ext4_get_tree+0x10/0x10 [ 268.866168][ T6954] get_tree_bdev+0x38/0x50 [ 268.870836][ T6954] ext4_get_tree+0x35/0x40 [ 268.875730][ T6954] vfs_get_tree+0xb3/0x5c0 [ 268.880393][ T6954] do_new_mount+0x879/0x1700 [ 268.885331][ T6954] ? kmsan_get_metadata+0xfb/0x160 [ 268.890717][ T6954] path_mount+0x749/0x1fb0 [ 268.895615][ T6954] ? user_path_at+0x241/0x3e0 [ 268.900524][ T6954] __se_sys_mount+0x6f7/0x7e0 [ 268.905571][ T6954] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.911632][ T6954] ? kmsan_get_metadata+0xfb/0x160 [ 268.917150][ T6954] __x64_sys_mount+0xe4/0x150 [ 268.922251][ T6954] x64_sys_call+0x38cb/0x3e70 [ 268.927173][ T6954] do_syscall_64+0xd9/0xf80 [ 268.932184][ T6954] ? clear_bhb_loop+0x40/0x90 [ 268.937080][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.951549][ T6954] RIP: 0033:0x7f8d15990eea [ 268.958720][ T6954] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.978764][ T6954] RSP: 002b:00007f8d16777e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 268.987567][ T6954] RAX: ffffffffffffffda RBX: 00007f8d16777ef0 RCX: 00007f8d15990eea [ 268.996032][ T6954] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8d16777eb0 [ 269.004297][ T6954] RBP: 0000200000000180 R08: 00007f8d16777ef0 R09: 0000000000800718 [ 269.012642][ T6954] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 269.020781][ T6954] R13: 00007f8d16777eb0 R14: 000000000000046f R15: 0000200000000200 [ 269.029073][ T6954] [ 269.032359][ T6954] ---[ end trace 0000000000000000 ]--- [ 269.063071][ T6954] EXT4-fs (loop0): 1 orphan inode deleted [ 269.070757][ T6954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.085269][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 269.091702][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.246701][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.345735][ T6970] 9p: Could not find request transport: fd0x0000000000000004 [ 270.955538][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'. [ 271.031252][ T30] audit: type=1326 audit(1766065625.217:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 271.158164][ T30] audit: type=1326 audit(1766065625.247:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 271.180946][ T30] audit: type=1326 audit(1766065625.247:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 271.208580][ T30] audit: type=1326 audit(1766065625.247:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84c38f749 code=0x7ffc0000 [ 271.456231][ T6985] bridge0: entered promiscuous mode [ 271.514900][ T6989] bridge0: left promiscuous mode [ 272.824891][ T7004] loop4: detected capacity change from 0 to 1024 [ 273.026140][ T7004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.208923][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.826866][ T7015] loop4: detected capacity change from 0 to 512 [ 273.911544][ T7019] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 273.971061][ T7015] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 273.981745][ T7015] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 274.034652][ T7015] EXT4-fs (loop4): mount failed [ 274.197398][ T7023] loop3: detected capacity change from 0 to 1024 [ 274.223966][ T7023] EXT4-fs: Ignoring removed oldalloc option [ 274.300127][ T7023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.313336][ T7023] ext4 filesystem being mounted at /syzcgroup/net/syz3/syz0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.375821][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 274.633244][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.393'. [ 274.747935][ T7033] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.390: Freeing blocks not in datazone - block = 0, count = 16 [ 274.847297][ T7033] EXT4-fs (loop3): Remounting filesystem read-only [ 275.691471][ T7041] loop2: detected capacity change from 0 to 1024 [ 275.824177][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.257724][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.741111][ T7053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 276.751036][ T7053] block device autoloading is deprecated and will be removed. [ 276.968262][ T5088] Bluetooth: hci5: Frame reassembly failed (-84) [ 278.134037][ T7078] netlink: 76 bytes leftover after parsing attributes in process `syz.4.414'. [ 278.188637][ T7076] loop1: detected capacity change from 0 to 1024 [ 278.301619][ T7076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.689691][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.930558][ T7089] loop4: detected capacity change from 0 to 2048 [ 279.002457][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 279.008808][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 279.047685][ T7095] netlink: 'syz.1.419': attribute type 3 has an invalid length. [ 279.117929][ T7089] Alternate GPT is invalid, using primary GPT. [ 279.125576][ T7089] loop4: p1 p2 p3 [ 279.129467][ T7089] loop4: partition table partially beyond EOD, truncated [ 279.513541][ T7098] syzkaller0: entered promiscuous mode [ 279.519305][ T7098] syzkaller0: entered allmulticast mode [ 279.666298][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 279.761072][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 279.781987][ T5987] udevd[5987]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 279.810239][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 279.853470][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 280.117781][ T30] audit: type=1326 audit(1766065634.307:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.2.428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x0 [ 280.195462][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 280.664862][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 280.687671][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 281.152633][ T3846] Bluetooth: hci5: Frame reassembly failed (-84) [ 281.399168][ T7130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.437'. [ 281.616936][ T7130] loop1: detected capacity change from 0 to 1024 [ 281.646257][ T7130] EXT4-fs: Ignoring removed orlov option [ 281.704957][ T7130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.740204][ T7134] syzkaller0: entered promiscuous mode [ 281.754401][ T7134] syzkaller0: entered allmulticast mode [ 281.872881][ T30] audit: type=1800 audit(1766065636.057:88): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.437" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 282.113620][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.343822][ T7143] capability: warning: `syz.1.441' uses deprecated v2 capabilities in a way that may be insecure [ 282.351659][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 282.455626][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 282.483893][ T7143] ucma_write: process 184 (syz.1.441) changed security contexts after opening file descriptor, this is not allowed. [ 283.115141][ T7152] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.172911][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 284.069769][ T7163] loop1: detected capacity change from 0 to 512 [ 284.086662][ T7154] loop2: detected capacity change from 0 to 8192 [ 284.175483][ T7163] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.451: dx entry: limit 1024 != root limit 124 [ 284.188206][ T7163] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.451: Corrupt directory, running e2fsck is recommended [ 284.215208][ T7163] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 284.223960][ T7163] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.451: corrupted in-inode xattr: invalid ea_ino [ 284.242550][ T7163] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.451: couldn't read orphan inode 15 (err -117) [ 284.295097][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.350827][ T7170] syzkaller0: entered promiscuous mode [ 284.356745][ T7170] syzkaller0: entered allmulticast mode [ 284.370099][ T7171] loop4: detected capacity change from 0 to 1024 [ 284.389556][ T30] audit: type=1800 audit(1766065638.577:89): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.447" name="bus" dev="loop2" ino=1048607 res=0 errno=0 [ 284.486006][ T7171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.498822][ T7171] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.704907][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 284.792869][ T5814] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 284.800895][ T5814] FAT-fs (loop2): Filesystem has been set read-only [ 284.908875][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.217431][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 285.789255][ T5088] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.982548][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.989224][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.090715][ T30] audit: type=1326 audit(1766065640.277:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.172904][ T30] audit: type=1326 audit(1766065640.317:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.195666][ T30] audit: type=1326 audit(1766065640.317:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.219217][ T30] audit: type=1326 audit(1766065640.317:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.242061][ T30] audit: type=1326 audit(1766065640.317:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.265878][ T30] audit: type=1326 audit(1766065640.327:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.293213][ T30] audit: type=1326 audit(1766065640.327:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.315980][ T30] audit: type=1326 audit(1766065640.327:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.338500][ T30] audit: type=1326 audit(1766065640.327:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.362156][ T30] audit: type=1326 audit(1766065640.337:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 286.407917][ T7192] loop4: detected capacity change from 0 to 128 [ 287.403455][ T7208] syzkaller0: entered promiscuous mode [ 287.409117][ T7208] syzkaller0: entered allmulticast mode [ 287.699655][ T7212] loop2: detected capacity change from 0 to 1024 [ 287.769911][ T7212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.805451][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 288.102598][ T7220] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0 [ 288.211501][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.266929][ T7217] netlink: 260 bytes leftover after parsing attributes in process `syz.4.471'. [ 288.276442][ T7217] ksmbd: Unknown IPC event: 6, ignore. [ 289.578179][ T7240] loop2: detected capacity change from 0 to 512 [ 289.891036][ T7240] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 290.075248][ T7240] EXT4-fs (loop2): orphan cleanup on readonly fs [ 290.351507][ T7240] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.479: Block bitmap for bg 0 marked uninitialized [ 290.413542][ T7240] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 290.493152][ T7240] EXT4-fs (loop2): 1 orphan inode deleted [ 290.501209][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 290.684185][ T7240] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 290.783129][ T7240] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 291.468402][ T7253] syzkaller0: entered promiscuous mode [ 291.482595][ T7253] syzkaller0: entered allmulticast mode [ 291.505383][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.305901][ T5808] Bluetooth: hci5: sending frame failed (-49) [ 292.313313][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 294.517684][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 294.517752][ T30] audit: type=1326 audit(1766065648.707:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 294.683970][ T7290] syzkaller0: entered promiscuous mode [ 294.689622][ T7290] syzkaller0: entered allmulticast mode [ 294.912086][ T30] audit: type=1326 audit(1766065648.757:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 294.935070][ T30] audit: type=1326 audit(1766065648.757:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 296.127284][ T4137] Bluetooth: hci5: Frame reassembly failed (-84) [ 296.705221][ T7319] tipc: Started in network mode [ 296.710537][ T7319] tipc: Node identity de1c06c21d66, cluster identity 4711 [ 296.718625][ T7319] tipc: Enabled bearer , priority 0 [ 296.769043][ T7319] syzkaller0: entered promiscuous mode [ 296.774824][ T7319] syzkaller0: entered allmulticast mode [ 296.835724][ T7321] tipc: Resetting bearer [ 296.872663][ T7315] tipc: Resetting bearer [ 296.894217][ T7315] tipc: Disabling bearer [ 296.970808][ T7323] syzkaller0: entered promiscuous mode [ 296.976705][ T7323] syzkaller0: entered allmulticast mode [ 298.209232][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 298.216997][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.712842][ T30] audit: type=1326 audit(1766065652.897:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 298.735512][ T30] audit: type=1326 audit(1766065652.897:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 298.900954][ T30] audit: type=1326 audit(1766065652.957:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 298.923615][ T30] audit: type=1326 audit(1766065652.957:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 298.950748][ T30] audit: type=1326 audit(1766065652.957:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 298.975296][ T30] audit: type=1326 audit(1766065652.957:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 298.997834][ T30] audit: type=1326 audit(1766065652.957:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 299.024466][ T7361] loop4: detected capacity change from 0 to 4096 [ 299.085585][ T7361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.115256][ T7369] syzkaller0: entered promiscuous mode [ 299.121077][ T7369] syzkaller0: entered allmulticast mode [ 299.138993][ T7361] EXT4-fs (loop4): shut down requested (2) [ 299.328472][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.244939][ T3551] Bluetooth: hci5: Frame reassembly failed (-84) [ 300.346445][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 300.346513][ T30] audit: type=1326 audit(1766065654.537:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.375650][ T30] audit: type=1326 audit(1766065654.537:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.403533][ T30] audit: type=1326 audit(1766065654.537:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.428137][ T30] audit: type=1326 audit(1766065654.537:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.479360][ T30] audit: type=1326 audit(1766065654.657:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.507701][ T30] audit: type=1326 audit(1766065654.657:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.639954][ T7397] ip6gre1: entered promiscuous mode [ 300.645492][ T7397] ip6gre1: entered allmulticast mode [ 300.828255][ T30] audit: type=1326 audit(1766065654.737:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.852590][ T30] audit: type=1326 audit(1766065654.737:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.875524][ T30] audit: type=1326 audit(1766065654.737:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 300.903280][ T30] audit: type=1326 audit(1766065654.737:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 301.674199][ T7415] syzkaller0: entered promiscuous mode [ 301.679868][ T7415] syzkaller0: entered allmulticast mode [ 302.332568][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.096305][ T7437] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 303.690240][ T7450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 303.741689][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 303.751406][ T7453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.554'. [ 303.767253][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 303.779055][ T7453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.554'. [ 304.259544][ T7459] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 304.267699][ T7459] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 304.370798][ T7458] syzkaller0: entered promiscuous mode [ 304.378821][ T7458] syzkaller0: entered allmulticast mode [ 304.825322][ T7468] loop2: detected capacity change from 0 to 128 [ 304.856782][ T7468] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.912683][ T7468] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.888928][ T3846] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 306.647317][ T7494] syzkaller0: entered promiscuous mode [ 306.653273][ T7494] syzkaller0: entered allmulticast mode [ 307.340503][ T61] tipc: Subscription rejected, illegal request [ 308.345548][ T7523] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 311.255907][ T7545] loop1: detected capacity change from 0 to 1024 [ 311.366497][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.770715][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.036100][ T7563] netlink: 76 bytes leftover after parsing attributes in process `syz.1.595'. [ 314.738357][ T7591] loop4: detected capacity change from 0 to 1024 [ 314.875381][ T7591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.003991][ T7596] netlink: 76 bytes leftover after parsing attributes in process `syz.1.608'. [ 315.187621][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.532192][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 315.532262][ T30] audit: type=1326 audit(1766065669.707:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 315.568286][ T30] audit: type=1326 audit(1766065669.707:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 315.590769][ T30] audit: type=1326 audit(1766065669.717:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 315.613381][ T30] audit: type=1326 audit(1766065669.717:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 315.636226][ T30] audit: type=1326 audit(1766065669.717:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 315.758191][ T7604] loop1: detected capacity change from 0 to 1764 [ 315.880793][ T7611] loop4: detected capacity change from 0 to 512 [ 316.572115][ T7611] EXT4-fs (loop4): 1 truncate cleaned up [ 316.579735][ T7611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.622044][ T7611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.615: bg 0: block 465: padding at end of block bitmap is not set [ 317.191791][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.682921][ T7628] netlink: 76 bytes leftover after parsing attributes in process `syz.1.621'. [ 318.018756][ T7637] loop0: detected capacity change from 0 to 764 [ 318.095970][ T7637] rock: directory entry would overflow storage [ 318.103089][ T7637] rock: sig=0x4654, size=5, remaining=4 [ 318.383298][ T7635] loop4: detected capacity change from 0 to 2048 [ 318.860903][ T7635] loop4: unable to read partition table [ 318.882635][ T7635] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 321.120345][ T7669] netlink: 76 bytes leftover after parsing attributes in process `syz.2.635'. [ 321.564213][ T30] audit: type=1326 audit(1766065675.757:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.592129][ T30] audit: type=1326 audit(1766065675.757:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.616497][ T30] audit: type=1326 audit(1766065675.757:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.639232][ T30] audit: type=1326 audit(1766065675.757:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.663842][ T30] audit: type=1326 audit(1766065675.757:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.693894][ T30] audit: type=1326 audit(1766065675.767:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.716373][ T30] audit: type=1326 audit(1766065675.767:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.738924][ T30] audit: type=1326 audit(1766065675.767:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.761601][ T30] audit: type=1326 audit(1766065675.767:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 321.791214][ T30] audit: type=1326 audit(1766065675.767:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1598f749 code=0x7ffc0000 [ 322.609298][ T1154] Bluetooth: hci5: Frame reassembly failed (-84) [ 323.285276][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.299489][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.319979][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.348310][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.360198][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.602180][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 324.628114][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 325.043588][ T7702] chnl_net:caif_netlink_parms(): no params data found [ 325.402933][ T5821] Bluetooth: hci6: command tx timeout [ 325.816676][ T7743] netlink: 'syz.1.657': attribute type 4 has an invalid length. [ 325.837208][ T7743] serio: Serial port ttyS3 [ 326.244369][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.253756][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.261435][ T7702] bridge_slave_0: entered allmulticast mode [ 326.270872][ T7702] bridge_slave_0: entered promiscuous mode [ 326.414660][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.422304][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.429986][ T7702] bridge_slave_1: entered allmulticast mode [ 326.439560][ T7702] bridge_slave_1: entered promiscuous mode [ 326.844355][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.913598][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.411476][ T7702] team0: Port device team_slave_0 added [ 327.459016][ T7702] team0: Port device team_slave_1 added [ 327.485204][ T5821] Bluetooth: hci6: command tx timeout [ 327.666901][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.674383][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.701082][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.946223][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.953699][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.980564][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.570845][ T7702] hsr_slave_0: entered promiscuous mode [ 328.580653][ T7702] hsr_slave_1: entered promiscuous mode [ 328.589468][ T7702] debugfs: 'hsr0' already exists in 'hsr' [ 328.595533][ T7702] Cannot create hsr debugfs directory [ 328.738819][ T4398] Bluetooth: hci5: Frame reassembly failed (-84) [ 329.039265][ T7776] loop4: detected capacity change from 0 to 2048 [ 329.225144][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.237914][ T7776] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.501218][ T7787] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.671: bg 0: block 345: padding at end of block bitmap is not set [ 329.543587][ T7787] EXT4-fs (loop4): Remounting filesystem read-only [ 329.560195][ T1154] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 329.576922][ T5813] Bluetooth: hci6: command tx timeout [ 329.896440][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.906105][ T7702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.030946][ T7702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.054048][ T7793] loop2: detected capacity change from 0 to 512 [ 330.103163][ T7793] EXT4-fs (loop2): 1 truncate cleaned up [ 330.110828][ T7793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.136589][ T7702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.160017][ T7702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.189613][ T7793] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.676: bg 0: block 465: padding at end of block bitmap is not set [ 330.414834][ T7507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 330.504327][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.766162][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 330.796235][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.809706][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 331.192552][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.381236][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.389028][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.555188][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.562794][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.730077][ T5821] Bluetooth: hci6: command tx timeout [ 334.828155][ T7833] loop2: detected capacity change from 0 to 512 [ 334.966563][ T7833] EXT4-fs (loop2): 1 truncate cleaned up [ 334.974468][ T7833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.232064][ T7702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.241744][ T7833] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.689: bg 0: block 465: padding at end of block bitmap is not set [ 335.683446][ T3769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.841260][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.934711][ T3769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.061795][ T3769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.242612][ T3769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.504272][ T3769] bridge_slave_1: left allmulticast mode [ 336.510241][ T3769] bridge_slave_1: left promiscuous mode [ 336.517237][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.691671][ T3769] bridge_slave_0: left allmulticast mode [ 336.697874][ T3769] bridge_slave_0: left promiscuous mode [ 336.704699][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.879812][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 337.879888][ T30] audit: type=1326 audit(1766065692.067:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.880090][ T3769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.887477][ T5813] Bluetooth: hci0: command 0x1003 tx timeout [ 337.891742][ T30] audit: type=1326 audit(1766065692.077:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.949249][ T30] audit: type=1326 audit(1766065692.117:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.956857][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.974827][ T30] audit: type=1326 audit(1766065692.117:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.975032][ T30] audit: type=1326 audit(1766065692.117:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.975224][ T30] audit: type=1326 audit(1766065692.117:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.975416][ T30] audit: type=1326 audit(1766065692.117:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.975621][ T30] audit: type=1326 audit(1766065692.117:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.975820][ T30] audit: type=1326 audit(1766065692.117:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 337.976018][ T30] audit: type=1326 audit(1766065692.147:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d58f749 code=0x7ffc0000 [ 338.149565][ T3769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.195661][ T3769] bond0 (unregistering): Released all slaves [ 339.092661][ T7887] syzkaller0: entered promiscuous mode [ 339.098328][ T7887] syzkaller0: entered allmulticast mode [ 339.259414][ T7702] veth0_vlan: entered promiscuous mode [ 339.363134][ T3769] hsr_slave_0: left promiscuous mode [ 339.381712][ T3769] hsr_slave_1: left promiscuous mode [ 339.400307][ T3769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.408191][ T3769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.440118][ T3769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.448898][ T3769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.480124][ T3769] veth1_macvtap: left promiscuous mode [ 339.486641][ T3769] veth0_macvtap: left promiscuous mode [ 339.492778][ T3769] veth1_vlan: left promiscuous mode [ 339.499960][ T3769] veth0_vlan: left promiscuous mode [ 340.208514][ T3769] team0 (unregistering): Port device team_slave_1 removed [ 340.299283][ T3769] team0 (unregistering): Port device team_slave_0 removed [ 340.557603][ T7887] syz_tun: entered allmulticast mode [ 340.880182][ T7702] veth1_vlan: entered promiscuous mode [ 341.094330][ T7702] veth0_macvtap: entered promiscuous mode [ 341.126972][ T7702] veth1_macvtap: entered promiscuous mode [ 341.292756][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.365253][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.406727][ T4398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.461525][ T4398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.519569][ T4398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.582760][ T3769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.689379][ T7911] loop2: detected capacity change from 0 to 2048 [ 341.982167][ T7911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.079603][ T7911] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.713: corrupted in-inode xattr: invalid ea_ino [ 342.100102][ T7920] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 342.292601][ T5813] Bluetooth: hci0: command 0x1003 tx timeout [ 342.299101][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.622968][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.441404][ T7934] ip6gre1: entered promiscuous mode [ 343.447014][ T7934] ip6gre1: entered allmulticast mode [ 343.465154][ T7937] loop4: detected capacity change from 0 to 512 [ 343.576225][ T7937] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 343.643473][ T7937] EXT4-fs (loop4): orphan cleanup on readonly fs [ 343.687243][ T7945] loop1: detected capacity change from 0 to 1024 [ 343.703104][ T7945] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.711792][ T7945] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 343.723743][ T7937] __quota_error: 30 callbacks suppressed [ 343.723814][ T7937] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 343.740577][ T7937] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 343.750320][ T7937] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.720: Failed to acquire dquot type 1 [ 343.794183][ T7937] EXT4-fs (loop4): Remounting filesystem read-only [ 343.808029][ T7937] EXT4-fs (loop4): 1 truncate cleaned up [ 343.818108][ T7945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.846774][ T7937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.173451][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.238455][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.555916][ T7959] pimreg: entered allmulticast mode [ 344.611319][ T7959] pimreg: left allmulticast mode [ 344.739221][ T7964] sg_read: process 340 (syz.2.729) changed security contexts after opening file descriptor, this is not allowed. [ 345.879286][ T7976] random: crng reseeded on system resumption [ 345.968421][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.734'. [ 346.019341][ T7976] loop1: detected capacity change from 0 to 512 [ 346.078579][ T7976] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 346.086364][ T7976] FAT-fs (loop1): Filesystem has been set read-only [ 346.352349][ T7984] syzkaller0: entered promiscuous mode [ 346.548049][ T7976] ALSA: seq fatal error: cannot create timer (-19) [ 346.606541][ T7974] syzkaller0: left promiscuous mode [ 346.952841][ T4183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.961098][ T4183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.199335][ T3769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.208315][ T3769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.331269][ T5813] Bluetooth: hci0: sending frame failed (-49) [ 347.338004][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 347.415715][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.422983][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.484369][ T8002] netlink: 36 bytes leftover after parsing attributes in process `syz.5.644'. [ 347.528414][ T8000] netlink: 'syz.4.741': attribute type 3 has an invalid length. [ 347.665264][ T7995] loop1: detected capacity change from 0 to 4096 [ 347.676242][ T7995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.737064][ T7995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.884076][ T8012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 347.914465][ T8014] loop5: detected capacity change from 0 to 512 [ 347.936081][ T8014] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.032718][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.047949][ T8014] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 348.162525][ T8014] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.742: bg 0: block 248: padding at end of block bitmap is not set [ 348.251646][ T8014] Quota error (device loop5): write_blk: dquota write failed [ 348.259815][ T8014] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 348.274466][ T8014] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.742: Failed to acquire dquot type 1 [ 348.386366][ T8014] EXT4-fs (loop5): 1 truncate cleaned up [ 348.394403][ T8014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 348.457409][ T8023] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 348.735081][ T8027] loop4: detected capacity change from 0 to 764 [ 348.780648][ T8014]  (8014) used greatest stack depth: 3024 bytes left [ 348.870029][ T8027] rock: directory entry would overflow storage [ 348.876696][ T8027] rock: sig=0x4654, size=5, remaining=4 [ 348.976563][ T7702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 349.608718][ T8037] loop4: detected capacity change from 0 to 512 [ 349.833696][ T8037] : Can't lookup blockdev [ 350.277116][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 350.487808][ T8049] tipc: Started in network mode [ 350.497147][ T8049] tipc: Node identity b2bfae834d03, cluster identity 4711 [ 350.505245][ T8049] tipc: Enabled bearer , priority 0 [ 350.584482][ T8049] syzkaller0: entered promiscuous mode [ 350.590146][ T8049] syzkaller0: entered allmulticast mode [ 350.718945][ T8049] tipc: Resetting bearer [ 350.792961][ T8047] tipc: Resetting bearer [ 350.828851][ T8047] tipc: Disabling bearer [ 351.248449][ T8063] loop0: detected capacity change from 0 to 764 [ 351.370251][ T8063] rock: directory entry would overflow storage [ 351.379131][ T8063] rock: sig=0x4654, size=5, remaining=4 [ 351.993867][ T8076] netlink: 'syz.5.769': attribute type 21 has an invalid length. [ 352.002134][ T8076] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 352.010020][ T8076] netlink: 144 bytes leftover after parsing attributes in process `syz.5.769'. [ 352.452736][ T8082] loop0: detected capacity change from 0 to 128 [ 352.761569][ T8082] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.806633][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.5.772'. [ 352.829565][ T8082] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.118405][ T8090] loop4: detected capacity change from 0 to 512 [ 353.136426][ T8090] EXT4-fs: Ignoring removed i_version option [ 353.165138][ T8090] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 353.437781][ T8090] EXT4-fs (loop4): 1 truncate cleaned up [ 353.445816][ T8090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.625121][ T8093] loop5: detected capacity change from 0 to 2048 [ 353.675669][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.750335][ T8093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.867551][ T8097] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 353.949990][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 354.229164][ T5815] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.450824][ T7702] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 354.512468][ T7702] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 354.835225][ T7702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.499053][ T8114] loop1: detected capacity change from 0 to 1024 [ 355.533317][ T8114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.626309][ T8114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.654136][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.783'. [ 356.181626][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 357.460649][ T30] audit: type=1326 audit(1766065711.647:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.483486][ T30] audit: type=1326 audit(1766065711.647:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.506019][ T30] audit: type=1326 audit(1766065711.647:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.533696][ T30] audit: type=1326 audit(1766065711.697:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.823343][ T30] audit: type=1326 audit(1766065712.017:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.922088][ T30] audit: type=1326 audit(1766065712.047:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.950070][ T30] audit: type=1326 audit(1766065712.057:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.974632][ T30] audit: type=1326 audit(1766065712.057:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 357.997143][ T30] audit: type=1326 audit(1766065712.057:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 358.019719][ T30] audit: type=1326 audit(1766065712.057:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 358.835750][ T8154] tipc: Started in network mode [ 358.840867][ T8154] tipc: Node identity 5ae4de7ea752, cluster identity 4711 [ 358.860702][ T8154] tipc: Enabled bearer , priority 0 [ 358.944144][ T8160] syzkaller0: entered promiscuous mode [ 358.949797][ T8160] syzkaller0: entered allmulticast mode [ 359.126132][ T8154] tipc: Resetting bearer [ 359.200226][ T8151] tipc: Resetting bearer [ 359.223617][ T8151] tipc: Disabling bearer [ 359.280761][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.818402][ T8173] loop5: detected capacity change from 0 to 1024 [ 359.841046][ T8173] ext4: Unknown parameter 'noauto_da_allo' [ 360.405080][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 361.877942][ T8197] tipc: Started in network mode [ 361.883416][ T8197] tipc: Node identity 224665848258, cluster identity 4711 [ 361.891354][ T8197] tipc: Enabled bearer , priority 0 [ 361.952815][ T8200] syzkaller0: entered promiscuous mode [ 361.958650][ T8200] syzkaller0: entered allmulticast mode [ 362.017741][ T8197] tipc: Resetting bearer [ 362.149515][ T8196] tipc: Resetting bearer [ 362.194640][ T8196] tipc: Disabling bearer [ 362.484147][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 362.484223][ T30] audit: type=1326 audit(1766065716.677:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.513322][ T30] audit: type=1326 audit(1766065716.677:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.537752][ T30] audit: type=1326 audit(1766065716.677:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.560771][ T30] audit: type=1326 audit(1766065716.677:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.651395][ T30] audit: type=1326 audit(1766065716.827:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.674278][ T30] audit: type=1326 audit(1766065716.827:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.697702][ T30] audit: type=1326 audit(1766065716.827:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 362.720824][ T30] audit: type=1326 audit(1766065716.827:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 363.142046][ T30] audit: type=1326 audit(1766065717.307:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 363.167060][ T30] audit: type=1326 audit(1766065717.317:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 363.298070][ T8223] netlink: 'syz.2.822': attribute type 5 has an invalid length. [ 363.539731][ T8229] loop0: detected capacity change from 0 to 128 [ 363.984295][ T8229] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.124582][ T8229] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.185496][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 364.403167][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 364.459473][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 364.801319][ T8244] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 365.454935][ T5815] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.516169][ T8265] loop4: detected capacity change from 0 to 512 [ 366.622671][ T8265] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 366.713953][ T8265] EXT4-fs (loop4): mount failed [ 366.878463][ T8265] netlink: 'syz.4.838': attribute type 4 has an invalid length. [ 368.209172][ T8294] tipc: Enabled bearer , priority 0 [ 368.243473][ T8294] syzkaller0: entered promiscuous mode [ 368.249142][ T8294] syzkaller0: entered allmulticast mode [ 368.342819][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 368.342886][ T30] audit: type=1326 audit(1766065722.517:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 368.510430][ T8294] tipc: Resetting bearer [ 368.519479][ T30] audit: type=1326 audit(1766065722.707:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 368.582442][ T30] audit: type=1326 audit(1766065722.747:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 368.605266][ T30] audit: type=1326 audit(1766065722.747:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 368.658986][ T8293] tipc: Resetting bearer [ 368.699594][ T8293] tipc: Disabling bearer [ 370.654614][ T8332] loop2: detected capacity change from 0 to 512 [ 370.676297][ T8329] loop5: detected capacity change from 0 to 2048 [ 370.721291][ T8332] EXT4-fs (loop2): DAX unsupported by block device. [ 371.728226][ T30] audit: type=1326 audit(1766065725.907:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 371.751265][ T30] audit: type=1326 audit(1766065725.907:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 371.775305][ T30] audit: type=1326 audit(1766065725.947:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 371.798319][ T30] audit: type=1326 audit(1766065725.977:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 371.821013][ T30] audit: type=1326 audit(1766065725.987:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 371.843571][ T30] audit: type=1326 audit(1766065725.987:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 372.824053][ T8361] tipc: Enabled bearer , priority 0 [ 372.854136][ T8361] syzkaller0: entered promiscuous mode [ 372.859926][ T8361] syzkaller0: entered allmulticast mode [ 372.910197][ T8361] tipc: Resetting bearer [ 372.936703][ T8360] tipc: Resetting bearer [ 372.963350][ T8360] tipc: Disabling bearer [ 373.417991][ T8370] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.799886][ T8397] loop5: detected capacity change from 0 to 256 [ 375.881043][ T30] audit: type=1326 audit(1766065730.067:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 375.996643][ T30] audit: type=1326 audit(1766065730.107:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 376.019362][ T30] audit: type=1326 audit(1766065730.107:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c818f749 code=0x7ffc0000 [ 376.444317][ T8410] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.547400][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 377.987822][ T8425] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 379.012757][ T30] audit: type=1326 audit(1766065733.167:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8434 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 379.040919][ T30] audit: type=1326 audit(1766065733.167:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8434 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 379.065196][ T30] audit: type=1326 audit(1766065733.187:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8434 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 379.088342][ T30] audit: type=1326 audit(1766065733.187:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8434 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdc38f749 code=0x7ffc0000 [ 380.011127][ T8457] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 382.168212][ T8494] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 382.422060][ T8499] loop1: detected capacity change from 0 to 128 [ 382.455026][ T8497] netlink: 56 bytes leftover after parsing attributes in process `syz.2.932'. [ 382.497922][ T8499] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.632617][ T8499] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.011771][ T5812] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.236145][ T8515] netlink: 96 bytes leftover after parsing attributes in process `syz.0.942'. [ 383.698868][ T8520] loop1: detected capacity change from 0 to 8192 [ 383.764961][ T8520] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.074197][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 384.140720][ T8535] loop5: detected capacity change from 0 to 128 [ 384.368476][ T8535] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.433607][ T8535] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 384.761123][ T8543] loop2: detected capacity change from 0 to 512 [ 385.174021][ T7702] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.200078][ T8543] EXT4-fs (loop2): 1 truncate cleaned up [ 385.208302][ T8543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.326606][ T8543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.952: bg 0: block 465: padding at end of block bitmap is not set [ 385.392634][ T8543] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.952: invalid indirect mapped block 234881024 (level 0) [ 385.410090][ T30] audit: type=1800 audit(1766065739.577:435): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.952" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 385.679343][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.025836][ T8561] loop4: detected capacity change from 0 to 2048 [ 386.049669][ T8561] ext4: Unknown parameter 'dont_hash' [ 386.108170][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 386.340679][ T30] audit: type=1326 audit(1766065740.507:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.536292][ T30] audit: type=1326 audit(1766065740.597:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.559023][ T30] audit: type=1326 audit(1766065740.597:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.581737][ T30] audit: type=1326 audit(1766065740.607:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.609894][ T30] audit: type=1326 audit(1766065740.607:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.634461][ T30] audit: type=1326 audit(1766065740.637:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.657140][ T30] audit: type=1326 audit(1766065740.637:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.680530][ T30] audit: type=1326 audit(1766065740.637:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 386.708459][ T30] audit: type=1326 audit(1766065740.647:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.5.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f063b18f749 code=0x7ffc0000 [ 387.109075][ T8580] loop1: detected capacity change from 0 to 128 [ 387.405735][ T8573] loop2: detected capacity change from 0 to 8192 [ 387.723452][ T5862] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 387.751720][ T8580] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.887669][ T5862] usb 6-1: device descriptor read/64, error -71 [ 387.912790][ T8580] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 388.124068][ T5814] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 388.132577][ T5814] FAT-fs (loop2): Filesystem has been set read-only [ 388.482138][ T5862] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 388.622812][ T5812] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.649874][ T5862] usb 6-1: device descriptor read/64, error -71 [ 388.768770][ T5862] usb usb6-port1: attempt power cycle [ 388.858122][ T8591] loop1: detected capacity change from 0 to 512 [ 388.908219][ T8591] EXT4-fs (loop1): 1 truncate cleaned up [ 388.916285][ T8591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.943716][ T8591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.970: bg 0: block 465: padding at end of block bitmap is not set [ 388.986502][ T8591] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.970: invalid indirect mapped block 234881024 (level 0) [ 389.096535][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.142299][ T5862] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 389.175509][ T5862] usb 6-1: device descriptor read/8, error -71 [ 389.444370][ T5862] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 389.498352][ T5862] usb 6-1: device descriptor read/8, error -71 [ 389.619400][ T5862] usb usb6-port1: unable to enumerate USB device [ 390.888644][ T8620] loop0: detected capacity change from 0 to 512 [ 390.978848][ T8620] __quota_error: 5 callbacks suppressed [ 390.978923][ T8620] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 390.996145][ T8620] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 391.070914][ T8620] EXT4-fs (loop0): mount failed [ 391.100218][ T8615] loop1: detected capacity change from 0 to 8192 [ 391.133151][ T8622] loop5: detected capacity change from 0 to 1024 [ 391.167406][ T30] audit: type=1800 audit(1766065745.347:450): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.978" name="bus" dev="loop1" ino=1048637 res=0 errno=0 [ 391.374292][ T8622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.729476][ T5812] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 391.739398][ T5812] FAT-fs (loop1): Filesystem has been set read-only [ 391.800773][ T7702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.323875][ T8636] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.710476][ T8642] loop1: detected capacity change from 0 to 1024 [ 392.726811][ T8642] EXT4-fs: Ignoring removed orlov option [ 392.844419][ T8642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.097073][ T8653] loop5: detected capacity change from 0 to 1024 [ 393.194730][ T8653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.399960][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.739281][ T7702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.750913][ T8660] loop1: detected capacity change from 0 to 8192 [ 394.879830][ T30] audit: type=1800 audit(1766065749.067:451): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.993" name="bus" dev="loop1" ino=1048648 res=0 errno=0 [ 395.026996][ T5812] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 395.035253][ T5812] FAT-fs (loop1): Filesystem has been set read-only [ 395.151494][ T8672] loop5: detected capacity change from 0 to 512 [ 395.262488][ T8672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.275637][ T8672] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.488445][ T8672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.390390][ T8690] loop2: detected capacity change from 0 to 512 [ 399.430467][ T8666] Set syz1 is full, maxelem 65536 reached [ 399.593077][ T8690] EXT4-fs (loop2): 1 truncate cleaned up [ 399.601390][ T8690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.810159][ T30] audit: type=1800 audit(1766065753.987:452): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1005" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 400.187369][ T8701] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1009'. [ 400.300332][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 400.309729][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 400.349312][ T8693] loop1: detected capacity change from 0 to 512 [ 400.436089][ T8693] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 400.445346][ T8693] EXT4-fs (loop1): orphan cleanup on readonly fs [ 400.471544][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.519075][ T8693] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 400.561322][ T8693] EXT4-fs (loop1): Remounting filesystem read-only [ 400.568769][ T8693] EXT4-fs (loop1): 1 truncate cleaned up [ 400.576941][ T3566] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 400.587812][ T3566] Quota error (device loop1): write_blk: dquota write failed [ 400.595538][ T3566] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 400.605853][ T3566] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 400.616849][ T3566] Quota error (device loop1): write_blk: dquota write failed [ 400.624512][ T3566] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 400.641155][ T3566] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 400.653484][ T3566] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 400.662913][ T3566] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 401.274764][ T8693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.289957][ T8693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.978767][ T8733] loop2: detected capacity change from 0 to 512 [ 403.072712][ T8733] EXT4-fs (loop2): 1 truncate cleaned up [ 403.080330][ T8733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.162611][ T30] audit: type=1800 audit(1766065757.347:453): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1020" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 403.379615][ T8743] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1022'. [ 403.462347][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.922453][ T8762] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 405.068708][ T8768] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1030'. [ 405.777799][ T8779] loop2: detected capacity change from 0 to 512 [ 405.828395][ T8779] EXT4-fs (loop2): 1 truncate cleaned up [ 405.836209][ T8779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.861167][ T8784] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1037'. [ 405.983970][ T8779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1036: bg 0: block 465: padding at end of block bitmap is not set [ 406.006008][ T30] audit: type=1800 audit(1766065760.167:454): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1036" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 406.010719][ T8779] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 406.103103][ T8779] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1036: invalid indirect mapped block 234881024 (level 0) [ 406.347452][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.076758][ T8804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1046'. [ 407.148062][ T8808] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 407.883446][ T8822] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1051'. [ 408.092817][ T8825] mmap: syz.2.1052 (8825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 408.431517][ T8829] loop0: detected capacity change from 0 to 512 [ 408.492980][ T8829] EXT4-fs (loop0): 1 truncate cleaned up [ 408.500734][ T8829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.601756][ T30] audit: type=1800 audit(1766065762.787:455): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1054" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 408.634045][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 408.648092][ T8829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1054: bg 0: block 465: padding at end of block bitmap is not set [ 408.674859][ T8838] loop5: detected capacity change from 0 to 128 [ 408.695360][ T8829] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 408.730490][ T8838] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.749708][ T8829] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1054: invalid indirect mapped block 234881024 (level 0) [ 408.767151][ T8838] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 408.863278][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.869876][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.013744][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.147292][ T7702] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.257389][ T8843] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1060'. [ 409.407421][ T8845] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 409.704561][ T8851] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1064'. [ 410.438710][ T8858] loop2: detected capacity change from 0 to 128 [ 410.461411][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1065'. [ 411.151985][ T8868] loop5: detected capacity change from 0 to 512 [ 411.236455][ T8868] EXT4-fs (loop5): 1 truncate cleaned up [ 411.246995][ T8868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.428645][ T8868] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1070: bg 0: block 465: padding at end of block bitmap is not set [ 411.765209][ T7702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.460112][ T8890] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 412.936715][ T3566] ===================================================== [ 412.944821][ T3566] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x420/0x9e0 [ 412.953505][ T3566] n_tty_receive_buf_closing+0x420/0x9e0 [ 412.959732][ T3566] n_tty_receive_buf_common+0x19e9/0x2630 [ 412.966206][ T3566] n_tty_receive_buf2+0x4c/0x60 [ 412.971657][ T3566] tty_ldisc_receive_buf+0xc6/0x2c0 [ 412.977635][ T3566] tty_port_default_receive_buf+0xd7/0x1a0 [ 412.984209][ T3566] flush_to_ldisc+0x43e/0xe30 [ 412.989504][ T3566] process_scheduled_works+0xb91/0x1d80 [ 412.995823][ T3566] worker_thread+0xedf/0x1590 [ 413.001170][ T3566] kthread+0xd5c/0xf00 [ 413.006885][ T3566] ret_from_fork+0x208/0x710 [ 413.011999][ T3566] ret_from_fork_asm+0x1a/0x30 [ 413.017401][ T3566] [ 413.029075][ T3566] Uninit was stored to memory at: [ 413.038185][ T3566] n_tty_receive_buf_closing+0x419/0x9e0 [ 413.044709][ T3566] n_tty_receive_buf_common+0x19e9/0x2630 [ 413.051089][ T3566] n_tty_receive_buf2+0x4c/0x60 [ 413.056574][ T3566] tty_ldisc_receive_buf+0xc6/0x2c0 [ 413.062478][ T3566] tty_port_default_receive_buf+0xd7/0x1a0 [ 413.068984][ T3566] flush_to_ldisc+0x43e/0xe30 [ 413.074430][ T3566] process_scheduled_works+0xb91/0x1d80 [ 413.080662][ T3566] worker_thread+0xedf/0x1590 [ 413.086072][ T3566] kthread+0xd5c/0xf00 [ 413.090760][ T3566] ret_from_fork+0x208/0x710 [ 413.096531][ T3566] ret_from_fork_asm+0x1a/0x30 [ 413.102297][ T3566] [ 413.105166][ T3566] Uninit was created at: [ 413.110159][ T3566] __kmalloc_noprof+0xaf2/0x1c20 [ 413.115777][ T3566] __tty_buffer_request_room+0x3d4/0x7a0 [ 413.131886][ T3566] __tty_insert_flip_string_flags+0x157/0x6f0 [ 413.142830][ T3566] uart_insert_char+0x368/0x930 [ 413.148330][ T3566] serial8250_read_char+0x1ba/0x670 [ 413.154247][ T3566] serial8250_handle_irq+0x930/0x1110 [ 413.160307][ T3566] serial8250_default_handle_irq+0x116/0x370 [ 413.169510][ T3566] serial8250_interrupt+0xcb/0x430 [ 413.175461][ T3566] __handle_irq_event_percpu+0x122/0xf40 [ 413.181744][ T3566] handle_irq_event+0xe0/0x2a0 [ 413.187258][ T3566] handle_edge_irq+0x2a9/0xb50 [ 413.193169][ T3566] __common_interrupt+0x9d/0x180 [ 413.198810][ T3566] common_interrupt+0x94/0xb0 [ 413.204195][ T3566] asm_common_interrupt+0x2b/0x40 [ 413.209845][ T3566] [ 413.212876][ T3566] CPU: 0 UID: 0 PID: 3566 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(none) [ 413.234340][ T3566] Tainted: [W]=WARN [ 413.242072][ T3566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.252959][ T3566] Workqueue: events_unbound flush_to_ldisc [ 413.259407][ T3566] ===================================================== [ 413.267022][ T3566] Disabling lock debugging due to kernel taint [ 413.273818][ T3566] Kernel panic - not syncing: kmsan.panic set ... [ 413.280346][ T3566] CPU: 0 UID: 0 PID: 3566 Comm: kworker/u8:13 Tainted: G B W syzkaller #0 PREEMPT(none) [ 413.291627][ T3566] Tainted: [B]=BAD_PAGE, [W]=WARN [ 413.296726][ T3566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.306898][ T3566] Workqueue: events_unbound flush_to_ldisc [ 413.312877][ T3566] Call Trace: [ 413.316235][ T3566] [ 413.319229][ T3566] __dump_stack+0x26/0x30 [ 413.323705][ T3566] dump_stack_lvl+0x53/0x270 [ 413.328432][ T3566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 413.334424][ T3566] dump_stack+0x1e/0x25 [ 413.338715][ T3566] vpanic+0x435/0xd30 [ 413.342846][ T3566] panic+0x15d/0x160 [ 413.346909][ T3566] kmsan_report+0x31c/0x320 [ 413.351653][ T3566] ? __msan_warning+0x1b/0x30 [ 413.356461][ T3566] ? n_tty_receive_buf_closing+0x420/0x9e0 [ 413.362394][ T3566] ? n_tty_receive_buf_common+0x19e9/0x2630 [ 413.368406][ T3566] ? n_tty_receive_buf2+0x4c/0x60 [ 413.373546][ T3566] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 413.379076][ T3566] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 413.385209][ T3566] ? flush_to_ldisc+0x43e/0xe30 [ 413.390203][ T3566] ? process_scheduled_works+0xb91/0x1d80 [ 413.396093][ T3566] ? worker_thread+0xedf/0x1590 [ 413.401042][ T3566] ? kthread+0xd5c/0xf00 [ 413.405404][ T3566] ? ret_from_fork+0x208/0x710 [ 413.410319][ T3566] ? ret_from_fork_asm+0x1a/0x30 [ 413.415401][ T3566] ? ret_from_fork_asm+0x1a/0x30 [ 413.420487][ T3566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 413.426455][ T3566] ? kmsan_get_metadata+0xfb/0x160 [ 413.431720][ T3566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 413.437711][ T3566] ? kmsan_get_metadata+0xfb/0x160 [ 413.442978][ T3566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 413.448953][ T3566] ? kmsan_get_metadata+0xfb/0x160 [ 413.454218][ T3566] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 413.460203][ T3566] ? kmsan_get_metadata+0xfb/0x160 [ 413.465484][ T3566] __msan_warning+0x1b/0x30 [ 413.470134][ T3566] n_tty_receive_buf_closing+0x420/0x9e0 [ 413.475930][ T3566] n_tty_receive_buf_common+0x19e9/0x2630 [ 413.481855][ T3566] n_tty_receive_buf2+0x4c/0x60 [ 413.486825][ T3566] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 413.492491][ T3566] tty_ldisc_receive_buf+0xc6/0x2c0 [ 413.497855][ T3566] tty_port_default_receive_buf+0xd7/0x1a0 [ 413.503828][ T3566] flush_to_ldisc+0x43e/0xe30 [ 413.508659][ T3566] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 413.515235][ T3566] ? __pfx_flush_to_ldisc+0x10/0x10 [ 413.520586][ T3566] process_scheduled_works+0xb91/0x1d80 [ 413.526348][ T3566] worker_thread+0xedf/0x1590 [ 413.531168][ T3566] kthread+0xd5c/0xf00 [ 413.535370][ T3566] ? __pfx_worker_thread+0x10/0x10 [ 413.540621][ T3566] ? __pfx_kthread+0x10/0x10 [ 413.545331][ T3566] ret_from_fork+0x208/0x710 [ 413.550074][ T3566] ? __switch_to+0x53d/0x790 [ 413.554793][ T3566] ? __pfx_kthread+0x10/0x10 [ 413.559502][ T3566] ret_from_fork_asm+0x1a/0x30 [ 413.564437][ T3566] [ 413.568184][ T3566] Kernel Offset: disabled [ 413.572556][ T3566] Rebooting in 86400 seconds..