last executing test programs: 2m6.365059547s ago: executing program 2 (id=503): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="6b9b47", 0x3}], 0x1, &(0x7f0000000380)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x8000, 0xff, 0x5, 0xfff1}}], 0x30, 0x20004000}, 0xc000) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000380)=ANY=[], 0x4000) close(r2) 2m6.010094934s ago: executing program 2 (id=507): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbfs(0x0, 0x775, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 2m5.80050238s ago: executing program 2 (id=508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "bc01"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000fc0)) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 2m4.9615689s ago: executing program 2 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x8, 0x1}, 0x28) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0x9751304b5dc4b606, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 2m3.717341817s ago: executing program 2 (id=521): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000840)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303027322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f64697265637469f9a8a3d75634bdd2ea56ac526f64f72223cc082f505d16b1ba5ea0fd7c9a262c91bdadc10f9c5c6437414c224bbe313a4117d1602bd35ede73d55154ae0c2cb9551143371fd32306f3dee8613d38e0060354449f63f238ae901f37b2bb89b142696a1d8401d3184a52539fe3b38c382fd66c090599baedc4872e53f40e546c780697"], 0xba, 0x69f, &(0x7f0000000f00)="$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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[]) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000) 2m3.129375744s ago: executing program 2 (id=528): connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5505, &(0x7f000000ae00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r0, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r3, 0xee00, 0xee01) fchown(r3, 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m47.587273977s ago: executing program 32 (id=528): connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5505, &(0x7f000000ae00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r0, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r3, 0xee00, 0xee01) fchown(r3, 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m43.9643808s ago: executing program 5 (id=624): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) recvmmsg(r0, &(0x7f0000009500)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0) 1m43.148757223s ago: executing program 5 (id=628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xb58e, 0x3, [0x8, 0x3, 0x0]}, 0xe) 1m42.95262982s ago: executing program 5 (id=630): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab", 0xed}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1m40.854745798s ago: executing program 5 (id=635): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21089c, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 1m36.513777433s ago: executing program 5 (id=650): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsu(&(0x7f0000000080), 0xa, 0x400183) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1m35.330018322s ago: executing program 5 (id=657): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002f77fbac141416e000030a44079f03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002000000"], 0x28}}], 0x1, 0x4000000) 1m34.513909045s ago: executing program 33 (id=657): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002f77fbac141416e000030a44079f03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002000000"], 0x28}}], 0x1, 0x4000000) 1m23.327484757s ago: executing program 0 (id=720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}}, 0x20}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20) 1m22.205950182s ago: executing program 0 (id=726): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0xfffffffffffffd26) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x9b4a, 0xd000, 0x20000c, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.007430858s ago: executing program 0 (id=728): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x4, 0xd}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m21.689031048s ago: executing program 0 (id=731): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m21.484070212s ago: executing program 0 (id=734): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) 1m19.759646043s ago: executing program 0 (id=742): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='10 ', 0x3) 1m19.243021905s ago: executing program 34 (id=742): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='10 ', 0x3) 59.925967167s ago: executing program 7 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="2c000000070a010300000000000000000a00000a0900010073797a303100000000a262f815188475"], 0x2c}, 0x1, 0x0, 0x0, 0x24001891}, 0x20000004) 59.530844701s ago: executing program 7 (id=825): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x9b4a, 0xd000, 0x20000c, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 59.22629082s ago: executing program 7 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x4, 0x8004, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c51}, 0x4040140) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x105000) 58.721241493s ago: executing program 7 (id=834): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 58.412314096s ago: executing program 7 (id=838): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d", 0x5c) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) 56.653767433s ago: executing program 7 (id=843): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[0x0]) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 56.003944292s ago: executing program 35 (id=843): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[0x0]) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 5.461853301s ago: executing program 1 (id=1225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) 4.383261434s ago: executing program 1 (id=1239): r0 = inotify_init1(0x80800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0x4, 0xa}, {0x4, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x61}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0xa0000680) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r5, 0x0, 0xd5a0, 0x8ffff) copy_file_range(r5, 0x0, r5, &(0x7f0000000500)=0xffff, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) ppoll(&(0x7f0000000200)=[{r8, 0x16}], 0x1, 0x0, 0x0, 0x0) 4.227051179s ago: executing program 6 (id=1242): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 3.868279363s ago: executing program 6 (id=1246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80040d4}, 0x0) 3.649760677s ago: executing program 3 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r0, 0x0, 0x0, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x83595b8d09592993, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x6}, {0x2, 0x2}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.563294957s ago: executing program 6 (id=1249): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 3.518626711s ago: executing program 4 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x6, 0x0, 0x2001) 3.256930876s ago: executing program 6 (id=1252): capget(&(0x7f00000001c0)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000340)={0x7ff, 0x7, 0x1, 0x3, 0x3, 0x8000}) 3.209366231s ago: executing program 1 (id=1253): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f0000000380)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@test_dummy_encryption_v1}, {@discard}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x80202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) 3.142449601s ago: executing program 4 (id=1254): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0xc800, &(0x7f0000000040)=ANY=[], 0x2, 0x81d, &(0x7f0000001540)="$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") r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 3.057038242s ago: executing program 3 (id=1255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0)=0xa, 0x4) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) 2.994466363s ago: executing program 8 (id=1256): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.938423836s ago: executing program 6 (id=1257): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.697454603s ago: executing program 3 (id=1258): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) pipe(0x0) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x4) 2.564095993s ago: executing program 8 (id=1259): write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="6300000000b4060000000000000000000000000000000000ff010000000000000000000000000006"], 0xdc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6a, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2.473804536s ago: executing program 4 (id=1260): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 2.435984191s ago: executing program 6 (id=1261): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) 2.30350653s ago: executing program 3 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.906484441s ago: executing program 9 (id=1263): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xa6, 0x81, 0xfffff034}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.847702901s ago: executing program 8 (id=1264): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0xfffffffffffffd26) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x9b4a, 0xd000, 0x20000c, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.782125617s ago: executing program 3 (id=1265): r0 = inotify_init1(0x80800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0x4, 0xa}, {0x4, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x61}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0xa0000680) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r5, 0x0, 0xd5a0, 0x8ffff) copy_file_range(r5, 0x0, r5, &(0x7f0000000500)=0xffff, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) ppoll(&(0x7f0000000200)=[{r9, 0x16}], 0x1, 0x0, 0x0, 0x0) 1.690297019s ago: executing program 1 (id=1266): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x6, 0x0, 0x2001) 1.523523236s ago: executing program 4 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r0, 0x0, 0x0, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x83595b8d09592993, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x6}, {0x2, 0x2}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.454454019s ago: executing program 9 (id=1268): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x8}, 0x8) 1.184956432s ago: executing program 1 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f00000000c0)='o', 0x1) 1.053389887s ago: executing program 9 (id=1270): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.045871676s ago: executing program 4 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 866.006687ms ago: executing program 1 (id=1272): sched_setattr(0x0, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 778.105959ms ago: executing program 9 (id=1273): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 747.981619ms ago: executing program 8 (id=1274): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x4) 521.89273ms ago: executing program 3 (id=1275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) 366.459742ms ago: executing program 8 (id=1276): write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="6300000000b4060000000000000000000000000000000000ff010000000000000000000000000006"], 0xdc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6a, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 307.530371ms ago: executing program 9 (id=1277): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 142.15601ms ago: executing program 9 (id=1278): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f0000000380)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@test_dummy_encryption_v1}, {@discard}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x80202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) 119.447809ms ago: executing program 8 (id=1279): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00') preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0x18, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffffff, 0xff, 'netdevsim0\x00', 'wg1\x00', {0xff}, {}, 0x5c, 0x2, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x3, 0x1, 0x1, 0x0, 0x1, 0x1], 0x6, 0x7}, {0x4, [0x6, 0x2, 0x2, 0x4, 0x0, 0x7], 0x1, 0x3}}}}, {{@uncond, 0x0, 0x150, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xffffffff, 0xffffff00, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffffff, 0xff00007f], @ipv6=@empty, [0xffffffff, 0x0, 0xffffffff, 0xff], @ipv4=@multicast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0xf2f, 0x0, 0x3b, 0x4e23, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x210}, 0xc1, 0x20}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xa, [0x35, 0x29, 0xa, 0x29, 0x3, 0x20, 0x31, 0x30, 0x0, 0x10, 0x21, 0x1d, 0x40, 0x15, 0xc, 0x15], 0x0, 0x0, 0x43}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 0s ago: executing program 4 (id=1280): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) fcntl$setpipe(r0, 0x408, 0x7) kernel console output (not intermixed with test programs): iso9660: Corrupted directory entry in block 2 of inode 1792 [ 160.428207][ T6993] ALSA: mixer_oss: invalid OSS volume '' [ 160.457246][ T6993] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 160.489182][ T6993] ALSA: mixer_oss: invalid OSS volume '' [ 161.138715][ T7007] loop4: detected capacity change from 0 to 512 [ 161.217555][ T7007] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 161.278638][ T7007] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.390: corrupted in-inode xattr: e_value size too large [ 161.380327][ T7007] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.382124][ T7007] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.390: couldn't read orphan inode 15 (err -117) [ 161.391336][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 161.391358][ C1] EXT4-fs (loop4): initial error at time 1785871559: ext4_iget_extra_inode:5180: inode 15 [ 161.391395][ C1] EXT4-fs (loop4): last error at time 1785871559: ext4_iget_extra_inode:5180: inode 15 [ 161.421209][ T186] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.531175][ T7007] loop4: lost filesystem error report for type 5 error -117 [ 161.533726][ T7007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.628553][ T186] usb 4-1: device descriptor read/64, error -71 [ 161.765192][ T7019] loop1: detected capacity change from 0 to 1024 [ 161.825432][ T7019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.864564][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.887891][ T186] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.048388][ T186] usb 4-1: device descriptor read/64, error -71 [ 162.179870][ T186] usb usb4-port1: attempt power cycle [ 162.365701][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.451973][ T7029] warning: `syz.4.396' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 163.207850][ T186] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.250272][ T186] usb 4-1: device descriptor read/8, error -71 [ 163.437392][ T7040] loop5: detected capacity change from 0 to 512 [ 163.456141][ T7040] EXT4-fs (loop5): Test dummy encryption mode enabled [ 163.485223][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.496765][ T7040] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.402: corrupted in-inode xattr: invalid ea_ino [ 163.503666][ T7038] batadv_slave_1: entered promiscuous mode [ 163.545883][ T186] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.565193][ T7040] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.566591][ T7040] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.402: couldn't read orphan inode 15 (err -117) [ 163.575880][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 163.575903][ C1] EXT4-fs (loop5): initial error at time 1785871561: ext4_iget_extra_inode:5180: inode 15 [ 163.575940][ C1] EXT4-fs (loop5): last error at time 1785871561: ext4_iget_extra_inode:5180: inode 15 [ 163.617009][ T7040] loop5: lost filesystem error report for type 5 error -117 [ 163.620960][ T186] usb 4-1: device descriptor read/8, error -71 [ 163.640982][ T7040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.778177][ T186] usb usb4-port1: unable to enumerate USB device [ 164.153218][ T7056] loop1: detected capacity change from 0 to 32768 [ 164.176058][ T7056] (syz.1.407,7056,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.190852][ T7056] (syz.1.407,7056,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.249757][ T7056] JBD2: Ignoring recovery information on journal [ 164.331922][ T7056] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 165.353148][ T5622] ocfs2: Unmounting device (7,1) on (node local) [ 166.635880][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 166.645137][ T7099] tipc: Enabling of bearer <`dp:s> rejected, media not registered [ 166.660888][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 166.930952][ T7102] loop1: detected capacity change from 0 to 512 [ 167.002583][ T7102] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 167.036571][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 167.061870][ T7102] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.424: corrupted in-inode xattr: e_value size too large [ 167.135768][ T7102] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.136136][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.424: couldn't read orphan inode 15 (err -117) [ 167.145327][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 167.145348][ C0] EXT4-fs (loop1): initial error at time 1785871564: ext4_iget_extra_inode:5180: inode 15 [ 167.145385][ C0] EXT4-fs (loop1): last error at time 1785871564: ext4_iget_extra_inode:5180: inode 15 [ 167.247170][ T7102] loop1: lost filesystem error report for type 5 error -117 [ 167.250634][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.355933][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.479207][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.600996][ T7115] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.428'. [ 169.018741][ T5644] Bluetooth: hci0: command 0x0401 tx timeout [ 169.026027][ T7106] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 169.087599][ T5644] Bluetooth: hci6: command 0x1003 tx timeout [ 169.095618][ T5635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 169.940672][ T7149] loop5: detected capacity change from 0 to 512 [ 170.055674][ T7149] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 170.146962][ T7149] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.442: corrupted in-inode xattr: e_value size too large [ 170.281196][ T7149] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.281573][ T7149] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.442: couldn't read orphan inode 15 (err -117) [ 170.290838][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 170.290862][ C1] EXT4-fs (loop5): initial error at time 1785871567: ext4_iget_extra_inode:5180: inode 15 [ 170.290900][ C1] EXT4-fs (loop5): last error at time 1785871567: ext4_iget_extra_inode:5180: inode 15 [ 170.340217][ T7149] loop5: lost filesystem error report for type 5 error -117 [ 170.343564][ T7149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.310232][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.721140][ T5761] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.920189][ T5761] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 172.965978][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.046081][ T5761] usb 2-1: config 0 descriptor?? [ 173.126137][ T7189] loop4: detected capacity change from 0 to 512 [ 173.138948][ T7189] EXT4-fs: Ignoring removed bh option [ 173.234523][ T7189] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 173.330536][ T7189] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 173.362364][ T7189] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.400496][ T7189] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 173.423637][ T7189] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 173.466080][ T7189] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.456: Failed to acquire dquot type 1 [ 173.484563][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.493877][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.501818][ T7189] loop4: lost filesystem error report for type 5 error -5 [ 173.503938][ T7189] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.456: Invalid block bitmap block 0 in block_group 0 [ 173.511115][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 173.511138][ C0] EXT4-fs (loop4): last error at time 1785871571: ext4_acquire_dquot:7041 [ 173.544067][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.549752][ T5916] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 173.584633][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.609792][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.621807][ T7189] loop4: lost filesystem error report for type 5 error -117 [ 173.630619][ T7189] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.456: Invalid block bitmap block 0 in block_group 0 [ 173.655484][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.691580][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.707548][ T7189] loop4: lost filesystem error report for type 5 error -117 [ 173.709577][ T7189] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.456: Invalid block bitmap block 0 in block_group 0 [ 173.737998][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.748781][ T5760] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.768494][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 173.783668][ T5761] ath6kl: Failed to read usb control message: -71 [ 173.794214][ T5761] ath6kl: Unable to read the bmi data from the device: -71 [ 173.804528][ T7189] loop4: lost filesystem error report for type 5 error -117 [ 173.805390][ T7189] Quota error (device loop4): write_blk: dquota write failed [ 173.814075][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.833480][ T5761] ath6kl: Unable to recv target info: -71 [ 173.848254][ T5761] ath6kl: Failed to init ath6kl core: -71 [ 173.855743][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.874235][ T5761] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 173.884644][ T7189] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 173.887864][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.975249][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 173.988919][ T5761] usb 2-1: USB disconnect, device number 3 [ 174.004535][ T5760] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.023541][ T5916] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.044745][ T5760] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.061055][ T7189] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.456: Failed to acquire dquot type 1 [ 174.338760][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.346900][ T7189] loop4: lost filesystem error report for type 5 error -28 [ 174.348955][ T7189] Quota error (device loop4): write_blk: dquota write failed [ 174.367006][ T5760] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.379109][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.380213][ T5916] usb 6-1: config 0 descriptor?? [ 174.399526][ T5760] usb 4-1: config 0 descriptor?? [ 174.400970][ T7189] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 174.470676][ T7189] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.456: Failed to acquire dquot type 1 [ 174.512748][ T7189] loop4: lost filesystem error report for type 5 error -28 [ 174.514564][ T7189] EXT4-fs (loop4): 1 orphan inode deleted [ 174.549327][ T7189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.859733][ T186] usb 4-1: USB disconnect, device number 7 [ 174.976211][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.693933][ T5916] usbhid 6-1:0.0: can't add hid device: -71 [ 175.706167][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.722817][ T5916] usb 6-1: USB disconnect, device number 4 [ 177.058022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 178.769794][ T7266] loop1: detected capacity change from 0 to 512 [ 178.791907][ T7266] EXT4-fs (loop1): Test dummy encryption mode enabled [ 178.836348][ T7266] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.480: corrupted in-inode xattr: invalid ea_ino [ 178.893930][ T7266] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.896158][ T7266] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.480: couldn't read orphan inode 15 (err -117) [ 178.905421][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 178.905444][ C1] EXT4-fs (loop1): initial error at time 1785871576: ext4_iget_extra_inode:5180: inode 15 [ 178.905481][ C1] EXT4-fs (loop1): last error at time 1785871576: ext4_iget_extra_inode:5180: inode 15 [ 178.963112][ T7266] loop1: lost filesystem error report for type 5 error -117 [ 178.976130][ T7266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.428611][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.974524][ T7284] ALSA: mixer_oss: invalid OSS volume '' [ 179.995178][ T7284] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 180.028042][ T7284] ALSA: mixer_oss: invalid OSS volume '' [ 180.242405][ T7286] loop3: detected capacity change from 0 to 32768 [ 180.264699][ T7286] (syz.3.488,7286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.278492][ T7286] (syz.3.488,7286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.302430][ T7286] JBD2: Ignoring recovery information on journal [ 180.346470][ T7286] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.257683][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 181.573249][ T7306] loop1: detected capacity change from 0 to 1024 [ 181.650958][ T7306] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 181.650958][ T7306] [ 181.718114][ T5624] ocfs2: Unmounting device (7,3) on (node local) [ 183.412927][ T7370] loop3: detected capacity change from 0 to 1024 [ 183.454327][ T7370] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.473892][ T7370] EXT4-fs: Ignoring removed oldalloc option [ 183.512619][ T7375] 9p: Bad value for 'wfdno' [ 183.568693][ T7370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.606773][ T7370] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.755972][ T31] audit: type=1800 audit(1785871581.426:4): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 183.952325][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.245170][ T7325] loop0: detected capacity change from 0 to 40427 [ 184.268490][ T7325] F2FS-fs (loop0): invalid crc value [ 184.622137][ T7325] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.658275][ T7325] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 184.777862][ T5627] syz-executor: attempt to access beyond end of device [ 184.777862][ T5627] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.883744][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 184.883779][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 184.883794][ T5627] Call Trace: [ 184.883804][ T5627] [ 184.883814][ T5627] dump_stack_lvl+0xe8/0x150 [ 184.883858][ T5627] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 184.883899][ T5627] f2fs_write_end_io+0x124b/0x1710 [ 184.883947][ T5627] __submit_merged_bio+0x258/0x6a0 [ 184.883971][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.883993][ T5627] ? rcu_is_watching+0x15/0xb0 [ 184.884016][ T5627] __submit_merged_write_cond+0x3c9/0x4e0 [ 184.884049][ T5627] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 184.884085][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884114][ T5627] f2fs_write_data_pages+0x2a27/0x36f0 [ 184.884142][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884163][ T5627] ? __lock_acquire+0x683/0x2cf0 [ 184.884219][ T5627] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.884246][ T5627] ? is_bpf_text_address+0x26/0x2b0 [ 184.884285][ T5627] ? arch_stack_walk+0xfb/0x150 [ 184.884333][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884354][ T5627] ? add_lock_to_list+0xc7/0x100 [ 184.884374][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884395][ T5627] ? __lock_acquire+0x13e8/0x2cf0 [ 184.884445][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884466][ T5627] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.884492][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884517][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884538][ T5627] ? do_raw_spin_unlock+0xf5/0x210 [ 184.884560][ T5627] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.884590][ T5627] do_writepages+0x338/0x560 [ 184.884619][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884642][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884666][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884689][ T5627] ? do_raw_spin_unlock+0xf5/0x210 [ 184.884725][ T5627] filemap_fdatawrite+0x1e9/0x2f0 [ 184.884758][ T5627] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 184.884843][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884872][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.884908][ T5627] ? do_raw_spin_unlock+0xf5/0x210 [ 184.884945][ T5627] f2fs_sync_dirty_inodes+0x30e/0x830 [ 184.885006][ T5627] f2fs_write_checkpoint+0xa3d/0x2710 [ 184.885030][ T5627] ? __lock_acquire+0x683/0x2cf0 [ 184.885105][ T5627] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 184.885129][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.885221][ T5627] kill_f2fs_super+0x2f6/0x700 [ 184.885269][ T5627] ? __pfx_kill_f2fs_super+0x10/0x10 [ 184.885334][ T5627] ? call_rcu+0x64b/0x8b0 [ 184.885358][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.885388][ T5627] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.885421][ T5627] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.885467][ T5627] deactivate_locked_super+0xbc/0x130 [ 184.885512][ T5627] cleanup_mnt+0x3d3/0x460 [ 184.885543][ T5627] task_work_run+0x1d9/0x270 [ 184.885571][ T5627] ? __pfx_task_work_run+0x10/0x10 [ 184.885608][ T5627] exit_to_user_mode_loop+0x1fa/0x730 [ 184.885644][ T5627] ? rcu_is_watching+0x15/0xb0 [ 184.885670][ T5627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.885698][ T5627] do_syscall_64+0x353/0x580 [ 184.885732][ T5627] ? trace_irq_disable+0x3b/0x140 [ 184.885775][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.885800][ T5627] RIP: 0033:0x7f8306d9f257 [ 184.885824][ T5627] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 184.885844][ T5627] RSP: 002b:00007ffe12d47928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.885870][ T5627] RAX: 0000000000000000 RBX: 00007f8306e3445c RCX: 00007f8306d9f257 [ 184.885888][ T5627] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe12d479e0 [ 184.885903][ T5627] RBP: 00007ffe12d479e0 R08: 00007ffe12d489e0 R09: 00000000ffffffff [ 184.885921][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe12d48a70 [ 184.885937][ T5627] R13: 00007f8306e3445c R14: 000000000002d17c R15: 00007ffe12d48ab0 [ 184.885976][ T5627] [ 185.327536][ T5627] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 185.586080][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 186.029340][ T7434] loop3: detected capacity change from 0 to 512 [ 186.034578][ T7433] loop5: detected capacity change from 0 to 1024 [ 186.059453][ T7434] EXT4-fs: Ignoring removed bh option [ 186.084764][ T7433] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.132178][ T7433] EXT4-fs: Ignoring removed oldalloc option [ 186.132551][ T7434] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 186.199019][ T7434] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 186.225969][ T7434] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.236087][ T7434] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 186.254566][ T7434] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 186.268444][ T7433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.342105][ T7434] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.523: Failed to acquire dquot type 1 [ 186.363578][ T7433] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.385171][ T7434] loop3: lost filesystem error report for type 5 error -5 [ 186.386125][ T7434] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.523: Invalid block bitmap block 0 in block_group 0 [ 186.393334][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 186.393356][ C0] EXT4-fs (loop3): last error at time 1785871584: ext4_acquire_dquot:7041 [ 186.440465][ T31] audit: type=1800 audit(1785871584.106:5): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.522" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 186.481012][ T7434] loop3: lost filesystem error report for type 5 error -117 [ 186.489455][ T7434] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.523: Invalid block bitmap block 0 in block_group 0 [ 186.513596][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.593707][ T7434] loop3: lost filesystem error report for type 5 error -117 [ 186.594199][ T7434] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.523: Invalid block bitmap block 0 in block_group 0 [ 186.657037][ T7434] loop3: lost filesystem error report for type 5 error -117 [ 186.657600][ T7434] Quota error (device loop3): write_blk: dquota write failed [ 186.689765][ T7434] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 186.728186][ T7434] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.523: Failed to acquire dquot type 1 [ 186.776402][ T7434] loop3: lost filesystem error report for type 5 error -28 [ 186.780263][ T7434] Quota error (device loop3): write_blk: dquota write failed [ 186.833637][ T7434] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 186.860544][ T7434] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.523: Failed to acquire dquot type 1 [ 186.933975][ T7434] loop3: lost filesystem error report for type 5 error -28 [ 186.934524][ T7434] EXT4-fs (loop3): 1 orphan inode deleted [ 187.004631][ T7464] loop5: detected capacity change from 0 to 4096 [ 187.046447][ T7434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.097262][ T7464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.353063][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.158741][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.547568][ T7491] loop3: detected capacity change from 0 to 1024 [ 188.578403][ T7491] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.618155][ T7491] EXT4-fs: Ignoring removed oldalloc option [ 188.700502][ T7491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.773998][ T7491] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.925937][ T31] audit: type=1800 audit(1785871586.587:6): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.541" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 189.020836][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.350846][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 190.613537][ T7519] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 190.613537][ T7519] program syz.5.546 not setting count and/or reply_len properly [ 191.062787][ T31] audit: type=1326 audit(1785871588.727:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.3.549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 191.199410][ T31] audit: type=1326 audit(1785871588.727:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.3.549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 191.516223][ T186] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.677787][ T186] usb 5-1: Using ep0 maxpacket: 32 [ 191.696579][ T5752] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.717475][ T186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 191.748287][ T186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 191.785654][ T186] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 191.800655][ T31] audit: type=1326 audit(1785871589.447:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.3.549" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 191.833513][ T186] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 191.857797][ T186] usb 5-1: Product: syz [ 191.868312][ T186] usb 5-1: Manufacturer: syz [ 191.877766][ T186] usb 5-1: SerialNumber: syz [ 191.916601][ T5752] usb 2-1: Using ep0 maxpacket: 16 [ 191.924984][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.968940][ T186] usb 5-1: config 0 descriptor?? [ 191.981043][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.010130][ T186] hub 5-1:0.0: bad descriptor, ignoring hub [ 192.038246][ T5752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.052098][ T186] hub 5-1:0.0: probe with driver hub failed with error -5 [ 192.096258][ T5752] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.185606][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.284412][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.384394][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.941620][ T5752] usb 2-1: config 0 descriptor?? [ 193.056425][ T186] usb 5-1: USB disconnect, device number 6 [ 193.244277][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.560'. [ 193.314476][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.375114][ T5788] hid-generic 0005:0000:0000.0004: unknown main item tag 0x0 [ 193.385681][ T5788] hid-generic 0005:0000:0000.0004: unknown main item tag 0x0 [ 193.399408][ T5788] hid-generic 0005:0000:0000.0004: unknown main item tag 0x0 [ 193.401806][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.411765][ T5788] hid-generic 0005:0000:0000.0004: unknown main item tag 0x0 [ 193.455794][ T5788] hid-generic 0005:0000:0000.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 193.491423][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.498430][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.593569][ T5752] usbhid 2-1:0.0: can't add hid device: -71 [ 193.615057][ T5752] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.690761][ T5752] usb 2-1: USB disconnect, device number 4 [ 193.760465][ T7578] fido_id[7578]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.944950][ T7583] fuse: Unknown parameter 'grou00000000000000000000' [ 194.151055][ T7589] loop4: detected capacity change from 0 to 2048 [ 194.256675][ T7589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.294749][ T7589] EXT4-fs (loop4): shut down requested (1) [ 194.344740][ T31] audit: type=1326 audit(1785871591.997:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 194.405631][ T31] audit: type=1326 audit(1785871591.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 194.441786][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.484448][ T31] audit: type=1326 audit(1785871592.097:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa29f95e84e code=0x7ffc0000 [ 195.480094][ T31] audit: type=1326 audit(1785871592.107:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 195.505536][ T31] audit: type=1326 audit(1785871592.107:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 195.530198][ T31] audit: type=1326 audit(1785871592.107:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 195.564623][ T31] audit: type=1326 audit(1785871592.107:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 195.739245][ T31] audit: type=1326 audit(1785871592.107:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 195.906526][ T31] audit: type=1326 audit(1785871592.107:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 196.013918][ T31] audit: type=1326 audit(1785871592.117:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.570" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 196.071192][ T7622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.576'. [ 196.724367][ T7634] fuse: Unknown parameter 'group_i00000000000000000000' [ 197.095647][ T7643] loop1: detected capacity change from 0 to 1024 [ 197.101096][ T7644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 197.171521][ T7643] ext4: Unknown parameter 'seclabel' [ 197.789519][ T7648] xt_CT: No such helper "netbios-ns" [ 199.069063][ T7660] loop4: detected capacity change from 0 to 128 [ 199.148085][ T7660] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.243622][ T7660] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.298400][ T7664] loop0: detected capacity change from 0 to 736 [ 199.431402][ T7666] loop1: detected capacity change from 0 to 512 [ 199.472293][ T7666] EXT4-fs: Ignoring removed bh option [ 199.485284][ T7664] rock: directory entry would overflow storage [ 199.487152][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 199.507966][ T7664] rock: sig=0x3b10, size=4, remaining=3 [ 199.528654][ T7666] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.574793][ T7666] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 199.654961][ T7666] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 199.668292][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.742470][ T7666] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 199.910498][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.011191][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 200.050992][ T7666] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 8 (only 1 groups) [ 200.214753][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.379895][ T7683] fuse: Unknown parameter 'group_i00000000000000000000' [ 201.991064][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 201.991085][ T31] audit: type=1326 audit(1785871599.657:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.5.605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba66b9e019 code=0x7ffc0000 [ 202.363823][ T31] audit: type=1326 audit(1785871599.657:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.5.605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba66b9e019 code=0x7ffc0000 [ 202.431907][ T31] audit: type=1326 audit(1785871599.707:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.5.605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fba66b9e019 code=0x7ffc0000 [ 202.475560][ T31] audit: type=1326 audit(1785871599.707:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.5.605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba66b9e019 code=0x7ffc0000 [ 202.542220][ T7709] xt_CT: No such helper "netbios-ns" [ 202.723250][ T7720] loop0: detected capacity change from 0 to 164 [ 202.724157][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.742162][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.754398][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.768659][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.777026][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.815549][ T5760] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.896859][ T7727] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 202.975800][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 203.009730][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 203.053199][ T5760] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 203.113573][ T5760] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.148632][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.193102][ T5760] usb 2-1: Product: syz [ 203.216425][ T5760] usb 2-1: Manufacturer: syz [ 203.237865][ T5760] usb 2-1: SerialNumber: syz [ 203.259465][ T5760] usb 2-1: config 0 descriptor?? [ 203.302104][ T5760] hub 2-1:0.0: bad descriptor, ignoring hub [ 203.335255][ T5760] hub 2-1:0.0: probe with driver hub failed with error -5 [ 203.338164][ T7737] netlink: 36 bytes leftover after parsing attributes in process `syz.5.614'. [ 203.573760][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.638872][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.477204][ T7747] loop5: detected capacity change from 0 to 512 [ 204.485782][ T5760] usb 2-1: USB disconnect, device number 5 [ 204.554511][ T7747] EXT4-fs (loop5): Test dummy encryption mode enabled [ 204.624499][ T7747] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.617: corrupted in-inode xattr: invalid ea_ino [ 204.672051][ T7752] loop0: detected capacity change from 0 to 512 [ 204.723769][ T7747] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.724866][ T7752] EXT4-fs: Ignoring removed bh option [ 204.727609][ T7747] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.617: couldn't read orphan inode 15 (err -117) [ 204.739494][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 204.739520][ C1] EXT4-fs (loop5): initial error at time 1785871602: ext4_iget_extra_inode:5180: inode 15 [ 204.739559][ C1] EXT4-fs (loop5): last error at time 1785871602: ext4_iget_extra_inode:5180: inode 15 [ 204.781963][ T7752] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 204.810383][ T7747] loop5: lost filesystem error report for type 5 error -117 [ 204.845755][ T51] Bluetooth: hci6: command tx timeout [ 204.881798][ T7752] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 204.905777][ T7752] EXT4-fs (loop0): orphan cleanup on readonly fs [ 204.920579][ T7752] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 204.942099][ T7747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.997503][ T7762] loop3: detected capacity change from 0 to 1024 [ 205.025628][ T7752] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 205.110710][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.172705][ T7752] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.619: Failed to acquire dquot type 1 [ 205.178820][ T7762] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.202744][ T7752] loop0: lost filesystem error report for type 5 error -5 [ 205.205362][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 205.218941][ C0] EXT4-fs (loop0): last error at time 1785871602: ext4_acquire_dquot:7041 [ 205.236375][ T7752] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.619: Invalid block bitmap block 0 in block_group 0 [ 205.268997][ T7752] loop0: lost filesystem error report for type 5 error -117 [ 205.270201][ T7752] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.619: Invalid block bitmap block 0 in block_group 0 [ 205.321616][ T7752] loop0: lost filesystem error report for type 5 error -117 [ 205.323092][ T7752] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.619: Invalid block bitmap block 0 in block_group 0 [ 205.366705][ T7752] loop0: lost filesystem error report for type 5 error -117 [ 205.489381][ T7752] Quota error (device loop0): write_blk: dquota write failed [ 205.499475][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.546219][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.559442][ T7752] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 205.601235][ T7752] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.619: Failed to acquire dquot type 1 [ 205.645924][ T7752] loop0: lost filesystem error report for type 5 error -28 [ 205.660311][ T7752] Quota error (device loop0): write_blk: dquota write failed [ 205.721291][ T7752] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 205.838697][ T7779] loop3: detected capacity change from 0 to 164 [ 205.854712][ T7752] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.619: Failed to acquire dquot type 1 [ 205.887301][ T7752] loop0: lost filesystem error report for type 5 error -28 [ 205.940021][ T7752] EXT4-fs (loop0): 1 orphan inode deleted [ 206.015460][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.021711][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.029996][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.036895][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 206.042986][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 206.248595][ T7752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.378257][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.381941][ T7787] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 206.404160][ T7781] xt_CT: No such helper "netbios-ns" [ 206.925691][ T5645] Bluetooth: hci6: command tx timeout [ 207.799938][ T7799] loop0: detected capacity change from 0 to 32768 [ 207.831331][ T7799] (syz.0.632,7799,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.845109][ T7799] (syz.0.632,7799,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.870531][ T7799] JBD2: Ignoring recovery information on journal [ 207.933940][ T7799] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 208.516905][ T7808] loop4: detected capacity change from 0 to 1024 [ 208.544013][ T7808] EXT4-fs: Ignoring removed oldalloc option [ 208.595880][ T7808] EXT4-fs: Ignoring removed bh option [ 208.843260][ T7808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.920073][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 208.941972][ T7817] loop5: detected capacity change from 0 to 512 [ 208.965795][ T7808] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.981941][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.011612][ T5645] Bluetooth: hci6: command tx timeout [ 209.083513][ T7817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.187945][ T7817] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.256167][ T5627] ocfs2: Unmounting device (7,0) on (node local) [ 209.304206][ T7822] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.633: lblock 0 mapped to illegal pblock 0 (length 1) [ 209.524372][ T7822] EXT4-fs (loop4): Remounting filesystem read-only [ 209.547986][ T7825] loop5: detected capacity change from 512 to 0 [ 209.554602][ C0] I/O error, dev loop5, sector 180 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 209.564525][ C0] Buffer I/O error on dev loop5, logical block 45, lost sync page write [ 209.595146][ T7817] EXT4-fs error (device loop5): ext4_ext_insert_extent:2210: inode #16: block 45: comm syz.5.635: IO error syncing itable block [ 209.627085][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 209.647935][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 209.672243][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 209.682096][ T7832] loop1: detected capacity change from 0 to 512 [ 209.691924][ T7832] EXT4-fs: Ignoring removed nobh option [ 209.700735][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.756762][ T7832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.769376][ T7832] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.801240][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 209.862312][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 209.898218][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 209.963267][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 210.001423][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 210.034755][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 210.085866][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 210.108074][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 210.162279][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 210.919452][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 210.947359][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 210.952724][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.979112][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.005250][ T7719] bridge_slave_0: entered allmulticast mode [ 211.013198][ T7719] bridge_slave_0: entered promiscuous mode [ 211.025208][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 211.065376][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.091885][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.107732][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 211.109435][ T5645] Bluetooth: hci6: command tx timeout [ 211.119691][ T7719] bridge_slave_1: entered allmulticast mode [ 211.139149][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 211.144742][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.146458][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 211.176463][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 211.196201][ T7719] bridge_slave_1: entered promiscuous mode [ 211.203286][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 211.221829][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 211.235324][ T7845] loop0: detected capacity change from 0 to 256 [ 211.246773][ T7817] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 211.269334][ T7845] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 211.280533][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 211.293752][ T7845] FAT-fs (loop0): Can't find a valid FAT filesystem [ 211.300865][ T7817] Buffer I/O error on dev loop5, logical block 45, lost sync page write [ 211.377475][ T7817] EXT4-fs error (device loop5): ext4_ext_rm_leaf:2770: inode #16: block 45: comm syz.5.635: IO error syncing itable block [ 211.383402][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.414182][ T7847] loop1: detected capacity change from 0 to 164 [ 211.414740][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.452755][ T7817] EXT4-fs (loop5): I/O error while writing superblock [ 211.472256][ T7817] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.635: Error while async write back metadata [ 211.549685][ T7817] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 38) [ 211.550982][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.619283][ T7817] Buffer I/O error on device loop5, logical block 38 [ 211.626201][ T7817] Buffer I/O error on device loop5, logical block 39 [ 211.632521][ T7851] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 211.652456][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.705228][ T7817] Buffer I/O error on device loop5, logical block 40 [ 211.711956][ T7817] Buffer I/O error on device loop5, logical block 41 [ 211.766079][ T7817] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 42) [ 211.787478][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.812782][ T7817] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 44) [ 211.855346][ T7817] Buffer I/O error on device loop5, logical block 44 [ 211.884887][ T7817] Buffer I/O error on device loop5, logical block 42 [ 212.008585][ T7856] xt_CT: No such helper "netbios-ns" [ 212.015848][ T7817] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 47) [ 212.039446][ T7862] fuse: Bad value for 'user_id' [ 212.052098][ T7817] Buffer I/O error on device loop5, logical block 47 [ 212.058788][ T7817] Buffer I/O error on device loop5, logical block 48 [ 212.068246][ T7862] fuse: Bad value for 'user_id' [ 212.102763][ T7817] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 57) [ 212.269914][ T7817] Buffer I/O error on device loop5, logical block 57 [ 212.276637][ T7817] Buffer I/O error on device loop5, logical block 58 [ 212.911397][ T5621] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 212.972621][ T5621] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 212.986249][ T7719] team0: Port device team_slave_0 added [ 213.011873][ T7719] team0: Port device team_slave_1 added [ 213.049332][ T5621] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 213.063066][ T5621] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 213.078946][ T5621] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #11: comm syz-executor: directory missing '.' [ 213.186706][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.215551][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.266854][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.296754][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.311198][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.347252][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.528561][ T5761] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 213.560424][ T7878] loop4: detected capacity change from 0 to 1024 [ 213.608871][ T7878] EXT4-fs: Ignoring removed oldalloc option [ 213.656909][ T7878] EXT4-fs: Ignoring removed bh option [ 213.705978][ T7880] loop3: detected capacity change from 0 to 1024 [ 213.715675][ T5761] usb 2-1: Using ep0 maxpacket: 32 [ 213.723527][ T7880] EXT4-fs: Ignoring removed bh option [ 213.736907][ T5761] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.747470][ T7878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 213.760075][ T5761] usb 2-1: config 0 has no interface number 0 [ 213.766910][ T7878] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.779705][ T5761] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.797587][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.812054][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.842063][ T5761] usb 2-1: Product: syz [ 213.876783][ T5761] usb 2-1: Manufacturer: syz [ 213.900674][ T7886] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.654: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.907332][ T5761] usb 2-1: SerialNumber: syz [ 213.927526][ T7886] EXT4-fs (loop4): Remounting filesystem read-only [ 213.938874][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.969668][ T5761] usb 2-1: config 0 descriptor?? [ 213.991545][ T7719] hsr_slave_0: entered promiscuous mode [ 214.014865][ T5761] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 214.026917][ T7719] hsr_slave_1: entered promiscuous mode [ 214.033322][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 214.040809][ T7719] Cannot create hsr debugfs directory [ 214.184236][ T37] bridge_slave_1: left allmulticast mode [ 214.213993][ T37] bridge_slave_1: left promiscuous mode [ 214.239391][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.242600][ T5761] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.321135][ T5761] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.347073][ T37] bridge_slave_0: left allmulticast mode [ 214.367356][ T37] bridge_slave_0: left promiscuous mode [ 214.397731][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.470933][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.540726][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.729805][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.811761][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.813131][ T186] usb 2-1: USB disconnect, device number 6 [ 214.877153][ T186] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 214.931898][ T186] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 214.997221][ T186] quatech2 2-1:0.51: device disconnected [ 215.022170][ T7899] fuse: Bad value for 'user_id' [ 215.044030][ T7899] fuse: Bad value for 'user_id' [ 215.079933][ T7903] loop0: detected capacity change from 0 to 164 [ 215.160368][ T7903] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 216.181248][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.194646][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.215326][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.241995][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.258570][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.429502][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.464291][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 216.487428][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.522683][ T37] bond0 (unregistering): Released all slaves [ 216.849451][ T7939] loop4: detected capacity change from 0 to 512 [ 216.930404][ T7936] xt_CT: No such helper "netbios-ns" [ 216.936736][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.307497][ T7949] loop3: detected capacity change from 0 to 164 [ 217.398601][ T7949] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 217.409051][ T7954] fuse: Bad value for 'fd' [ 217.952668][ T37] hsr_slave_0: left promiscuous mode [ 217.974231][ T37] hsr_slave_1: left promiscuous mode [ 218.190086][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.198301][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.208218][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.367751][ T5645] Bluetooth: hci0: command tx timeout [ 218.891183][ T37] veth1_macvtap: left promiscuous mode [ 218.908858][ T37] veth0_macvtap: left promiscuous mode [ 218.917787][ T37] veth1_vlan: left promiscuous mode [ 218.923885][ T37] veth0_vlan: left promiscuous mode [ 219.438877][ T7993] loop1: detected capacity change from 0 to 512 [ 219.671125][ T37] team0 (unregistering): Port device team_slave_1 removed [ 219.732681][ T37] team0 (unregistering): Port device team_slave_0 removed [ 220.045024][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 220.162787][ T8003] fuse: Bad value for 'fd' [ 220.446885][ T5645] Bluetooth: hci0: command tx timeout [ 221.882645][ T8036] loop3: detected capacity change from 0 to 512 [ 222.189078][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.273117][ T8040] xt_CT: No such helper "netbios-ns" [ 222.283645][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 222.333362][ T8052] fuse: Bad value for 'fd' [ 222.406843][ T7719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.431525][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.502718][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.524424][ T5645] Bluetooth: hci0: command tx timeout [ 222.588968][ T7719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.607524][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.621836][ T7719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.658056][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.736461][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.743989][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.751773][ T7912] bridge_slave_0: entered allmulticast mode [ 222.768266][ T7912] bridge_slave_0: entered promiscuous mode [ 222.782787][ T7719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.835264][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.885632][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.906523][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.913851][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.921719][ T7912] bridge_slave_1: entered allmulticast mode [ 222.940782][ T7912] bridge_slave_1: entered promiscuous mode [ 223.065322][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.127840][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.288417][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.468956][ T7912] team0: Port device team_slave_0 added [ 223.633505][ T7912] team0: Port device team_slave_1 added [ 223.870457][ T8065] loop0: detected capacity change from 0 to 40427 [ 223.878832][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.898235][ T8065] f2fs: Bad value for 'resgid' [ 223.909064][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.925071][ T8065] f2fs: Bad value for 'resgid' [ 224.005277][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.071135][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.081762][ T8093] loop4: detected capacity change from 0 to 512 [ 224.096357][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.209357][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.595943][ T8106] fuse: Bad value for 'fd' [ 224.615668][ T5645] Bluetooth: hci0: command tx timeout [ 224.709182][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 224.836208][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 224.952843][ T7912] hsr_slave_0: entered promiscuous mode [ 224.961173][ T7912] hsr_slave_1: entered promiscuous mode [ 224.968615][ T7912] debugfs: 'hsr0' already exists in 'hsr' [ 224.975855][ T7912] Cannot create hsr debugfs directory [ 225.014335][ T5743] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 225.068346][ T37] bridge_slave_1: left allmulticast mode [ 225.088368][ T37] bridge_slave_1: left promiscuous mode [ 225.112357][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.166792][ T37] bridge_slave_0: left allmulticast mode [ 225.184762][ T5743] usb 2-1: Using ep0 maxpacket: 32 [ 225.191717][ T37] bridge_slave_0: left promiscuous mode [ 225.206229][ T5743] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 225.218540][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.233134][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 225.241961][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.258994][ T5743] usb 2-1: config 0 has no interface number 0 [ 225.274895][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.008772][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.024413][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.048464][ T8130] xt_CT: No such helper "netbios-ns" [ 226.050116][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.080209][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.100831][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.138427][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.209519][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.238892][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.284064][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.293076][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.304488][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.307871][ T8138] loop3: detected capacity change from 0 to 512 [ 226.341001][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.379803][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.388237][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.407756][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.429654][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.449276][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.464358][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.504713][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.530424][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.558644][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.581606][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.599175][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.605785][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.627945][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 226.636258][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.659242][ T5743] usb 2-1: config 0 has no interface number 0 [ 226.669255][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.684939][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.709398][ T5743] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 226.722272][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.730897][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.747260][ T37] bond0 (unregistering): Released all slaves [ 226.753421][ T5743] usb 2-1: Product: syz [ 226.759506][ T5743] usb 2-1: Manufacturer: syz [ 226.769308][ T5743] usb 2-1: SerialNumber: syz [ 226.786581][ T5743] usb 2-1: config 0 descriptor?? [ 226.800456][ T5743] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 226.930114][ T8153] fuse: Bad value for 'fd' [ 227.160693][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 227.390179][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.426831][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.477313][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 227.530706][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.556928][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.772430][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.848634][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.878512][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.019225][ T37] hsr_slave_0: left promiscuous mode [ 228.040192][ T37] hsr_slave_1: left promiscuous mode [ 228.066529][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.083621][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.206451][ T37] veth1_macvtap: left promiscuous mode [ 228.222333][ T37] veth0_macvtap: left promiscuous mode [ 228.236510][ T37] veth1_vlan: left promiscuous mode [ 228.262273][ T37] veth0_vlan: left promiscuous mode [ 228.399917][ T8192] fuse: Bad value for 'fd' [ 228.742621][ T8199] netlink: 292 bytes leftover after parsing attributes in process `syz.3.737'. [ 228.759011][ T8199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.737'. [ 229.144123][ T37] team0 (unregistering): Port device team_slave_1 removed [ 229.169767][ T37] team0 (unregistering): Port device team_slave_0 removed [ 229.497336][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.642369][ T8206] loop4: detected capacity change from 0 to 512 [ 229.712816][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.720096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.740270][ T8206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.832938][ T8206] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.853185][ T5788] usb 2-1: USB disconnect, device number 7 [ 229.901222][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.908448][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.021669][ T7912] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 230.116338][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.131052][ T7912] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 230.165189][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.179276][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.222155][ T7912] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 230.252912][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.309072][ T7912] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 230.363165][ T8221] fuse: Invalid rootmode [ 230.370077][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.617706][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.632294][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.655992][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.669760][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.680001][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.712710][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.419405][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.681334][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.805127][ T760] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.812341][ T760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.989244][ T760] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.996505][ T760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.041359][ T5743] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.078285][ T8260] tipc: Started in network mode [ 232.096189][ T8260] tipc: Node identity 2d64d9abf416fd83002e, cluster identity 4711 [ 232.216921][ T5743] usb 2-1: Using ep0 maxpacket: 32 [ 232.255146][ T5743] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 232.307245][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 232.357894][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.404346][ T5743] usb 2-1: config 0 has no interface number 0 [ 232.433429][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.512310][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 232.548403][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.606900][ T5743] usb 2-1: config 0 has no interface number 0 [ 232.647757][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.728960][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 232.764288][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.778279][ T5645] Bluetooth: hci3: command tx timeout [ 232.839596][ T5743] usb 2-1: config 0 has no interface number 0 [ 232.892417][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.915191][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.951052][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 232.953096][ T8279] fuse: Invalid rootmode [ 232.983029][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.026985][ T5743] usb 2-1: config 0 has no interface number 0 [ 233.070489][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.112234][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.144185][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.168035][ T5743] usb 2-1: config 0 has no interface number 0 [ 233.176968][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.192310][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.201117][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.213425][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.248164][ T5743] usb 2-1: config 0 has no interface number 0 [ 233.269398][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.320991][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.354677][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.385212][ T5743] usb 2-1: config 0 has no interface number 0 [ 233.407416][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.445280][ T5743] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.453435][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.492306][ T5743] usb 2-1: config 0 has no interface number 0 [ 233.511119][ T5743] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.557249][ T5743] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 233.570778][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.594912][ T5743] usb 2-1: Product: syz [ 233.606067][ T5743] usb 2-1: Manufacturer: syz [ 233.607967][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.622795][ T5743] usb 2-1: SerialNumber: syz [ 233.648853][ T5743] usb 2-1: config 0 descriptor?? [ 233.692944][ T5743] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 233.766566][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.248841][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.290197][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.353449][ T37] bridge_slave_1: left allmulticast mode [ 234.385513][ T37] bridge_slave_1: left promiscuous mode [ 234.409304][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.450996][ T37] bridge_slave_0: left allmulticast mode [ 234.479573][ T37] bridge_slave_0: left promiscuous mode [ 234.501731][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.740370][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.804151][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.859982][ T5645] Bluetooth: hci3: command tx timeout [ 234.964293][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.979124][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.994972][ T37] bond0 (unregistering): Released all slaves [ 235.046147][ T8323] tipc: Cannot configure node identity twice [ 236.923678][ T5645] Bluetooth: hci3: command tx timeout [ 237.199042][ T5752] usb 2-1: USB disconnect, device number 8 [ 237.453153][ T8351] fuse: Invalid rootmode [ 237.725565][ T8361] loop3: detected capacity change from 0 to 512 [ 237.745444][ T8361] EXT4-fs: Ignoring removed bh option [ 237.775890][ T8361] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 237.809649][ T37] hsr_slave_0: left promiscuous mode [ 237.827802][ T8361] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 237.855313][ T37] hsr_slave_1: left promiscuous mode [ 237.868306][ T8361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 237.882291][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.924273][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.942594][ T8361] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 238.000601][ T8361] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 238.026704][ T37] veth1_macvtap: left promiscuous mode [ 238.048817][ T37] veth0_macvtap: left promiscuous mode [ 238.065338][ T8361] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.769: Failed to acquire dquot type 1 [ 238.088831][ T37] veth1_vlan: left promiscuous mode [ 238.112905][ T37] veth0_vlan: left promiscuous mode [ 238.130460][ T8361] loop3: lost filesystem error report for type 5 error -5 [ 238.131272][ T8361] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.769: Invalid block bitmap block 0 in block_group 0 [ 238.138501][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 238.138525][ C0] EXT4-fs (loop3): last error at time 1785871635: ext4_acquire_dquot:7041 [ 238.207555][ T8361] loop3: lost filesystem error report for type 5 error -117 [ 238.212368][ T8361] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.769: Invalid block bitmap block 0 in block_group 0 [ 238.335047][ T8361] loop3: lost filesystem error report for type 5 error -117 [ 238.335477][ T8361] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.769: Invalid block bitmap block 0 in block_group 0 [ 238.388242][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 238.419387][ T8361] loop3: lost filesystem error report for type 5 error -117 [ 238.423295][ T8361] Quota error (device loop3): write_blk: dquota write failed [ 238.487526][ T8361] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 238.522764][ T8361] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.769: Failed to acquire dquot type 1 [ 238.549438][ T8361] loop3: lost filesystem error report for type 5 error -28 [ 238.550127][ T8361] Quota error (device loop3): write_blk: dquota write failed [ 238.604254][ T8361] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 238.614536][ T8361] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.769: Failed to acquire dquot type 1 [ 238.644970][ T8361] loop3: lost filesystem error report for type 5 error -28 [ 238.645551][ T8361] EXT4-fs (loop3): 1 orphan inode deleted [ 238.730487][ T8361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.849686][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.987878][ T37] team0 (unregistering): Port device team_slave_1 removed [ 239.003601][ T5645] Bluetooth: hci3: command tx timeout [ 239.026434][ T37] team0 (unregistering): Port device team_slave_0 removed [ 239.251837][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.269596][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.300131][ T8235] bridge_slave_0: entered allmulticast mode [ 239.331798][ T8235] bridge_slave_0: entered promiscuous mode [ 239.360632][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.368118][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.376094][ T8235] bridge_slave_1: entered allmulticast mode [ 239.386025][ T8235] bridge_slave_1: entered promiscuous mode [ 239.421156][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 239.429146][ T8374] tipc: Started in network mode [ 239.439487][ T8374] tipc: Node identity 2d64d9abf416fd83002e, cluster identity 4711 [ 239.485023][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.866652][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.950166][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.295805][ T7719] veth0_vlan: entered promiscuous mode [ 240.358872][ T8235] team0: Port device team_slave_0 added [ 240.399309][ T8235] team0: Port device team_slave_1 added [ 240.599409][ T7719] veth1_vlan: entered promiscuous mode [ 240.778695][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.819517][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.898970][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.911812][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.918799][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.951732][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.168478][ T8235] hsr_slave_0: entered promiscuous mode [ 241.184577][ T8235] hsr_slave_1: entered promiscuous mode [ 241.199172][ T8235] debugfs: 'hsr0' already exists in 'hsr' [ 241.223344][ T8235] Cannot create hsr debugfs directory [ 241.522579][ T7719] veth0_macvtap: entered promiscuous mode [ 241.529503][ T8419] sctp: [Deprecated]: syz.4.785 (pid 8419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.529503][ T8419] Use struct sctp_sack_info instead [ 241.640215][ T7719] veth1_macvtap: entered promiscuous mode [ 241.988464][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.057183][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.116971][ T7912] veth0_vlan: entered promiscuous mode [ 242.197573][ T7912] veth1_vlan: entered promiscuous mode [ 242.300463][ T193] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.324829][ T193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.368424][ T1155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.398646][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 242.757567][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.799383][ T8435] tipc: Started in network mode [ 242.804597][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.814454][ T8435] tipc: Node identity 2d64d9abf416fd83002e, cluster identity 4711 [ 242.885901][ T7912] veth0_macvtap: entered promiscuous mode [ 242.957182][ T7912] veth1_macvtap: entered promiscuous mode [ 243.014281][ T5903] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.047321][ T8235] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 243.091091][ T8235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.112219][ T8235] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 243.140312][ T8235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.172245][ T8235] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.179995][ T7348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.212905][ T8235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.215096][ T7348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.260810][ T8235] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.343103][ T8235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.482083][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.521718][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.870987][ T8454] netlink: 48 bytes leftover after parsing attributes in process `syz.6.604'. [ 244.386864][ T1155] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.406538][ T1155] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.417667][ T1155] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.543703][ T7348] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.810630][ T7348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.859585][ T7348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.057525][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.088134][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.110029][ T8474] tipc: Cannot configure node identity twice [ 245.179060][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.277569][ T8235] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.336905][ T760] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.344143][ T760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.674841][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.682043][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.716207][ T8235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.726635][ T8235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.856795][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 247.000695][ T8517] loop1: detected capacity change from 0 to 256 [ 247.078632][ T31] audit: type=1800 audit(1785871644.750:79): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 247.140716][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.148350][ T31] audit: type=1800 audit(1785871644.780:80): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 247.261812][ T8517] FAT-fs (loop1): Filesystem has been set read-only [ 247.347341][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.388406][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.426531][ T8524] tipc: Started in network mode [ 247.434543][ T8524] tipc: Node identity 2d64d9abf416fd83002e, cluster identity 4711 [ 247.526053][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.591611][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.647340][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.694302][ T8532] program syz.4.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.719118][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.788299][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 247.843645][ T8517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 249.400911][ T8554] loop1: detected capacity change from 0 to 1764 [ 249.678245][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.821'. [ 249.847010][ T8570] tipc: Cannot configure node identity twice [ 249.905518][ T8235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.920613][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 250.271949][ T8585] cgroup: Need name or subsystem set [ 250.447597][ T8587] tipc: New replicast peer: 255.255.255.255 [ 250.476633][ T8587] tipc: Enabled bearer , priority 10 [ 251.126594][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'. [ 251.189436][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 252.402000][ T5916] tipc: Node number set to 3646694440 [ 252.993955][ T193] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.163331][ T8235] veth0_vlan: entered promiscuous mode [ 253.241137][ T193] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.276713][ T8235] veth1_vlan: entered promiscuous mode [ 253.382315][ T193] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.602051][ T193] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.661545][ T8235] veth0_macvtap: entered promiscuous mode [ 253.858227][ T8235] veth1_macvtap: entered promiscuous mode [ 253.921116][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.936868][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.946964][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.961179][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.973418][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.049270][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.084542][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 254.183731][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.281110][ T193] bridge_slave_1: left allmulticast mode [ 254.311449][ T193] bridge_slave_1: left promiscuous mode [ 254.344531][ T193] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.427433][ T193] bridge_slave_0: left allmulticast mode [ 254.462724][ T193] bridge_slave_0: left promiscuous mode [ 254.482289][ T193] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.725606][ T5743] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.939162][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.946304][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.974551][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.998795][ T5743] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.036879][ T5743] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 255.094031][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.128218][ T5743] usb 2-1: config 0 descriptor?? [ 255.310927][ T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.372372][ T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.418133][ T193] bond0 (unregistering): Released all slaves [ 255.475147][ T8677] tipc: Cannot configure node identity twice [ 255.522509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.598857][ T5743] ath6kl: Unsupported hardware version: 0x0 [ 255.644449][ T5743] ath6kl: Failed to init ath6kl core: -22 [ 255.747950][ T5743] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 255.757923][ T193] tipc: Disabling bearer [ 255.799077][ T193] tipc: Left network mode [ 255.806462][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.816521][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.894682][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.933093][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.954744][ T7344] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.994559][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.044445][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.044518][ T5644] Bluetooth: hci0: command tx timeout [ 256.109699][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.165688][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.217780][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.276101][ T5760] usb 2-1: USB disconnect, device number 9 [ 256.297219][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.346330][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.463739][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.488590][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.655251][ T193] hsr_slave_0: left promiscuous mode [ 256.670459][ T193] hsr_slave_1: left promiscuous mode [ 256.698558][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.735748][ T193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.770353][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.786010][ T193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.868211][ T193] veth1_macvtap: left promiscuous mode [ 256.880517][ T193] veth0_macvtap: left promiscuous mode [ 256.903405][ T193] veth1_vlan: left promiscuous mode [ 256.939194][ T193] veth0_vlan: left promiscuous mode [ 257.752171][ T193] team0 (unregistering): Port device team_slave_1 removed [ 257.775346][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 257.785193][ T193] team0 (unregistering): Port device team_slave_0 removed [ 257.914565][ T31] audit: type=1326 audit(1785871655.580:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8723 comm="syz.3.864" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 258.013821][ T31] audit: type=1326 audit(1785871655.580:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8723 comm="syz.3.864" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 258.081316][ T8729] fuse: fd is not a fuse device [ 258.088996][ T31] audit: type=1326 audit(1785871655.590:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8723 comm="syz.3.864" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 258.123447][ T5644] Bluetooth: hci0: command tx timeout [ 258.193163][ T31] audit: type=1326 audit(1785871655.590:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8723 comm="syz.3.864" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 258.266190][ T31] audit: type=1326 audit(1785871655.590:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8723 comm="syz.3.864" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29f99e019 code=0x7ffc0000 [ 258.495308][ T7348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.534101][ T7348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.601348][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 259.675119][ T8774] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 260.202323][ T5644] Bluetooth: hci0: command tx timeout [ 260.380391][ T8795] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 260.398451][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.409489][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.423780][ T8653] bridge_slave_0: entered allmulticast mode [ 260.447673][ T8653] bridge_slave_0: entered promiscuous mode [ 260.473630][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.483024][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.494507][ T8653] bridge_slave_1: entered allmulticast mode [ 260.502773][ T8653] bridge_slave_1: entered promiscuous mode [ 260.728645][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.742759][ T8797] loop8: detected capacity change from 0 to 512 [ 260.820548][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.939075][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 261.138897][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 261.175684][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.889'. [ 261.190071][ T8653] team0: Port device team_slave_0 added [ 261.237133][ T8653] team0: Port device team_slave_1 added [ 261.601013][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.618530][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.698759][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.823991][ T8823] loop3: detected capacity change from 0 to 1024 [ 261.916348][ T8823] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 261.958134][ T8823] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 261.984419][ T8823] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 262.014214][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.034621][ T8823] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.894: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 262.057601][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.072777][ T8823] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 262.125017][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.152088][ T8823] EXT4-fs (loop3): no journal found [ 262.152156][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 262.163830][ C0] EXT4-fs (loop3): initial error at time 1785871659: ext4_ext_check_inode:521: inode 3 [ 262.173538][ C0] EXT4-fs (loop3): last error at time 1785871659: ext4_ext_check_inode:521: inode 3 [ 262.187057][ T8823] EXT4-fs (loop3): can't get journal size [ 262.194571][ T8836] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 262.204835][ T8823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.282534][ T5644] Bluetooth: hci0: command tx timeout [ 262.532485][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.560484][ T8653] hsr_slave_0: entered promiscuous mode [ 262.584540][ T8653] hsr_slave_1: entered promiscuous mode [ 262.603721][ T8653] debugfs: 'hsr0' already exists in 'hsr' [ 262.634972][ T8653] Cannot create hsr debugfs directory [ 262.810470][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 263.093275][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.3.904'. [ 263.374385][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 263.448235][ T8874] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 263.769659][ T8883] loop3: detected capacity change from 0 to 512 [ 263.813800][ T8883] EXT4-fs: Ignoring removed bh option [ 263.867197][ T8883] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 263.927585][ T8883] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 263.944143][ T8883] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.000688][ T8883] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 264.096074][ T8883] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 264.124014][ T8653] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 264.134046][ T8883] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.910: Failed to acquire dquot type 1 [ 264.190478][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.221792][ T8883] loop3: lost filesystem error report for type 5 error -5 [ 264.222027][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 264.232215][ T8653] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 264.236029][ C1] EXT4-fs (loop3): last error at time 1785871661: ext4_acquire_dquot:7041 [ 264.303159][ T8883] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.910: Invalid block bitmap block 0 in block_group 0 [ 264.332079][ T8883] loop3: lost filesystem error report for type 5 error -117 [ 264.337685][ T8883] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.910: Invalid block bitmap block 0 in block_group 0 [ 264.369818][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.405697][ T8653] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 264.425974][ T8883] loop3: lost filesystem error report for type 5 error -117 [ 264.429399][ T8883] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.910: Invalid block bitmap block 0 in block_group 0 [ 264.456335][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.489361][ T8653] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 264.525303][ T8883] loop3: lost filesystem error report for type 5 error -117 [ 264.525945][ T8883] Quota error (device loop3): write_blk: dquota write failed [ 264.562410][ T8883] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 264.576265][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.615879][ T8883] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.910: Failed to acquire dquot type 1 [ 264.656607][ T8883] loop3: lost filesystem error report for type 5 error -28 [ 264.660921][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 264.679142][ T8883] Quota error (device loop3): write_blk: dquota write failed [ 264.713260][ T8883] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 264.762900][ T8883] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.910: Failed to acquire dquot type 1 [ 264.815585][ T8883] loop3: lost filesystem error report for type 5 error -28 [ 264.817459][ T8883] EXT4-fs (loop3): 1 orphan inode deleted [ 264.879022][ T8883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.037949][ T8921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.919'. [ 265.060159][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.101861][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.154539][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.209637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.216861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.309390][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 265.347745][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.355018][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.449322][ T8934] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 265.480491][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 265.986331][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 266.288616][ T8967] random: crng reseeded on system resumption [ 266.290748][ T8970] netlink: 52 bytes leftover after parsing attributes in process `syz.6.934'. [ 266.670617][ T8985] loop3: detected capacity change from 0 to 764 [ 267.261464][ T9003] loop3: detected capacity change from 0 to 1764 [ 267.539433][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.277460][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.6.952'. [ 269.025429][ T8653] veth0_vlan: entered promiscuous mode [ 269.073277][ T8653] veth1_vlan: entered promiscuous mode [ 269.083385][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 269.237912][ T8653] veth0_macvtap: entered promiscuous mode [ 269.290461][ T8653] veth1_macvtap: entered promiscuous mode [ 269.390244][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.464942][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.508353][ T9080] ALSA: mixer_oss: invalid OSS volume '' [ 269.527612][ T9080] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 269.549749][ T9080] ALSA: mixer_oss: invalid OSS volume '' [ 269.654535][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.733535][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.910423][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.945119][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.992529][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.029066][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.178193][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.977'. [ 270.208189][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.248111][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.611953][ T9119] loop4: detected capacity change from 0 to 512 [ 270.726410][ T9122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.982'. [ 270.739475][ T9123] netlink: 'syz.9.846': attribute type 39 has an invalid length. [ 270.777209][ T9122] netlink: 72 bytes leftover after parsing attributes in process `syz.1.982'. [ 270.821983][ T9125] ALSA: mixer_oss: invalid OSS volume '' [ 270.845289][ T9125] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 270.884230][ T9125] ALSA: mixer_oss: invalid OSS volume '' [ 271.330025][ T9138] process 'syz.8.987' launched './file1' with NULL argv: empty string added [ 271.385190][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 271.387280][ T9141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.402085][ T9141] IPv6: NLM_F_CREATE should be set when creating new route [ 271.569545][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 271.886322][ T9159] loop3: detected capacity change from 0 to 512 [ 272.083845][ T9165] ALSA: mixer_oss: invalid OSS volume '' [ 272.119321][ T9165] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 272.168910][ T9165] ALSA: mixer_oss: invalid OSS volume '' [ 272.503443][ T31] audit: type=1326 audit(1785871670.131:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.382751][ T9186] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1005'. [ 273.454568][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 273.471533][ T31] audit: type=1326 audit(1785871670.131:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.532220][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 273.550532][ T31] audit: type=1326 audit(1785871670.131:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.679258][ T31] audit: type=1326 audit(1785871670.131:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.729499][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 273.769278][ T31] audit: type=1326 audit(1785871670.131:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.856292][ T31] audit: type=1326 audit(1785871670.141:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.965551][ T31] audit: type=1326 audit(1785871670.141:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 273.992184][ T9203] loop8: detected capacity change from 0 to 512 [ 274.110146][ T31] audit: type=1326 audit(1785871670.141:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 274.876552][ T31] audit: type=1326 audit(1785871670.141:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 274.902313][ T31] audit: type=1326 audit(1785871670.141:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.4.1003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7effa0f9e019 code=0x7ffc0000 [ 275.188091][ T9222] ALSA: mixer_oss: invalid OSS volume '' [ 275.221685][ T9222] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 275.269999][ T9222] ALSA: mixer_oss: invalid OSS volume '' [ 276.526528][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1026'. [ 276.547701][ T9251] loop4: detected capacity change from 0 to 512 [ 276.633944][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1029'. [ 278.318599][ T9286] loop9: detected capacity change from 0 to 512 [ 280.970309][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 281.058466][ T9340] loop3: detected capacity change from 0 to 512 [ 283.360498][ T9391] loop1: detected capacity change from 0 to 764 [ 283.410262][ T9391] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 284.790725][ T30] IPVS: starting estimator thread 0... [ 284.930938][ T9418] IPVS: using max 24 ests per chain, 57600 per kthread [ 284.932598][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 285.755681][ T9423] xt_CT: No such helper "netbios-ns" [ 285.954208][ T9433] loop4: detected capacity change from 0 to 1024 [ 285.983261][ T9433] EXT4-fs: Ignoring removed bh option [ 286.061900][ T9435] loop1: detected capacity change from 0 to 512 [ 286.069255][ T9433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.438894][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.479979][ T9479] xt_CT: No such helper "netbios-ns" [ 288.934114][ T9493] loop9: detected capacity change from 0 to 1024 [ 289.039338][ T9493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 289.066246][ T9498] loop1: detected capacity change from 0 to 512 [ 289.088771][ T9493] System zones: 0-1, 3-12 [ 289.166421][ T9493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.534857][ T9518] loop1: detected capacity change from 0 to 1024 [ 289.622744][ T9518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.643733][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1118'. [ 289.938042][ T8653] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.965770][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 289.986419][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.281473][ T9550] xt_CT: No such helper "netbios-ns" [ 291.289784][ T9555] loop8: detected capacity change from 0 to 512 [ 291.314972][ T9553] loop1: detected capacity change from 0 to 1024 [ 291.344383][ T9557] loop3: detected capacity change from 0 to 512 [ 291.421901][ T9557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.521621][ T9553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.580102][ T9566] loop9: detected capacity change from 0 to 1024 [ 291.591764][ T9557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.602616][ T9566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.614278][ T9566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 291.629303][ T9557] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.639919][ T9566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 291.640036][ T9566] System zones: 0-1, 3-36 [ 291.674013][ T9553] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1129: missing EA_INODE flag [ 291.708661][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1134'. [ 291.722014][ T9566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.782909][ T9553] EXT4-fs (loop1): Remounting filesystem read-only [ 291.803878][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.852757][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.870755][ T9557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1130: bg 0: block 217: padding at end of block bitmap is not set [ 291.904772][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.927998][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.935350][ T9557] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 292.015804][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.206918][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.267716][ T9581] capability: warning: `syz.8.1138' uses 32-bit capabilities (legacy support in use) [ 292.289463][ T8653] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.439553][ T9590] loop8: detected capacity change from 0 to 1024 [ 293.516513][ T9590] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.548198][ T9590] EXT4-fs: Ignoring removed oldalloc option [ 293.640928][ T9590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 293.865338][ T9590] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.395514][ T9607] xt_CT: No such helper "netbios-ns" [ 294.624995][ T9616] loop1: detected capacity change from 0 to 512 [ 294.664185][ T8235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 294.969929][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 295.163785][ T9630] geneve2: entered allmulticast mode [ 295.175805][ T9632] loop8: detected capacity change from 0 to 512 [ 295.209419][ T9632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.235580][ T9632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.291749][ T9632] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 295.384407][ T9632] EXT4-fs (loop8): 1 truncate cleaned up [ 295.520972][ T9632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.478174][ T8235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.056058][ T9669] xt_CT: No such helper "netbios-ns" [ 297.139411][ T9678] loop1: detected capacity change from 0 to 512 [ 297.245292][ T9683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 297.857285][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1172'. [ 298.778998][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 298.848656][ T9709] loop8: detected capacity change from 0 to 512 [ 298.955459][ T9709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.011311][ T9709] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.112872][ T8235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.359102][ T9727] loop8: detected capacity change from 0 to 128 [ 299.413709][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.464042][ T9727] FAT-fs (loop8): Filesystem has been set read-only [ 299.495053][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.530353][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.576442][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.610301][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.642912][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.667073][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.707691][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.744214][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.778433][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.818300][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.856464][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.891678][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.938360][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 299.985978][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.024772][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.064504][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.103585][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.121459][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.158691][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.214574][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.235241][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.280054][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.316797][ T9727] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 300.358659][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 300.358679][ T31] audit: type=1800 audit(1785871698.033:100): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1181" name="file1" dev="loop8" ino=1048644 res=0 errno=0 [ 301.304806][ T9762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.968067][ T9787] tipc: Trying to set illegal importance in message [ 302.130430][ T12] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.161429][ T12] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.221964][ T5938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.265730][ T5938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.295174][ T5938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.340230][ T193] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.396162][ T193] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.421292][ T193] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.456040][ T9803] sctp: [Deprecated]: syz.4.1206 (pid 9803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.456040][ T9803] Use struct sctp_sack_info instead [ 302.466225][ T193] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.544753][ T193] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.573964][ T193] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.608820][ T193] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.634400][ T193] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.663195][ T193] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.703568][ T7348] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.749598][ T7348] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.978333][ T9819] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 303.636523][ T9844] loop3: detected capacity change from 0 to 1024 [ 303.648192][ T9844] EXT4-fs: Ignoring removed bh option [ 303.704597][ T9844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.744309][ T9855] sctp: [Deprecated]: syz.9.1223 (pid 9855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.744309][ T9855] Use struct sctp_sack_info instead [ 303.832712][ T31] audit: type=1804 audit(1785871701.503:101): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1221" name="/newroot/228/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 304.090964][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.484349][ T9868] syzkaller0: entered promiscuous mode [ 304.512846][ T9868] syzkaller0: entered allmulticast mode [ 304.584105][ T9868] tipc: Enabled bearer , priority 0 [ 304.623914][ T9868] tipc: Resetting bearer [ 304.691435][ T9867] tipc: Resetting bearer [ 304.853711][ T9867] tipc: Disabling bearer [ 305.138670][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1236'. [ 305.312435][ T9900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.581386][ T9913] sctp: [Deprecated]: syz.8.1244 (pid 9913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.581386][ T9913] Use struct sctp_sack_info instead [ 305.932304][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1248'. [ 306.416056][ T9939] loop1: detected capacity change from 0 to 512 [ 306.466602][ T9939] EXT4-fs (loop1): Test dummy encryption mode enabled [ 306.513822][ T9941] loop4: detected capacity change from 0 to 764 [ 306.530949][ T9939] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1253: corrupted in-inode xattr: invalid ea_ino [ 306.616424][ T9941] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 306.619287][ T9939] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.629622][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 306.645222][ C1] EXT4-fs (loop1): initial error at time 1785871704: ext4_iget_extra_inode:5180: inode 15 [ 306.653255][ T9939] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1253: couldn't read orphan inode 15 (err -117) [ 306.655203][ C1] EXT4-fs (loop1): last error at time 1785871704: ext4_iget_extra_inode:5180: inode 15 [ 306.689547][ T9939] loop1: lost filesystem error report for type 5 error -117 [ 306.762297][ T9939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.734194][ T9965] xt_CT: No such helper "netbios-ns" [ 307.807091][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.914265][ T9977] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.117465][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1267'. [ 308.204201][ T9986] sctp: [Deprecated]: syz.9.1268 (pid 9986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.204201][ T9986] Use struct sctp_sack_info instead [ 308.698797][ T9997] tipc: Enabled bearer , priority 0 [ 308.794854][ T9997] syzkaller0: entered promiscuous mode [ 308.811672][ T9997] syzkaller0: entered allmulticast mode [ 308.849286][ T9997] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 309.002891][T10010] tipc: Resetting bearer [ 309.112583][ T9995] tipc: Resetting bearer [ 309.270026][ T9995] tipc: Disabling bearer [ 309.504293][T10025] loop9: detected capacity change from 0 to 512 [ 309.521024][T10024] ------------[ cut here ]------------ [ 309.528024][T10024] len > ((int)(~0U >> 1)) [ 309.528040][T10024] WARNING: ./include/linux/skbuff.h:2864 at ipgre_xmit+0x958/0xcd0, CPU#0: syz.8.1279/10024 [ 309.542520][T10024] Modules linked in: [ 309.546547][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.8.1279 Not tainted syzkaller #0 PREEMPT(full) [ 309.555969][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 309.566059][T10024] RIP: 0010:ipgre_xmit+0x958/0xcd0 [ 309.569812][T10025] EXT4-fs (loop9): Test dummy encryption mode enabled [ 309.571202][T10024] Code: 48 3b 84 24 80 00 00 00 0f 85 3b 01 00 00 31 c0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 aa 23 b4 f6 cc e8 09 f5 6a f7 90 <0f> 0b 90 e9 08 f8 ff ff 44 89 ff 44 89 e6 e8 b5 f6 6a f7 45 39 e7 [ 309.597589][T10024] RSP: 0018:ffffc9000dd9f5e0 EFLAGS: 00010287 [ 309.603706][T10024] RAX: ffffffff8a5c1d67 RBX: 0000000000000000 RCX: 0000000000080000 [ 309.611715][T10024] RDX: ffffc90012541000 RSI: 00000000000000c2 RDI: 00000000000000c3 [ 309.619728][T10024] RBP: ffffc9000dd9f6b0 R08: ffff8880681f1f00 R09: 0000000000000002 [ 309.627742][T10024] R10: 0000000000004888 R11: ffffffff8a5c1410 R12: ffff88807d0e0000 [ 309.635810][T10024] R13: dffffc0000000000 R14: ffff888053f4ac80 R15: 00000000ffffff40 [ 309.643853][T10024] FS: 00007f8dcde556c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 309.652905][T10024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.659557][T10024] CR2: 000000110c3f6c6c CR3: 0000000057092000 CR4: 0000000000350ef0 [ 309.667535][T10024] Call Trace: [ 309.670850][T10024] [ 309.673797][T10024] ? __pfx_ipgre_xmit+0x10/0x10 [ 309.678653][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.684325][T10024] ? validate_xmit_xfrm+0x5d/0x1120 [ 309.689582][T10024] ? __dev_direct_xmit+0x33c/0x730 [ 309.694730][T10024] __dev_direct_xmit+0x4b6/0x730 [ 309.699726][T10024] ? __pfx___dev_direct_xmit+0x10/0x10 [ 309.705209][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.710883][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.716535][T10024] ? skb_put+0x112/0x210 [ 309.720821][T10024] xsk_generic_xmit+0x2759/0x47b0 [ 309.725858][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.731541][T10024] ? __lock_acquire+0x683/0x2cf0 [ 309.736530][T10024] ? xsk_generic_xmit+0x107/0x47b0 [ 309.741687][T10024] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 309.747076][T10024] ? xsk_sendmsg+0x29/0x810 [ 309.751618][T10024] xsk_sendmsg+0x482/0x810 [ 309.756040][T10024] ? xsk_sendmsg+0x29/0x810 [ 309.760586][T10024] ? __pfx_xsk_sendmsg+0x10/0x10 [ 309.765536][T10024] sock_sendmsg_nosec+0x13a/0x180 [ 309.770617][T10024] ____sys_sendmsg+0x54e/0x850 [ 309.775403][T10024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.780733][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.786387][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.792091][T10024] ? import_iovec+0x73/0xa0 [ 309.796608][T10024] ___sys_sendmsg+0x2a5/0x360 [ 309.801333][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.806974][T10024] ? __lock_acquire+0x683/0x2cf0 [ 309.811971][T10024] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.817209][T10024] ? futex_wait+0x2a2/0x390 [ 309.821802][T10024] ? __fget_files+0x2a/0x420 [ 309.826408][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.832102][T10024] ? __fget_files+0x3a2/0x420 [ 309.836813][T10024] __x64_sys_sendmsg+0x1b1/0x290 [ 309.841802][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.847455][T10024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.852973][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.858628][T10024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.864743][T10024] do_syscall_64+0x174/0x580 [ 309.869350][T10024] ? trace_irq_disable+0x3b/0x140 [ 309.874444][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.880393][T10024] RIP: 0033:0x7f8dccf9e019 [ 309.884816][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.890542][T10025] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1278: corrupted in-inode xattr: invalid ea_ino [ 309.904463][T10024] RSP: 002b:00007f8dcde55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.904498][T10024] RAX: ffffffffffffffda RBX: 00007f8dcd225fa0 RCX: 00007f8dccf9e019 [ 309.904520][T10024] RDX: 0000000000000040 RSI: 0000200000000700 RDI: 0000000000000003 [ 309.904540][T10024] RBP: 00007f8dcd03500c R08: 0000000000000000 R09: 0000000000000000 [ 309.904559][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.904577][T10024] R13: 00007f8dcd226038 R14: 00007f8dcd225fa0 R15: 00007ffc728ebc28 [ 309.904618][T10024] [ 309.904632][T10024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 309.904651][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.8.1279 Not tainted syzkaller #0 PREEMPT(full) [ 309.904681][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 309.904697][T10024] Call Trace: [ 309.904708][T10024] [ 309.904719][T10024] vpanic+0x56c/0xa60 [ 309.904763][T10024] ? __pfx__printk+0x10/0x10 [ 309.904794][T10024] ? __pfx_vpanic+0x10/0x10 [ 309.904833][T10024] ? is_bpf_text_address+0x292/0x2b0 [ 309.904874][T10024] ? is_bpf_text_address+0x26/0x2b0 [ 309.904931][T10024] panic+0xc5/0xd0 [ 309.904971][T10024] ? __pfx_panic+0x10/0x10 [ 309.905031][T10024] __warn+0x315/0x4c0 [ 309.905054][T10024] ? ipgre_xmit+0x958/0xcd0 [ 309.905083][T10024] ? ipgre_xmit+0x958/0xcd0 [ 309.905107][T10024] __report_bug+0x276/0x570 [ 309.905149][T10024] ? ipgre_xmit+0x958/0xcd0 [ 309.905177][T10024] ? __pfx___report_bug+0x10/0x10 [ 309.905217][T10024] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 309.905253][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.905284][T10024] ? rcu_is_watching+0x15/0xb0 [ 309.905310][T10024] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 309.905344][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.905378][T10024] ? trace_kmem_cache_alloc+0x29/0xe0 [ 309.905409][T10024] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 309.905451][T10024] ? ipgre_xmit+0x958/0xcd0 [ 309.905475][T10024] report_bug+0x16a/0x220 [ 309.905512][T10024] ? ipgre_xmit+0x958/0xcd0 [ 309.905535][T10024] ? ipgre_xmit+0x95a/0xcd0 [ 309.905559][T10024] handle_bug+0x9c/0x200 [ 309.905600][T10024] exc_invalid_op+0x1a/0x50 [ 309.905639][T10024] asm_exc_invalid_op+0x1a/0x20 [ 309.905666][T10024] RIP: 0010:ipgre_xmit+0x958/0xcd0 [ 309.905690][T10024] Code: 48 3b 84 24 80 00 00 00 0f 85 3b 01 00 00 31 c0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 aa 23 b4 f6 cc e8 09 f5 6a f7 90 <0f> 0b 90 e9 08 f8 ff ff 44 89 ff 44 89 e6 e8 b5 f6 6a f7 45 39 e7 [ 309.905712][T10024] RSP: 0018:ffffc9000dd9f5e0 EFLAGS: 00010287 [ 309.905735][T10024] RAX: ffffffff8a5c1d67 RBX: 0000000000000000 RCX: 0000000000080000 [ 309.905754][T10024] RDX: ffffc90012541000 RSI: 00000000000000c2 RDI: 00000000000000c3 [ 309.905772][T10024] RBP: ffffc9000dd9f6b0 R08: ffff8880681f1f00 R09: 0000000000000002 [ 309.905792][T10024] R10: 0000000000004888 R11: ffffffff8a5c1410 R12: ffff88807d0e0000 [ 309.905811][T10024] R13: dffffc0000000000 R14: ffff888053f4ac80 R15: 00000000ffffff40 [ 309.905837][T10024] ? __pfx_ipgre_xmit+0x10/0x10 [ 309.905864][T10024] ? ipgre_xmit+0x957/0xcd0 [ 309.905911][T10024] ? __pfx_ipgre_xmit+0x10/0x10 [ 309.905935][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.905966][T10024] ? validate_xmit_xfrm+0x5d/0x1120 [ 309.906012][T10024] ? __dev_direct_xmit+0x33c/0x730 [ 309.906051][T10024] __dev_direct_xmit+0x4b6/0x730 [ 309.906095][T10024] ? __pfx___dev_direct_xmit+0x10/0x10 [ 309.906136][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.906167][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.906199][T10024] ? skb_put+0x112/0x210 [ 309.906233][T10024] xsk_generic_xmit+0x2759/0x47b0 [ 309.906265][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.906295][T10024] ? __lock_acquire+0x683/0x2cf0 [ 309.906364][T10024] ? xsk_generic_xmit+0x107/0x47b0 [ 309.906398][T10024] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 309.906437][T10024] ? xsk_sendmsg+0x29/0x810 [ 309.906467][T10024] xsk_sendmsg+0x482/0x810 [ 309.906495][T10024] ? xsk_sendmsg+0x29/0x810 [ 309.906526][T10024] ? __pfx_xsk_sendmsg+0x10/0x10 [ 309.906555][T10024] sock_sendmsg_nosec+0x13a/0x180 [ 309.906600][T10024] ____sys_sendmsg+0x54e/0x850 [ 309.906640][T10024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.906677][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.906714][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.906746][T10024] ? import_iovec+0x73/0xa0 [ 309.906778][T10024] ___sys_sendmsg+0x2a5/0x360 [ 309.906810][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.906840][T10024] ? __lock_acquire+0x683/0x2cf0 [ 309.906884][T10024] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.906927][T10024] ? futex_wait+0x2a2/0x390 [ 309.906993][T10024] ? __fget_files+0x2a/0x420 [ 309.907029][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.907059][T10024] ? __fget_files+0x3a2/0x420 [ 309.907110][T10024] __x64_sys_sendmsg+0x1b1/0x290 [ 309.907143][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.907177][T10024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.907221][T10024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.907263][T10024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.907293][T10024] do_syscall_64+0x174/0x580 [ 309.907327][T10024] ? trace_irq_disable+0x3b/0x140 [ 309.907369][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.907396][T10024] RIP: 0033:0x7f8dccf9e019 [ 309.907419][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.907441][T10024] RSP: 002b:00007f8dcde55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.907467][T10024] RAX: ffffffffffffffda RBX: 00007f8dcd225fa0 RCX: 00007f8dccf9e019 [ 309.907487][T10024] RDX: 0000000000000040 RSI: 0000200000000700 RDI: 0000000000000003 [ 309.907505][T10024] RBP: 00007f8dcd03500c R08: 0000000000000000 R09: 0000000000000000 [ 309.907523][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.907539][T10024] R13: 00007f8dcd226038 R14: 00007f8dcd225fa0 R15: 00007ffc728ebc28 [ 309.907580][T10024] [ 309.918175][T10024] Kernel Offset: disabled