last executing test programs: 13m45.184724974s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 13m44.404414542s ago: executing program 2 (id=7): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) write(r1, &(0x7f0000000100)='^', 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write(r2, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) 13m40.656254001s ago: executing program 2 (id=12): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x82, &(0x7f0000000300)=""/92) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffffe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)=@can={{0x3}, 0x4, 0x2, 0x0, 0x0, "648da54743ace21d"}, 0x10}, 0x2, 0x0, 0x0, 0x40000}, 0x0) 13m23.492463292s ago: executing program 32 (id=12): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x82, &(0x7f0000000300)=""/92) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffffe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)=@can={{0x3}, 0x4, 0x2, 0x0, 0x0, "648da54743ace21d"}, 0x10}, 0x2, 0x0, 0x0, 0x40000}, 0x0) 12m3.796465367s ago: executing program 5 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x2, 0x4, 0x1}, {0x40000000020, 0x8, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) 12m2.147253875s ago: executing program 5 (id=208): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000"], 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x40000}}, 0x10) listen(r5, 0x0) request_key(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0) 11m57.648991842s ago: executing program 5 (id=220): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11m55.159171268s ago: executing program 5 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0x12, 0xa6, &(0x7f0000001140)="09c99dc59a759eb1ceb2693d8fce1de776cd80f066da845b8e06ae369476b0a6acd09e0541e0f8cff750d89a17ddf5576b490df6c2d3d5b636974e13eca1d54e1b5ddb5a889b4d50a140251f04a98f7b4d6f3905be0b19ea516a36406a6bcd198086ba0da9eaf39e50e36b5a482e5b202d2e4e677514ec326a9c4adc70a8c8244c9c8cb946777b4c1370306c4814e313dd033a3ce3d5df0f56afc19bee8700627fd5f740fd45d9def68a7ded00e4d95b708dac2f84fbac32d28622a99d069f62125e906008a0976674166cbc0c2b561ab4cf347cb2c89168d80c0fe736eb56cee97ac5eca157d6fbba3cbdd7ab9e6a73d576dc7711a9af289ef4c040fd73d0992eed7fb94c75e772292efe9e10c921d633e422205ec5e8e135d97532dc907f8bcc4fcdbf7c7579bba8cf1a721e66f2976e377b92b2ac1b95abdd84be82e499a7391c0fe47da3c0364b7bce5f0933d43c9842584c5dda2f725b1c5184c720ac413f579c1bafdf2258342709c1b6396990c8a23e8d640e85fbd26d8e4af7cf754feae10db5697ca22db7bdf08fcb12f946ffc42bb6663b9c7f5de0a0ffe68712fffc6eb1f24f5d3dd98abaa4fe6e61d6b90c0f636eabe0328fc5568fb0688a4d8971eb12afa14d95dc1f58584ecbb4843b12285952714209271fdc839746422053acf279f88dbe3647242c51a38ae2ccaa64e1953f1bce508d62c01d7b5b2fdbd90dd3496262d022f85239b14ac2193af4a545846e952e19d604d89ef0deb5730a82a035a7e57283082ea02ff66ff6ad776866ac4700bfb69c89ee3de821d6c86c519fa1a6187a0bf03295b26a90f35a188687ab89c66c9081e56ba6119f4ff6de063607f2c1fb8bfe24c55ae153e407230ebf4702f5333bb05fe25e9d3867e0166066a7806d5cdd7c4caa07a627ed26e199f8d8cf893e32d8c406d1dd31a16015a4da1fb352b38c3ec082ffa5a876035f6e357370fe68478f43c1fa0f693b7a563fc71c0d599f7e827231b1d7dec4aa7ab7c05287c48e7fff796a35c8f693d8d0d79ee1a0caed8e1c975049ccac2956fd56e72f5ccd6dce8cf6e5c8402b8b444b7f5c219385f4ac4718dfad1e5f348b4c66ba02ce5e0f03f47e75e24f50627c4c5336a58c0f2d948eed7094ab1c34cf27dab61de76f76da5c143d8865e1c6c496f12d534e9fd7ba70d847c5e8878b4a9ee32d17b250c7a3aae5f2d6afdd618c89050641f8ffaddfbab0e409b7dac1252ac3285666b8aaddc1d79af73671d270d472dc7ec4786eefe48079557c032bff4f4edbf95a2c89f2895ad0688a8ac19460fda9dd55734a747e549366da1005ddf958fc277c8e8125e85b1207c6c655b842b60b50224f20c07bb64d82b148d2cb43f97e54801bdf9b50ef017ba8a75414955cc476bb0366bb37bd6afa01dbf0dad794035447db676debfc384f2f54be2852"}) 11m52.169899211s ago: executing program 5 (id=228): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 11m50.975524787s ago: executing program 5 (id=230): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000"], 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x40000}}, 0x10) request_key(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0) 11m35.366835197s ago: executing program 33 (id=230): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000"], 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x40000}}, 0x10) request_key(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0) 8m0.914728381s ago: executing program 6 (id=927): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) 7m59.562629782s ago: executing program 6 (id=930): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8a}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 7m58.129419007s ago: executing program 6 (id=932): write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x9, 0x68, 0x3, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100fe, @remote}, {0x4f20, 0x4e22, 0x51, 0x0, @gue={{0x2, 0x0, 0x3, 0x2, 0x0, @val=0x80}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa17932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601d52cd3b5a4a38a054f2fba"}}}}, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) 7m56.485884202s ago: executing program 6 (id=935): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00\x00u', 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1586dd6000021000403afffe8000000000000000000000000000bbff02000000000000000000000000000103019078300000006d5d296b08002bffff0100000000000000000000000000016fbe6c261ae900200100000000000000000000000000022f0004000500090008"], 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x33, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000700000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r9) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) 7m54.978514873s ago: executing program 6 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000f52af1edca9bf726824d0e4c1adc35d92cd30c68d5026a9114e3f7e4f3a59b6234dc4a9b4493b64e8a65df671e1e1dff8eff34110b904075ba07f0eaf9a4d77ffe73f41181fea1f7fa2c"], 0x50) 7m54.31047061s ago: executing program 6 (id=941): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket$packet(0x11, 0x2, 0x300) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) 7m38.756734916s ago: executing program 34 (id=941): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket$packet(0x11, 0x2, 0x300) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) 32.760473712s ago: executing program 3 (id=2923): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0), 0x0, 0x44008004) close_range(r0, 0xffffffffffffffff, 0x0) 32.345570815s ago: executing program 3 (id=2926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(r1, r2, 0x0) sync_file_range(r1, 0x5, 0x3, 0x4) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgsnd(r5, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(r5, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x4000) getresuid(0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x3, r6, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r7}) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 31.04734265s ago: executing program 3 (id=2931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rmdir(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) 10.558023126s ago: executing program 0 (id=3023): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r1, 0x5609, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) 6.235194472s ago: executing program 0 (id=3038): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xfffffffa, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a00b400"/40, 0x28}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) set_robust_list(&(0x7f0000000180)={0x0, 0x5}, 0x18) 6.190189174s ago: executing program 7 (id=3039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.543564205s ago: executing program 7 (id=3043): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) 5.331427113s ago: executing program 4 (id=3044): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 5.230358489s ago: executing program 1 (id=3045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 4.901987111s ago: executing program 7 (id=3046): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c) 4.80800456s ago: executing program 4 (id=3047): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x90, &(0x7f0000000980)=ANY=[], 0x2, 0x699, &(0x7f0000000140)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 4.586422156s ago: executing program 1 (id=3048): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.548697075s ago: executing program 0 (id=3049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(0x0, 0x0) 4.378343048s ago: executing program 7 (id=3050): unshare(0x2a060400) r0 = open(0x0, 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4000880) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) fchdir(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) 4.138614168s ago: executing program 4 (id=3051): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) futex_waitv(&(0x7f0000002280)=[{0x1, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xe, 0x0, 0x2}, {0xf0, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x101, 0x0}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0x400, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x20000000000000, 0x0, 0x2}, {0x7f, 0x0, 0x82}, {0x7ff, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x230c00000000000, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xa339, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0xf2, 0x0, 0x2}, {0x10000, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x3, 0x0}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x2}, {0x4, 0x0, 0x186}, {0x6, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0xffff, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x100, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0xd, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x3ff, 0x0, 0x82}, {0x101, 0x0, 0x82}], 0x32, 0x0, 0x0, 0x1) 3.747503102s ago: executing program 0 (id=3052): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.565063664s ago: executing program 7 (id=3053): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) listen(r0, 0x6) 3.466912131s ago: executing program 4 (id=3054): r0 = memfd_create(0x0, 0x0) fallocate(r0, 0x0, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket(0x1, 0x5, 0x0) close(0x3) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x2a00, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000001c0)={0x80000002}) 3.347066367s ago: executing program 1 (id=3055): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 3.153480604s ago: executing program 0 (id=3056): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 2.922484703s ago: executing program 4 (id=3057): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/209, 0xd1}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 2.787077046s ago: executing program 1 (id=3058): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xfffffffa, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a00b400"/40, 0x28}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) set_robust_list(&(0x7f0000000180)={0x0, 0x5}, 0x18) 2.45085595s ago: executing program 0 (id=3059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c) 2.132274363s ago: executing program 7 (id=3060): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x8808) getpid() r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x14886, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1.572246628s ago: executing program 3 (id=2936): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) 1.174167645s ago: executing program 1 (id=3062): unshare(0x2a060400) r0 = open(0x0, 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4000880) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) fchdir(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) 822.953047ms ago: executing program 4 (id=3063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) 800.841811ms ago: executing program 3 (id=3064): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) 94.843994ms ago: executing program 1 (id=3065): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 3 (id=3066): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) kernel console output (not intermixed with test programs): [ 816.662195][T12096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 816.669506][T12096] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 816.683589][T12096] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 816.851061][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.273134][T12108] program syz.0.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.854778][T12114] loop0: detected capacity change from 0 to 128 [ 817.979414][T12112] Falling back ldisc for ttyS3. [ 818.145301][T12115] bio_check_eod: 961 callbacks suppressed [ 818.145388][T12115] syz.0.1909: attempt to access beyond end of device [ 818.145388][T12115] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 818.254870][T12115] syz.0.1909: attempt to access beyond end of device [ 818.254870][T12115] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 818.274408][T12115] syz.0.1909: attempt to access beyond end of device [ 818.274408][T12115] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 818.290007][T12115] syz.0.1909: attempt to access beyond end of device [ 818.290007][T12115] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 818.304413][T12115] syz.0.1909: attempt to access beyond end of device [ 818.304413][T12115] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 818.318878][T12115] syz.0.1909: attempt to access beyond end of device [ 818.318878][T12115] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 818.333091][T12115] syz.0.1909: attempt to access beyond end of device [ 818.333091][T12115] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 818.347612][T12115] syz.0.1909: attempt to access beyond end of device [ 818.347612][T12115] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 818.361868][T12115] syz.0.1909: attempt to access beyond end of device [ 818.361868][T12115] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 818.380578][T12115] syz.0.1909: attempt to access beyond end of device [ 818.380578][T12115] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 820.142251][T12131] loop4: detected capacity change from 0 to 1024 [ 820.190542][T12131] EXT4-fs: Ignoring removed orlov option [ 820.304066][T12131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.450002][T12131] EXT4-fs: Ignoring sb option on remount [ 820.456002][T12131] EXT4-fs: Ignoring removed orlov option [ 820.462443][T12131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 820.469846][T12131] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 820.560606][T12131] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 820.747265][T12142] program syz.3.1919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.859147][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.054152][ T30] audit: type=1326 audit(1754592333.812:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.134292][ T30] audit: type=1326 audit(1754592333.872:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.161406][ T30] audit: type=1326 audit(1754592333.872:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.185574][ T30] audit: type=1326 audit(1754592333.882:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.209368][ T30] audit: type=1326 audit(1754592333.912:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.232221][ T30] audit: type=1326 audit(1754592333.912:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.259061][ T30] audit: type=1326 audit(1754592333.912:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.318530][T12147] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1921'. [ 821.564704][ T30] audit: type=1326 audit(1754592334.072:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.591506][ T30] audit: type=1326 audit(1754592334.072:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 821.614576][ T30] audit: type=1326 audit(1754592334.072:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 823.557346][T12178] program syz.0.1934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.391844][T12193] loop0: detected capacity change from 0 to 512 [ 825.533176][T12193] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1940: iget: bad extended attribute block 1 [ 825.628037][T12193] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1940: couldn't read orphan inode 15 (err -117) [ 825.697249][T12193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.166463][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.157331][T12210] 9pnet_fd: Insufficient options for proto=fd [ 827.394636][T12213] program syz.4.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 828.373600][T12228] random: crng reseeded on system resumption [ 828.560151][T12228] Unrecognized hibernate image header format! [ 828.566681][T12228] PM: hibernation: Image mismatch: architecture specific data [ 829.397225][T12243] 9pnet_fd: Insufficient options for proto=fd [ 829.786085][T12248] program syz.7.1961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.001492][T12259] loop3: detected capacity change from 0 to 512 [ 831.073985][T12259] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1966: iget: bad extended attribute block 1 [ 831.176776][T12259] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1966: couldn't read orphan inode 15 (err -117) [ 831.224821][T12259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.542519][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.870210][T12271] veth0_vlan: entered allmulticast mode [ 832.097413][T12271] : renamed from vlan0 [ 832.717928][T12278] program syz.3.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.524703][T12287] netlink: 'syz.4.1977': attribute type 10 has an invalid length. [ 833.559486][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.573827][T12287] team0: Port device bond0 added [ 834.295606][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 834.295687][ T30] audit: type=1326 audit(1754592347.062:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.325099][ T30] audit: type=1326 audit(1754592347.062:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.352383][ T30] audit: type=1326 audit(1754592347.062:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.376547][ T30] audit: type=1326 audit(1754592347.092:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.556587][T12295] : renamed from vlan1 (while UP) [ 834.587897][T12300] loop4: detected capacity change from 0 to 512 [ 834.688743][ T30] audit: type=1326 audit(1754592347.182:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.711728][ T30] audit: type=1326 audit(1754592347.182:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.735866][ T30] audit: type=1326 audit(1754592347.182:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.751603][T12300] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1980: iget: bad extended attribute block 1 [ 834.764327][ T30] audit: type=1326 audit(1754592347.222:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.800840][ T30] audit: type=1326 audit(1754592347.272:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.823709][ T30] audit: type=1326 audit(1754592347.282:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 834.930033][T12300] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1980: couldn't read orphan inode 15 (err -117) [ 834.994171][T12300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.402313][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.841192][T12313] program syz.4.1985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 836.516415][T12324] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1990'. [ 837.632725][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1995'. [ 838.724341][T12346] program syz.4.2000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.648936][T12362] loop7: detected capacity change from 0 to 512 [ 839.800281][T12362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.813810][T12362] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 840.496781][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.752117][T12377] netlink: 'syz.1.2010': attribute type 21 has an invalid length. [ 840.760917][T12377] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2010'. [ 840.929719][T12381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2011'. [ 841.474679][T12390] program syz.1.2014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.385480][T12417] netlink: 'syz.0.2025': attribute type 10 has an invalid length. [ 843.430878][T12417] syz_tun: entered promiscuous mode [ 843.470111][T12417] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 843.855129][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 843.855213][ T30] audit: type=1800 audit(1754592356.632:425): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2027" name="/" dev="9p" ino=2 res=0 errno=0 [ 843.917109][T12423] program syz.3.2029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 845.018453][T12436] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2034'. [ 845.835844][T12447] loop3: detected capacity change from 0 to 512 [ 846.080161][T12447] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2037: bg 0: block 248: padding at end of block bitmap is not set [ 846.268395][T12447] Quota error (device loop3): write_blk: dquota write failed [ 846.276526][T12447] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 846.287181][T12447] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2037: Failed to acquire dquot type 1 [ 846.410329][T12447] EXT4-fs (loop3): 1 truncate cleaned up [ 846.418717][T12447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.436646][T12447] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.681155][T12447] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2037: deleted inode referenced: 12 [ 847.025829][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.220801][T12468] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2045'. [ 849.261926][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.269166][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.372114][T12496] loop1: detected capacity change from 0 to 512 [ 849.524002][T12503] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2058'. [ 849.558002][T12496] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2055: bg 0: block 248: padding at end of block bitmap is not set [ 849.649502][T12496] Quota error (device loop1): write_blk: dquota write failed [ 849.658011][T12496] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 849.668548][T12496] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2055: Failed to acquire dquot type 1 [ 849.753626][T12505] loop0: detected capacity change from 0 to 512 [ 849.779746][T12496] EXT4-fs (loop1): 1 truncate cleaned up [ 849.788600][T12496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.801853][T12496] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.833747][T12505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 849.903861][T12496] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2055: deleted inode referenced: 12 [ 849.953321][T12505] EXT4-fs (loop0): 1 truncate cleaned up [ 849.961668][T12505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.156084][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.694667][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.762112][T12513] tipc: Enabled bearer , priority 0 [ 850.798022][T12512] tipc: Resetting bearer [ 850.953188][T12512] tipc: Disabling bearer [ 852.057853][ T30] audit: type=1326 audit(1754592364.832:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.216495][ T30] audit: type=1326 audit(1754592364.912:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.240630][ T30] audit: type=1326 audit(1754592364.912:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.263630][ T30] audit: type=1326 audit(1754592364.912:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.290745][ T30] audit: type=1326 audit(1754592364.912:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.315335][ T30] audit: type=1326 audit(1754592364.962:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.559750][ T30] audit: type=1326 audit(1754592365.122:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.587130][ T30] audit: type=1326 audit(1754592365.132:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.1.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 852.844467][T12539] loop7: detected capacity change from 0 to 512 [ 853.055483][T12539] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2071: bg 0: block 248: padding at end of block bitmap is not set [ 853.092664][T12539] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2071: Failed to acquire dquot type 1 [ 853.138852][T12539] EXT4-fs (loop7): 1 truncate cleaned up [ 853.146995][T12539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.160429][T12539] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.210850][T12539] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.2071: deleted inode referenced: 12 [ 854.253220][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.888720][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2078'. [ 856.026515][T12578] netlink: 'syz.3.2082': attribute type 10 has an invalid length. [ 856.082864][T12578] bridge0: port 1(dummy0) entered disabled state [ 856.091742][T12578] dummy0: left allmulticast mode [ 856.096906][T12578] dummy0: left promiscuous mode [ 856.103207][T12578] bridge0: port 1(dummy0) entered disabled state [ 856.329545][T12578] team0: Failed to send options change via netlink (err -105) [ 856.337754][T12578] team0: Port device dummy0 added [ 857.104942][T12589] loop7: detected capacity change from 0 to 512 [ 857.289694][T12589] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2088: bg 0: block 248: padding at end of block bitmap is not set [ 857.365612][T12589] __quota_error: 2 callbacks suppressed [ 857.365706][T12589] Quota error (device loop7): write_blk: dquota write failed [ 857.380135][T12589] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 857.396280][T12589] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2088: Failed to acquire dquot type 1 [ 857.440922][T12589] EXT4-fs (loop7): 1 truncate cleaned up [ 857.449871][T12589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.463038][T12589] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.715093][T12589] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.2088: deleted inode referenced: 12 [ 858.200578][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.290872][ T30] audit: type=1326 audit(1754592371.072:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 858.318090][ T30] audit: type=1326 audit(1754592371.072:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 858.342852][ T30] audit: type=1326 audit(1754592371.102:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 858.367015][ T30] audit: type=1326 audit(1754592371.122:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 858.389960][ T30] audit: type=1326 audit(1754592371.122:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.3.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 859.293274][T12616] random: crng reseeded on system resumption [ 860.318517][T12627] loop0: detected capacity change from 0 to 512 [ 860.555379][T12627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.573884][T12627] ext4 filesystem being mounted at /424/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.736510][T12633] loop1: detected capacity change from 0 to 512 [ 860.890526][T12633] EXT4-fs (loop1): filesystem is read-only [ 861.015958][T12633] EXT4-fs (loop1): filesystem is read-only [ 861.022559][T12633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 861.038579][T12633] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2106: bad orphan inode 16 [ 861.058626][T12633] ext4_test_bit(bit=15, block=3) = 0 [ 861.079433][T12633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 861.145720][T12638] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.171009][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.426876][T12638] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.541024][T12649] loop0: detected capacity change from 0 to 512 [ 861.614594][T12638] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.712249][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.802996][T12638] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.186006][ T35] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.332950][ T4004] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.500549][ T4359] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.550475][ T4359] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.008695][T12666] loop0: detected capacity change from 0 to 512 [ 863.105187][T12666] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2120: iget: bad extended attribute block 1 [ 863.220793][T12666] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2120: couldn't read orphan inode 15 (err -117) [ 863.274529][T12672] loop3: detected capacity change from 0 to 512 [ 863.284240][T12666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.435071][T12672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.448994][T12672] ext4 filesystem being mounted at /424/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.906779][T12680] loop1: detected capacity change from 0 to 1024 [ 863.974608][T12680] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 863.984959][T12680] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 864.070438][T12680] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.2124: iget: special inode unallocated [ 864.070467][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.105026][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.114832][T12680] EXT4-fs (loop1): Remounting filesystem read-only [ 864.122939][T12680] EXT4-fs (loop1): no journal found [ 864.129644][T12680] EXT4-fs (loop1): can't get journal size [ 864.190005][T12680] EXT4-fs (loop1): filesystem is read-only [ 864.200787][T12680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 864.254784][T12680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.802835][T12689] syzkaller0: entered promiscuous mode [ 864.808777][T12689] syzkaller0: entered allmulticast mode [ 864.989254][T12694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2127'. [ 865.302790][T12698] netlink: 'syz.0.2129': attribute type 10 has an invalid length. [ 866.131109][T12708] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 866.183209][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.202918][T12708] team0: Port device bond0 added [ 866.640449][T12712] loop7: detected capacity change from 0 to 512 [ 866.653421][T12713] loop4: detected capacity change from 0 to 1024 [ 866.709322][T12713] EXT4-fs: Ignoring removed orlov option [ 866.756329][T12713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.764839][T12712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.782170][T12712] ext4 filesystem being mounted at /206/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.940997][T12713] EXT4-fs: Ignoring sb option on remount [ 866.946939][T12713] EXT4-fs: Ignoring removed orlov option [ 866.953517][T12713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 866.960649][T12713] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 866.992869][T12713] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 867.045098][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.389485][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.784634][T12729] netlink: 'syz.1.2145': attribute type 10 has an invalid length. [ 867.799856][T12729] syz_tun: entered promiscuous mode [ 867.841704][T12729] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 868.113294][T12731] syzkaller0: entered promiscuous mode [ 868.119084][T12731] syzkaller0: entered allmulticast mode [ 868.292077][T12735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2146'. [ 869.103110][T12745] $H: renamed from bond0 (while UP) [ 869.121970][T12745] $H: entered promiscuous mode [ 869.127286][T12745] bond_slave_0: entered promiscuous mode [ 869.134928][T12745] bond_slave_1: entered promiscuous mode [ 869.379841][T12749] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 869.389238][T12749] bond_slave_0: left promiscuous mode [ 869.394882][T12749] bond_slave_1: left promiscuous mode [ 869.412877][T12749] bond_slave_0: entered promiscuous mode [ 869.418979][T12749] bond_slave_1: entered promiscuous mode [ 869.426352][T12750] loop0: detected capacity change from 0 to 512 [ 869.432860][T12749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.434035][T12749] team0: Device bond0 failed to register rx_handler [ 869.448456][T12749] bond_slave_0: left promiscuous mode [ 869.454054][T12749] bond_slave_1: left promiscuous mode [ 869.614342][T12750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.628613][T12750] ext4 filesystem being mounted at /433/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.647121][T12753] loop4: detected capacity change from 0 to 1024 [ 869.661784][T12753] EXT4-fs: Ignoring removed orlov option [ 869.851178][T12753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.910877][T12753] EXT4-fs: Ignoring sb option on remount [ 869.916814][T12753] EXT4-fs: Ignoring removed orlov option [ 869.923461][T12753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 869.930640][T12753] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 869.958856][T12753] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 870.070341][T12765] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 870.190918][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.230760][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.622383][T12769] syzkaller0: entered promiscuous mode [ 870.628809][T12769] syzkaller0: entered allmulticast mode [ 871.226658][T12782] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2163'. [ 872.086145][T12792] loop7: detected capacity change from 0 to 512 [ 872.113830][T12793] loop4: detected capacity change from 0 to 1024 [ 872.146961][T12793] EXT4-fs: Ignoring removed orlov option [ 872.291624][T12792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.306222][T12792] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.344262][T12800] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 872.371485][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 872.418927][T12793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.614188][T12793] EXT4-fs: Ignoring sb option on remount [ 872.620616][T12793] EXT4-fs: Ignoring removed orlov option [ 872.626808][T12793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 872.634418][T12793] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 872.704198][T12793] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 872.852286][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.145477][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.340233][T12813] syzkaller0: entered promiscuous mode [ 873.345943][T12813] syzkaller0: entered allmulticast mode [ 874.108523][T12829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2181'. [ 874.919060][T12837] netlink: 'syz.0.2185': attribute type 10 has an invalid length. [ 875.078352][T12841] loop1: detected capacity change from 0 to 128 [ 875.226020][T12840] loop3: detected capacity change from 0 to 512 [ 875.449316][T12840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.462769][T12840] ext4 filesystem being mounted at /438/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 875.558720][T12841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2187'. [ 875.568702][T12841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2187'. [ 875.874048][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.346931][T12860] syzkaller0: entered promiscuous mode [ 876.352960][T12860] syzkaller0: entered allmulticast mode [ 877.433612][T12875] netlink: 'syz.3.2200': attribute type 10 has an invalid length. [ 877.470123][T12875] syz_tun: entered promiscuous mode [ 877.506271][T12875] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 877.604775][T12881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2199'. [ 878.035610][T12883] loop4: detected capacity change from 0 to 512 [ 878.240409][T12883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.253642][T12883] ext4 filesystem being mounted at /471/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.733764][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 878.743475][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 878.757148][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 878.863321][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.933549][T12900] syzkaller0: entered promiscuous mode [ 878.939593][T12900] syzkaller0: entered allmulticast mode [ 879.226257][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 879.237247][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 879.250255][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 880.189923][T12918] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 880.636956][T12923] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2217'. [ 881.562819][T12932] loop7: detected capacity change from 0 to 512 [ 881.684968][T12932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.699519][T12932] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.100882][T12939] loop1: detected capacity change from 0 to 1024 [ 882.539462][T12939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.599984][ T30] audit: type=1800 audit(1754592395.372:439): pid=12939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2226" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 882.672124][T12939] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2226: Allocating blocks 497-513 which overlap fs metadata [ 882.710019][T12950] netlink: 'syz.4.2230': attribute type 10 has an invalid length. [ 882.711512][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.755109][T12939] EXT4-fs (loop1): pa ffff888123af1690: logic 256, phys. 369, len 9 [ 882.763967][T12939] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 882.775519][T12939] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 882.807272][T12950] syz_tun: entered promiscuous mode [ 882.840687][T12950] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 883.204522][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.745475][T12965] loop1: detected capacity change from 0 to 1024 [ 883.790266][T12965] EXT4-fs: Ignoring removed orlov option [ 883.845959][T12968] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2238'. [ 883.902391][T12965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.171150][T12965] EXT4-fs: Ignoring sb option on remount [ 884.177601][T12965] EXT4-fs: Ignoring removed orlov option [ 884.183666][T12965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 884.191035][T12965] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 884.254746][T12965] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 884.596404][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.073966][T12985] 9pnet_fd: Insufficient options for proto=fd [ 885.118044][T12986] ipip0: entered promiscuous mode [ 885.564055][T12990] netlink: 'syz.1.2246': attribute type 10 has an invalid length. [ 887.282700][T13011] loop3: detected capacity change from 0 to 1024 [ 887.366293][T13011] EXT4-fs: Ignoring removed orlov option [ 887.841487][T13011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.954229][ T30] audit: type=1800 audit(1754592400.732:440): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2253" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 887.978739][T13019] batman_adv: batadv0: Adding interface: dummy0 [ 887.985222][T13019] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.017113][T13019] batman_adv: batadv0: Interface activated: dummy0 [ 888.051435][T13021] batadv0: mtu less than device minimum [ 888.059789][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.072919][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.086046][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.099296][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.112481][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.125621][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.138894][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.151984][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.165080][T13021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 888.429433][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.969581][T13031] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2259'. [ 889.136765][T13033] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 889.808162][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2266'. [ 891.409810][ T30] audit: type=1326 audit(1754592404.122:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 891.432915][ T30] audit: type=1326 audit(1754592404.122:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 891.920970][ T30] audit: type=1326 audit(1754592404.312:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 891.944536][ T30] audit: type=1326 audit(1754592404.312:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 891.967983][ T30] audit: type=1326 audit(1754592404.342:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 891.990895][ T30] audit: type=1326 audit(1754592404.372:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 892.017777][ T30] audit: type=1326 audit(1754592404.422:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 892.042490][ T30] audit: type=1326 audit(1754592404.432:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 892.065456][ T30] audit: type=1326 audit(1754592404.432:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d218ebe9 code=0x7ffc0000 [ 892.366294][T13062] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2273'. [ 893.105404][T13067] netlink: 'syz.7.2275': attribute type 10 has an invalid length. [ 893.168846][T13067] syz_tun: entered promiscuous mode [ 893.199708][T13067] $H: (slave syz_tun): Enslaving as an active interface with an up link [ 894.576358][T13089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2285'. [ 898.365878][T13121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2297'. [ 899.806599][T13138] loop4: detected capacity change from 0 to 512 [ 899.848074][T13138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 899.946119][T13138] EXT4-fs (loop4): 1 truncate cleaned up [ 899.954688][T13138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.331373][T13145] loop1: detected capacity change from 0 to 1024 [ 900.384841][T13145] EXT4-fs: Ignoring removed orlov option [ 900.481921][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.560775][T13145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.754150][T13145] EXT4-fs: Ignoring sb option on remount [ 900.761068][T13145] EXT4-fs: Ignoring removed orlov option [ 900.768389][T13145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 900.775309][T13145] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 900.898978][T13145] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 900.911960][T13153] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2311'. [ 901.206039][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.391981][ T30] audit: type=1326 audit(1754592414.162:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.420740][ T30] audit: type=1326 audit(1754592414.162:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.582125][ T30] audit: type=1326 audit(1754592414.252:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.605480][ T30] audit: type=1326 audit(1754592414.332:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.632946][ T30] audit: type=1326 audit(1754592414.342:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.657375][ T30] audit: type=1326 audit(1754592414.342:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.680857][ T30] audit: type=1326 audit(1754592414.342:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.703865][ T30] audit: type=1326 audit(1754592414.342:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.732034][ T30] audit: type=1326 audit(1754592414.352:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 901.756456][ T30] audit: type=1326 audit(1754592414.352:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13158 comm="syz.7.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 903.156112][T13185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2323'. [ 903.295903][T13189] loop4: detected capacity change from 0 to 1024 [ 903.331293][T13189] EXT4-fs: Ignoring removed orlov option [ 903.429520][T13189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.629989][T13189] EXT4-fs: Ignoring sb option on remount [ 903.635941][T13189] EXT4-fs: Ignoring removed orlov option [ 903.642581][T13189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 903.650082][T13189] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 903.750200][T13189] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 904.004770][T13198] netlink: '+}[@': attribute type 13 has an invalid length. [ 904.038811][T13187] loop1: detected capacity change from 0 to 8192 [ 904.130222][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.143435][T13187] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 904.812040][T13198] net_ratelimit: 10 callbacks suppressed [ 904.812116][T13198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 905.254306][T13203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.534344][T13203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.613187][T13203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.704699][T13203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.082402][ T76] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.155384][ T76] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.249034][ T4004] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.316057][ T4004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.090077][T13216] loop4: detected capacity change from 0 to 1024 [ 907.807335][T13216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.487790][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.502119][ T30] audit: type=1326 audit(1754592421.242:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.525285][ T30] audit: type=1326 audit(1754592421.242:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.600184][ T30] audit: type=1326 audit(1754592421.342:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.623402][ T30] audit: type=1326 audit(1754592421.342:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.646540][ T30] audit: type=1326 audit(1754592421.342:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.669575][ T30] audit: type=1326 audit(1754592421.362:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.697680][ T30] audit: type=1326 audit(1754592421.362:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.3.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 908.974326][ T30] audit: type=1326 audit(1754592421.692:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 909.002840][ T30] audit: type=1326 audit(1754592421.692:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 909.029128][ T30] audit: type=1326 audit(1754592421.692:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 909.436121][T13234] loop3: detected capacity change from 0 to 1024 [ 909.480793][T13234] EXT4-fs: Ignoring removed orlov option [ 909.681581][T13234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.960735][T13234] EXT4-fs: Ignoring sb option on remount [ 909.966681][T13234] EXT4-fs: Ignoring removed orlov option [ 909.973133][T13234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 909.980452][T13234] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 910.048169][T13234] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 910.233300][T13251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 910.444670][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.770181][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.776859][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.309219][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 911.587384][T13254] loop4: detected capacity change from 0 to 8192 [ 911.700316][T13254] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 912.264760][T13271] netlink: 'syz.7.2349': attribute type 10 has an invalid length. [ 912.366395][T13270] syzkaller0: entered promiscuous mode [ 912.372666][T13270] syzkaller0: entered allmulticast mode [ 912.760889][T13277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.435080][T13277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.650860][T13277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.666843][T13277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.876202][ T4232] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.178761][ T4232] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.217918][ T4004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.277854][ T4004] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.321251][T13303] netlink: 'syz.1.2364': attribute type 10 has an invalid length. [ 916.415941][T13306] netlink: 'syz.4.2362': attribute type 10 has an invalid length. [ 916.481849][T13306] netlink: 'syz.4.2362': attribute type 10 has an invalid length. [ 916.942750][T13312] syzkaller0: entered promiscuous mode [ 916.948999][T13312] syzkaller0: entered allmulticast mode [ 917.421854][T13319] delete_channel: no stack [ 917.693690][T13321] syzkaller0: entered promiscuous mode [ 917.706132][T13321] syzkaller0: entered allmulticast mode [ 919.178258][T13335] loop1: detected capacity change from 0 to 512 [ 919.297341][T13338] netlink: 'syz.3.2377': attribute type 10 has an invalid length. [ 919.370393][T13335] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2376: error while reading EA inode 32 err=-116 [ 919.430156][T13335] EXT4-fs (loop1): Remounting filesystem read-only [ 919.437337][T13335] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 919.453776][T13335] EXT4-fs (loop1): 1 orphan inode deleted [ 919.463553][T13335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.483832][T13342] netlink: 'syz.4.2378': attribute type 10 has an invalid length. [ 919.509486][T13342] netlink: 'syz.4.2378': attribute type 10 has an invalid length. [ 919.550140][T13335] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.663874][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'. [ 920.119659][T13348] syzkaller0: entered promiscuous mode [ 920.125487][T13348] syzkaller0: entered allmulticast mode [ 920.375388][T13355] loop7: detected capacity change from 0 to 512 [ 920.495713][T13355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.509647][T13355] ext4 filesystem being mounted at /251/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.833865][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.972225][T13364] syzkaller0: entered promiscuous mode [ 920.984290][T13364] syzkaller0: entered allmulticast mode [ 922.141447][T13376] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 922.285828][T13380] netlink: 'syz.7.2391': attribute type 10 has an invalid length. [ 922.320040][T13380] netlink: 'syz.7.2391': attribute type 10 has an invalid length. [ 922.328542][T13380] $H: left promiscuous mode [ 922.333505][T13380] bond_slave_0: left promiscuous mode [ 922.340261][T13380] bond_slave_1: left promiscuous mode [ 922.356634][T13380] 8021q: adding VLAN 0 to HW filter on device $H [ 922.364122][T13382] loop3: detected capacity change from 0 to 164 [ 922.372288][T13380] team0: Port device $H added [ 922.405904][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 922.492732][T13382] bio_check_eod: 1 callbacks suppressed [ 922.492818][T13382] syz.3.2392: attempt to access beyond end of device [ 922.492818][T13382] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 922.522836][T13382] syz.3.2392: attempt to access beyond end of device [ 922.522836][T13382] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 923.054079][T13394] syzkaller0: entered promiscuous mode [ 923.060306][T13394] syzkaller0: entered allmulticast mode [ 923.286412][T13397] loop0: detected capacity change from 0 to 512 [ 923.474204][T13397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.487911][T13397] ext4 filesystem being mounted at /488/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.199897][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.792238][T13422] netlink: 'syz.1.2406': attribute type 10 has an invalid length. [ 924.817182][T13420] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 924.875195][T13422] netlink: 'syz.1.2406': attribute type 10 has an invalid length. [ 924.884126][T13422] bond_slave_0: entered promiscuous mode [ 924.890224][T13422] bond_slave_1: entered promiscuous mode [ 924.903869][T13422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.911963][T13422] team0: Device bond0 failed to register rx_handler [ 924.919381][T13422] bond_slave_0: left promiscuous mode [ 924.924998][T13422] bond_slave_1: left promiscuous mode [ 926.130209][T13442] syzkaller0: entered promiscuous mode [ 926.136223][T13442] syzkaller0: entered allmulticast mode [ 926.283477][T13447] loop3: detected capacity change from 0 to 512 [ 926.462148][T13447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.475903][T13447] ext4 filesystem being mounted at /490/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.000129][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.135369][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2417'. [ 927.144843][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2417'. [ 927.155158][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2417'. [ 927.165132][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2417'. [ 927.174531][T13458] netlink: 'syz.4.2417': attribute type 6 has an invalid length. [ 927.323254][T13460] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 927.703927][T13467] netlink: 'syz.3.2421': attribute type 10 has an invalid length. [ 927.762207][T13467] netlink: 'syz.3.2421': attribute type 10 has an invalid length. [ 928.390371][T13481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 928.445546][T13484] syzkaller0: entered promiscuous mode [ 928.458120][T13484] syzkaller0: entered allmulticast mode [ 929.098489][T13492] loop1: detected capacity change from 0 to 128 [ 929.231346][T13492] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 929.328799][T13492] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.067109][ T5808] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 930.140350][T13510] netlink: 'syz.0.2436': attribute type 10 has an invalid length. [ 930.201437][T13510] netlink: 'syz.0.2436': attribute type 10 has an invalid length. [ 930.230270][T13510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.244604][T13510] team0: Port device bond0 added [ 930.936485][T13522] syzkaller0: entered promiscuous mode [ 930.942454][T13522] syzkaller0: entered allmulticast mode [ 931.339469][T13532] smc: net device bond0 erased user defined pnetid SYZ2 [ 931.942559][T13541] loop4: detected capacity change from 0 to 512 [ 932.021582][T13541] ext4: Unknown parameter 'noacl' [ 932.289016][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 932.289092][ T30] audit: type=1326 audit(1754592445.062:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.3.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 932.318696][ T30] audit: type=1326 audit(1754592445.072:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.3.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 932.508486][ T30] audit: type=1326 audit(1754592445.132:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.3.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 932.538213][ T30] audit: type=1326 audit(1754592445.132:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.3.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 932.565440][ T30] audit: type=1326 audit(1754592445.132:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.3.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 932.684959][T13551] 9pnet_fd: Insufficient options for proto=fd [ 932.838317][T13557] syzkaller0: entered promiscuous mode [ 932.844033][T13557] syzkaller0: entered allmulticast mode [ 932.844963][T13560] loop1: detected capacity change from 0 to 128 [ 933.905222][T13573] serio: Serial port ptm1 [ 934.428611][T13583] loop1: detected capacity change from 0 to 512 [ 934.484409][T13583] ext4: Unknown parameter 'noacl' [ 934.539645][T13588] 9pnet_fd: Insufficient options for proto=fd [ 934.863382][T13591] syzkaller0: entered promiscuous mode [ 934.869374][T13591] syzkaller0: entered allmulticast mode [ 935.254820][T13600] loop7: detected capacity change from 0 to 128 [ 936.057007][T13615] serio: Serial port ptm0 [ 936.431379][T13621] 9pnet_fd: Insufficient options for proto=fd [ 936.712903][T13623] loop1: detected capacity change from 0 to 512 [ 936.750555][T13623] ext4: Unknown parameter 'noacl' [ 936.915258][T13627] syzkaller0: entered promiscuous mode [ 936.921380][T13627] syzkaller0: entered allmulticast mode [ 937.646166][T13640] loop4: detected capacity change from 0 to 128 [ 937.898589][T13644] serio: Serial port ptm0 [ 937.960356][T13648] 9pnet_fd: Insufficient options for proto=fd [ 938.096343][T13647] syzkaller0: entered promiscuous mode [ 938.102430][T13647] syzkaller0: entered allmulticast mode [ 938.498653][T13652] 9pnet_fd: Insufficient options for proto=fd [ 939.011010][T13664] syzkaller0: entered promiscuous mode [ 939.016846][T13664] syzkaller0: entered allmulticast mode [ 939.343260][T13669] program syz.3.2500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.985159][T13679] 9pnet_fd: Insufficient options for proto=fd [ 940.035763][T13680] serio: Serial port ptm0 [ 940.527133][T13689] 9pnet_fd: Insufficient options for proto=fd [ 940.725545][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 941.169001][T13702] program syz.1.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.676728][T13707] 9pnet_fd: Insufficient options for proto=fd [ 941.791108][T13708] bond1: entered promiscuous mode [ 941.796383][T13708] bond1: entered allmulticast mode [ 941.804184][T13708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 941.855041][T13708] bond1 (unregistering): Released all slaves [ 942.137968][T13712] serio: Serial port ptm0 [ 942.674509][T13724] loop4: detected capacity change from 0 to 128 [ 942.702333][T13723] 9pnet_fd: Insufficient options for proto=fd [ 942.881375][T13717] loop1: detected capacity change from 0 to 2048 [ 943.036787][T13717] Alternate GPT is invalid, using primary GPT. [ 943.044790][T13717] loop1: p2 p3 p7 [ 943.922888][T13735] program syz.1.2528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 944.490012][T13746] serio: Serial port ptm0 [ 944.624279][T13750] 9pnet_fd: Insufficient options for proto=fd [ 945.857875][T13770] 9pnet_fd: Insufficient options for proto=fd [ 946.760798][T13781] 9pnet_fd: Insufficient options for proto=fd [ 946.912151][T13784] 9pnet_fd: Insufficient options for proto=fd [ 947.282516][T13793] loop4: detected capacity change from 0 to 512 [ 947.328512][T13793] ext4: Unknown parameter 'noacl' [ 947.620903][T13800] 9pnet_fd: Insufficient options for proto=fd [ 948.656894][T13815] tipc: Enabled bearer , priority 0 [ 948.684868][T13814] tipc: Resetting bearer [ 948.750979][T13819] 9pnet_fd: Insufficient options for proto=fd [ 948.870990][T13814] tipc: Disabling bearer [ 950.231978][T13835] loop3: detected capacity change from 0 to 1024 [ 950.254949][T13835] EXT4-fs: Ignoring removed orlov option [ 950.326345][T13837] 9pnet_fd: Insufficient options for proto=fd [ 950.479730][T13835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.630741][T13835] EXT4-fs: Ignoring sb option on remount [ 950.637003][T13835] EXT4-fs: Ignoring removed orlov option [ 950.643279][T13835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 950.650554][T13835] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 950.755919][T13835] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 951.092342][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.573572][T13848] 9pnet_fd: Insufficient options for proto=fd [ 952.094861][T13851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 952.101706][T13851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 952.124512][T13851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 952.131295][T13851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 952.151428][T13851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 952.159647][T13851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 952.172964][T13851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 952.180834][T13851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 952.190492][T13851] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 952.196907][T13851] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 952.263460][T13856] tipc: Enabling of bearer rejected, failed to enable media [ 953.496312][T13873] 9pnet_fd: Insufficient options for proto=fd [ 953.974557][T13877] loop7: detected capacity change from 0 to 1024 [ 954.028197][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 954.038918][T13877] EXT4-fs: Ignoring removed orlov option [ 954.189366][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 954.195643][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 954.203355][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 954.213922][T13877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.224352][T13883] 9pnet_fd: Insufficient options for proto=fd [ 954.267971][T13887] Bluetooth: hci5: command 0x0406 tx timeout [ 954.410903][T13877] EXT4-fs: Ignoring sb option on remount [ 954.417024][T13877] EXT4-fs: Ignoring removed orlov option [ 954.423820][T13877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 954.431075][T13877] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 954.506474][T13877] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 954.764633][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.108669][T13887] Bluetooth: hci0: command 0x0406 tx timeout [ 956.268969][T13887] Bluetooth: hci1: command 0x0406 tx timeout [ 956.289070][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 956.295338][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 956.349420][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 956.683192][T13919] netlink: 'syz.7.2600': attribute type 10 has an invalid length. [ 956.929998][T13924] 9pnet_fd: Insufficient options for proto=fd [ 957.221259][T13928] loop1: detected capacity change from 0 to 128 [ 957.879675][T13936] tipc: Enabled bearer , priority 0 [ 957.902468][T13932] tipc: Resetting bearer [ 958.053662][T13932] tipc: Disabling bearer [ 959.266052][T13956] netlink: 'syz.4.2615': attribute type 10 has an invalid length. [ 959.524043][T13960] 9pnet_fd: Insufficient options for proto=fd [ 959.868008][ T30] audit: type=1326 audit(1754592472.642:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 959.896405][ T30] audit: type=1326 audit(1754592472.642:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 959.920710][ T30] audit: type=1326 audit(1754592472.652:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 959.943996][ T30] audit: type=1326 audit(1754592472.652:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 959.966974][ T30] audit: type=1326 audit(1754592472.732:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 960.179047][T13966] loop0: detected capacity change from 0 to 128 [ 961.168145][T13979] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 961.679763][T13978] loop0: detected capacity change from 0 to 512 [ 961.751973][T13978] EXT4-fs: Ignoring removed bh option [ 961.822330][T13978] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 961.952879][T13978] EXT4-fs (loop0): 1 truncate cleaned up [ 961.961364][T13978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.771293][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.441293][T13996] 9pnet_fd: Insufficient options for proto=fd [ 964.011033][T14004] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 964.832812][ T30] audit: type=1326 audit(1754592477.602:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 964.855971][ T30] audit: type=1326 audit(1754592477.602:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 964.878937][ T30] audit: type=1326 audit(1754592477.612:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.064862][ T30] audit: type=1326 audit(1754592477.762:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.088662][ T30] audit: type=1326 audit(1754592477.842:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.115611][ T30] audit: type=1326 audit(1754592477.842:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.139921][ T30] audit: type=1326 audit(1754592477.842:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.162953][ T30] audit: type=1326 audit(1754592477.842:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.185904][ T30] audit: type=1326 audit(1754592477.842:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.209726][ T30] audit: type=1326 audit(1754592477.842:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.236740][ T30] audit: type=1326 audit(1754592477.842:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.261153][ T30] audit: type=1326 audit(1754592477.842:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81018ebe9 code=0x7ffc0000 [ 965.980245][T14031] 9pnet_fd: Insufficient options for proto=fd [ 968.060342][T14045] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 968.468864][T14046] syzkaller0: entered promiscuous mode [ 968.474724][T14046] syzkaller0: entered allmulticast mode [ 968.558870][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 970.017004][T14070] 9pnet_fd: Insufficient options for proto=fd [ 970.279008][T14074] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2654'. [ 970.290230][T14074] unsupported nlmsg_type 40 [ 970.995666][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 972.134130][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.141114][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.723479][T14118] 9pnet_fd: Insufficient options for proto=fd [ 974.528444][T14151] loop3: detected capacity change from 0 to 512 [ 974.546378][T14151] EXT4-fs: Ignoring removed oldalloc option [ 974.556856][T14151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 974.698380][T14151] EXT4-fs (loop3): 1 truncate cleaned up [ 974.706587][T14151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.758757][T14157] 9pnet_fd: Insufficient options for proto=fd [ 974.969339][T14159] netlink: 'syz.1.2687': attribute type 10 has an invalid length. [ 975.223678][T14163] loop7: detected capacity change from 0 to 256 [ 975.240417][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.686837][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 975.686923][ T30] audit: type=1800 audit(1754592488.452:515): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2689" name="/" dev="9p" ino=2 res=0 errno=0 [ 976.654772][T14185] 9pnet_fd: Insufficient options for proto=fd [ 977.027538][T14190] netlink: 'syz.1.2698': attribute type 10 has an invalid length. [ 977.600739][T14197] loop1: detected capacity change from 0 to 1024 [ 977.666922][T14197] EXT4-fs: Ignoring removed orlov option [ 977.849797][T14197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.897096][T14201] loop4: detected capacity change from 0 to 256 [ 978.097202][ T30] audit: type=1800 audit(1754592490.872:516): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2702" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 978.228984][T14197] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2702'. [ 978.622549][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.126270][T14217] 9pnet_fd: Insufficient options for proto=fd [ 979.333064][T14221] netlink: 'syz.1.2712': attribute type 10 has an invalid length. [ 980.091687][T14231] loop1: detected capacity change from 0 to 512 [ 980.298998][T14231] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2715: iget: bad extended attribute block 1 [ 980.361211][T14231] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2715: couldn't read orphan inode 15 (err -117) [ 980.406328][T14231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.928050][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.054497][ T30] audit: type=1326 audit(1754592493.832:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 981.078761][ T30] audit: type=1326 audit(1754592493.832:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 981.106144][ T30] audit: type=1326 audit(1754592493.832:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14240 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 981.960934][T14248] 9pnet_fd: Insufficient options for proto=fd [ 982.387233][T14252] netlink: 'syz.1.2725': attribute type 10 has an invalid length. [ 982.561147][T14255] loop3: detected capacity change from 0 to 512 [ 982.618233][T14255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 982.772737][T14255] EXT4-fs (loop3): 1 truncate cleaned up [ 982.780902][T14255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.137888][T14266] loop0: detected capacity change from 0 to 512 [ 983.241406][T14266] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2730: iget: bad extended attribute block 1 [ 983.257715][T14266] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2730: couldn't read orphan inode 15 (err -117) [ 983.287021][T14266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.522150][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.710895][T14272] netlink: 61 bytes leftover after parsing attributes in process `syz.4.2732'. [ 983.987649][ T30] audit: type=1326 audit(1754592496.762:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 984.011067][ T30] audit: type=1326 audit(1754592496.762:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 984.033926][ T30] audit: type=1326 audit(1754592496.762:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 984.061135][ T30] audit: type=1326 audit(1754592496.832:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.3.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 984.245799][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.589250][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 984.619098][T14282] 9pnet_fd: Insufficient options for proto=fd [ 984.769797][T14285] loop4: detected capacity change from 0 to 512 [ 984.821806][T14286] netlink: 'syz.1.2738': attribute type 10 has an invalid length. [ 984.895561][T14285] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 984.907103][T14285] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 985.109638][T14285] EXT4-fs (loop4): mount failed [ 985.267222][T14295] loop1: detected capacity change from 0 to 512 [ 985.307701][T14295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 985.437249][T14295] EXT4-fs (loop1): 1 truncate cleaned up [ 985.445550][T14295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.936990][T14301] loop4: detected capacity change from 0 to 128 [ 985.981396][T14301] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 986.053239][T14301] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 986.078185][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.329835][T14305] loop0: detected capacity change from 0 to 512 [ 986.448602][T14305] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2746: iget: bad extended attribute block 1 [ 986.509539][ T30] audit: type=1326 audit(1754592499.272:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.536911][ T30] audit: type=1326 audit(1754592499.292:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.564663][ T30] audit: type=1326 audit(1754592499.292:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.587593][ T30] audit: type=1326 audit(1754592499.292:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.595348][T14305] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2746: couldn't read orphan inode 15 (err -117) [ 986.610525][ T30] audit: type=1326 audit(1754592499.292:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.709183][ T4923] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 986.748816][ T30] audit: type=1326 audit(1754592499.442:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.761520][T14305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.772394][ T30] audit: type=1326 audit(1754592499.442:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.807195][ T30] audit: type=1326 audit(1754592499.452:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.834958][ T30] audit: type=1326 audit(1754592499.452:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.859391][ T30] audit: type=1326 audit(1754592499.472:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fbf38f8ebe9 code=0x7ffc0000 [ 986.949426][T14313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 987.349570][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.507602][T14319] netlink: 'syz.1.2751': attribute type 10 has an invalid length. [ 987.546680][T14318] 9pnet_fd: Insufficient options for proto=fd [ 987.782427][T14324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2754'. [ 988.185373][T14330] loop1: detected capacity change from 0 to 256 [ 988.699907][T14325] loop4: detected capacity change from 0 to 8192 [ 989.148998][T14338] tipc: New replicast peer: 255.28.0.84 [ 989.156175][T14338] tipc: Enabled bearer , priority 10 [ 989.651963][T14354] loop1: detected capacity change from 0 to 512 [ 989.883440][T14354] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2764: iget: bad extended attribute block 1 [ 989.982825][T14354] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2764: couldn't read orphan inode 15 (err -117) [ 990.062432][T14354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.118574][T14363] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2769'. [ 990.268276][T14198] tipc: Node number set to 3678798493 [ 990.296215][T14368] 9pnet_fd: Insufficient options for proto=fd [ 990.496488][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2771'. [ 990.510033][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.032936][T14377] loop7: detected capacity change from 0 to 256 [ 991.189884][T14382] loop4: detected capacity change from 0 to 512 [ 991.228940][T14382] ext4: Unknown parameter 'noacl' [ 992.378950][T14401] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.2783'. [ 992.510443][T14404] loop3: detected capacity change from 0 to 512 [ 992.611180][T14404] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2782: iget: bad extended attribute block 1 [ 992.678325][T14404] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2782: couldn't read orphan inode 15 (err -117) [ 992.699836][T14404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.790829][T14408] 9pnet_fd: Insufficient options for proto=fd [ 993.488839][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.671506][T14420] loop0: detected capacity change from 0 to 512 [ 993.711460][T14420] ext4: Unknown parameter 'noacl' [ 995.885590][T14450] vlan0: entered promiscuous mode [ 995.891005][T14450] macvtap0: entered promiscuous mode [ 996.119411][T14453] loop0: detected capacity change from 0 to 512 [ 996.181907][T14453] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2801: iget: bad extended attribute block 1 [ 996.291841][T14453] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2801: couldn't read orphan inode 15 (err -117) [ 996.332917][T14457] loop4: detected capacity change from 0 to 512 [ 996.349244][T14457] ext4: Unknown parameter 'noacl' [ 996.395420][T14453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.908249][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.518317][T14488] loop3: detected capacity change from 0 to 512 [ 998.560415][T14488] ext4: Unknown parameter 'noacl' [ 998.724987][T13887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 998.739836][T13887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 998.793318][T13887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 998.849120][T13887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 998.882195][T13887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 999.192660][T14495] loop4: detected capacity change from 0 to 512 [ 999.396069][T14495] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2819: iget: bad extended attribute block 1 [ 999.476709][T14495] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2819: couldn't read orphan inode 15 (err -117) [ 999.586369][T14495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.153432][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.315088][T14490] chnl_net:caif_netlink_parms(): no params data found [ 1000.604200][T14515] netlink: 'syz.7.2825': attribute type 10 has an invalid length. [ 1000.627257][T14515] netlink: 'syz.7.2825': attribute type 10 has an invalid length. [ 1000.738431][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2824'. [ 1001.038324][T13887] Bluetooth: hci3: command tx timeout [ 1001.508564][ T5808] bond0: (slave syz_tun): Releasing backup interface [ 1001.693820][ T4923] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.858855][ T4923] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.927301][T14532] loop4: detected capacity change from 0 to 512 [ 1002.025083][T14532] ext4: Unknown parameter 'noacl' [ 1002.133174][ T4923] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.427036][ T4923] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.513101][T14490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.521161][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.529182][T14490] bridge_slave_0: entered allmulticast mode [ 1002.539638][T14490] bridge_slave_0: entered promiscuous mode [ 1002.631134][T14490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.639199][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.646999][T14490] bridge_slave_1: entered allmulticast mode [ 1002.656891][T14490] bridge_slave_1: entered promiscuous mode [ 1002.770313][T14546] loop4: detected capacity change from 0 to 512 [ 1002.792057][T14546] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1002.964050][T14546] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1003.026615][T14546] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1003.043586][T14546] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.2836: corrupted inode contents [ 1003.059417][T14546] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.2836: mark_inode_dirty error [ 1003.074116][T14546] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2836: invalid indirect mapped block 327680 (level 0) [ 1003.095515][T14546] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.2836: corrupted inode contents [ 1003.099047][T13887] Bluetooth: hci3: command tx timeout [ 1003.160596][T14546] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 1003.170825][T14546] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.2836: corrupted inode contents [ 1003.199234][T14546] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.2836: mark_inode_dirty error [ 1003.253775][T14546] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 1003.279050][T14546] EXT4-fs (loop4): 1 truncate cleaned up [ 1003.287251][T14546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1003.302976][T14546] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.335149][T14552] loop7: detected capacity change from 0 to 512 [ 1003.417119][ T4923] bridge_slave_1: left allmulticast mode [ 1003.423246][ T4923] bridge_slave_1: left promiscuous mode [ 1003.430204][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.520992][T14552] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2833: iget: bad extended attribute block 1 [ 1003.570503][T14552] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2833: couldn't read orphan inode 15 (err -117) [ 1003.798259][T14552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.142447][T14556] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 1004.194681][T14560] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 1004.440640][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.472336][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.509538][ T4923] bond0 (unregistering): Released all slaves [ 1004.555041][T14490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.702719][T14490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.822591][ T4923] tipc: Left network mode [ 1004.862492][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.159949][T13887] Bluetooth: hci3: command tx timeout [ 1005.183232][T14490] team0: Port device team_slave_0 added [ 1005.368063][T14490] team0: Port device team_slave_1 added [ 1005.553961][ T4923] hsr_slave_0: left promiscuous mode [ 1005.638079][ T4923] hsr_slave_1: left promiscuous mode [ 1005.646257][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.654390][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.723631][T14578] loop0: detected capacity change from 0 to 512 [ 1005.743866][T14578] ext4: Unknown parameter 'noacl' [ 1005.750225][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.759917][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.863011][T14583] loop7: detected capacity change from 0 to 512 [ 1005.889720][ T4923] veth1_macvtap: left promiscuous mode [ 1005.895561][ T4923] veth0_macvtap: left promiscuous mode [ 1005.902403][ T4923] veth1_vlan: left promiscuous mode [ 1005.908084][ T4923] veth0_vlan: left promiscuous mode [ 1005.937733][T14583] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1006.006151][T14583] EXT4-fs (loop7): 1 truncate cleaned up [ 1006.014476][T14583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.833439][ T4923] team0 (unregistering): Port device team_slave_1 removed [ 1006.962558][ T4923] team0 (unregistering): Port device team_slave_0 removed [ 1007.236296][T13887] Bluetooth: hci3: command tx timeout [ 1007.590504][T14490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.598324][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.629068][T14490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.721826][T14490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.729650][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.760814][T14490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.785182][ T4923] IPVS: stop unused estimator thread 0... [ 1007.909906][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.340510][T14605] loop7: detected capacity change from 0 to 512 [ 1008.388176][T14605] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2851: iget: bad extended attribute block 1 [ 1008.448207][T14605] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2851: couldn't read orphan inode 15 (err -117) [ 1008.476537][T14605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.479718][T14490] hsr_slave_0: entered promiscuous mode [ 1008.499338][T14490] hsr_slave_1: entered promiscuous mode [ 1008.508466][T14490] debugfs: 'hsr0' already exists in 'hsr' [ 1008.514401][T14490] Cannot create hsr debugfs directory [ 1009.289108][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.422574][T14615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1009.504985][T14616] loop4: detected capacity change from 0 to 512 [ 1009.550522][T14616] ext4: Unknown parameter 'noacl' [ 1009.794149][T14620] syzkaller1: entered promiscuous mode [ 1009.800055][T14620] syzkaller1: entered allmulticast mode [ 1009.998472][T14622] loop3: detected capacity change from 0 to 512 [ 1010.033693][T14622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1010.203487][T14622] EXT4-fs (loop3): 1 truncate cleaned up [ 1010.212097][T14622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.253383][T14490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1010.396007][T14628] syzkaller0: entered promiscuous mode [ 1010.402194][T14628] syzkaller0: entered allmulticast mode [ 1010.418413][T14490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1010.480347][T14490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1010.541549][T14490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1011.141663][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.820862][T14647] loop0: detected capacity change from 0 to 512 [ 1011.963290][T14647] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2867: iget: bad extended attribute block 1 [ 1011.985701][T14647] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2867: couldn't read orphan inode 15 (err -117) [ 1012.005451][T14647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.043178][T14490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.128607][T14490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.185920][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.193614][ T4923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.296489][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.304264][ T4923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.772249][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.822535][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2869'. [ 1013.001967][T14659] loop4: detected capacity change from 0 to 512 [ 1013.029911][T14659] ext4: Unknown parameter 'noacl' [ 1013.099971][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1013.100050][ T30] audit: type=1326 audit(1754592525.882:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.261588][ T30] audit: type=1326 audit(1754592525.912:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.284875][ T30] audit: type=1326 audit(1754592525.912:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.308103][ T30] audit: type=1326 audit(1754592525.912:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.331112][ T30] audit: type=1326 audit(1754592525.922:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.357276][ T30] audit: type=1326 audit(1754592525.922:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.385950][ T30] audit: type=1326 audit(1754592525.922:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.409736][ T30] audit: type=1326 audit(1754592525.922:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.432984][ T30] audit: type=1326 audit(1754592525.922:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.456685][ T30] audit: type=1326 audit(1754592525.922:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1013.618672][T14669] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1013.712954][T14662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1015.149414][T14490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.511371][T14695] loop4: detected capacity change from 0 to 512 [ 1015.546898][T14695] ext4: Unknown parameter 'noacl' [ 1015.832618][T14490] veth0_vlan: entered promiscuous mode [ 1015.920295][T14490] veth1_vlan: entered promiscuous mode [ 1015.981366][T14699] loop3: detected capacity change from 0 to 512 [ 1016.040751][T14699] journal_path: Lookup failure for './file0/../file0' [ 1016.048064][T14699] EXT4-fs: error: could not find journal device path [ 1016.235842][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2886'. [ 1016.245633][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2886'. [ 1016.254945][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2886'. [ 1016.264740][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2886'. [ 1016.366943][T14490] veth0_macvtap: entered promiscuous mode [ 1016.454791][T14490] veth1_macvtap: entered promiscuous mode [ 1016.583407][T14490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.655047][T14490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.777795][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.799459][ T1896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.857892][ T1896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.904965][ T1896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.970628][T14710] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2890'. [ 1017.561263][T14721] loop4: detected capacity change from 0 to 512 [ 1017.601556][T14721] ext4: Unknown parameter 'noacl' [ 1018.288972][T14729] loop0: detected capacity change from 0 to 512 [ 1018.335848][T14729] journal_path: Lookup failure for './file0/../file0' [ 1018.343153][T14729] EXT4-fs: error: could not find journal device path [ 1018.537285][T14736] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1018.969310][T14743] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2904'. [ 1019.570693][T14755] loop7: detected capacity change from 0 to 512 [ 1019.612026][T14755] ext4: Unknown parameter 'noacl' [ 1019.885695][T14750] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1020.053913][T14759] syzkaller0: entered promiscuous mode [ 1020.059747][T14759] syzkaller0: entered allmulticast mode [ 1020.354784][T14766] loop7: detected capacity change from 0 to 512 [ 1020.412719][T14766] journal_path: Lookup failure for './file0/../file0' [ 1020.419996][T14766] EXT4-fs: error: could not find journal device path [ 1020.484666][T14764] loop0: detected capacity change from 0 to 2048 [ 1020.906237][T14773] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2914'. [ 1021.886716][T14791] 9pnet_fd: Insufficient options for proto=fd [ 1022.208578][T14796] loop4: detected capacity change from 0 to 512 [ 1022.279210][T14796] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1022.309010][T14798] loop0: detected capacity change from 0 to 512 [ 1022.367886][T14798] journal_path: Lookup failure for './file0/../file0' [ 1022.375087][T14798] EXT4-fs: error: could not find journal device path [ 1022.426180][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1022.426259][ T30] audit: type=1326 audit(1754592535.202:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.459415][ T30] audit: type=1326 audit(1754592535.222:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.478169][T14796] EXT4-fs (loop4): 1 orphan inode deleted [ 1022.483753][ T30] audit: type=1326 audit(1754592535.222:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.488298][T14796] EXT4-fs (loop4): 1 truncate cleaned up [ 1022.511658][ T30] audit: type=1326 audit(1754592535.242:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.519344][T14796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.539779][ T30] audit: type=1326 audit(1754592535.242:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.579334][ T30] audit: type=1326 audit(1754592535.242:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.604342][ T30] audit: type=1326 audit(1754592535.242:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.792687][T14805] loop7: detected capacity change from 0 to 1024 [ 1022.801376][T14805] EXT4-fs: Ignoring removed orlov option [ 1022.861863][ T30] audit: type=1326 audit(1754592535.422:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.888604][ T30] audit: type=1326 audit(1754592535.422:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.913621][ T30] audit: type=1326 audit(1754592535.422:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14799 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130338ebe9 code=0x7ffc0000 [ 1022.958025][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.987587][T14805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.064311][T14805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.111723][T14813] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2928'. [ 1023.608705][T14817] loop0: detected capacity change from 0 to 128 [ 1023.623893][ T1896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.632446][ T1896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.805170][ T4004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.813899][ T4004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.842407][T14822] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2931'. [ 1023.855630][T14821] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2931'. [ 1025.298891][T14841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1025.675548][T14847] loop1: detected capacity change from 0 to 128 [ 1025.803455][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1025.818899][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1025.842275][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1025.865332][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1025.896080][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.949004][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1027.247048][T14868] loop4: detected capacity change from 0 to 1024 [ 1027.300428][T14868] EXT4-fs: Ignoring removed bh option [ 1027.306523][T14868] EXT4-fs: inline encryption not supported [ 1027.329765][T14849] chnl_net:caif_netlink_parms(): no params data found [ 1027.389467][T14868] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1027.453651][T14868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1027.547243][T14868] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2950: lblock 2 mapped to illegal pblock 2 (length 1) [ 1027.619918][T14868] __quota_error: 18 callbacks suppressed [ 1027.620012][T14868] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1027.634948][T14868] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2950: lblock 0 mapped to illegal pblock 48 (length 1) [ 1027.701723][T14868] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1027.713294][T14868] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2950: Failed to acquire dquot type 0 [ 1027.863644][T14868] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1027.914900][T14868] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2950: mark_inode_dirty error [ 1027.960855][T14868] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1027.971898][T14868] EXT4-fs (loop4): 1 orphan inode deleted [ 1027.980355][T14868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.035770][ T4073] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 1028.058036][ T5811] Bluetooth: hci0: command tx timeout [ 1028.156663][ T4073] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1028.165821][ T4073] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 1028.308738][T14868] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1028.641502][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.840991][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1028.851380][T12533] bond0: (slave syz_tun): Releasing backup interface [ 1029.121327][ T4073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.592811][ T4073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.656918][T14849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.665260][T14849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.673556][T14849] bridge_slave_0: entered allmulticast mode [ 1029.683512][T14849] bridge_slave_0: entered promiscuous mode [ 1029.745321][T14849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.759016][T14849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.766895][T14849] bridge_slave_1: entered allmulticast mode [ 1029.776944][T14849] bridge_slave_1: entered promiscuous mode [ 1029.884895][ T4073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.107902][ T5811] Bluetooth: hci0: command tx timeout [ 1030.145389][ T4073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.364844][T14849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.482236][T14849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.935556][T14849] team0: Port device team_slave_0 added [ 1031.664976][ T4073] team0: Port device bond0 removed [ 1031.688176][ T4073] bond0 (unregistering): Released all slaves [ 1031.792583][T14849] team0: Port device team_slave_1 added [ 1031.917631][ T4073] tipc: Left network mode [ 1032.156129][T14849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.163538][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.187945][ T5811] Bluetooth: hci0: command tx timeout [ 1032.196589][T14849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.293195][T14849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.300628][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.327970][T14849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.410830][T14918] loop7: detected capacity change from 0 to 1764 [ 1032.512146][T14920] loop1: detected capacity change from 0 to 512 [ 1032.559953][ T4073] hsr_slave_0: left promiscuous mode [ 1032.578109][ T4073] hsr_slave_1: left promiscuous mode [ 1032.636375][T14920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.652035][T14920] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.682247][ T4073] veth1_macvtap: left promiscuous mode [ 1032.689198][ T4073] veth0_macvtap: left promiscuous mode [ 1032.699489][ T4073] veth1_vlan: left promiscuous mode [ 1033.472036][T14490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.573046][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.580116][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.052310][ T4073] team0 (unregistering): Port device dummy0 removed [ 1034.328933][ T5811] Bluetooth: hci0: command tx timeout [ 1034.559195][T14849] hsr_slave_0: entered promiscuous mode [ 1034.569731][T14849] hsr_slave_1: entered promiscuous mode [ 1034.580657][T14849] debugfs: 'hsr0' already exists in 'hsr' [ 1034.586596][T14849] Cannot create hsr debugfs directory [ 1035.155522][ T4073] IPVS: stop unused estimator thread 0... [ 1035.789126][T14948] loop1: detected capacity change from 0 to 512 [ 1035.905904][T14948] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2978: iget: bad extended attribute block 1 [ 1035.942549][T14948] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2978: couldn't read orphan inode 15 (err -117) [ 1035.959543][T14948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.026796][T14953] loop0: detected capacity change from 0 to 512 [ 1036.102702][T14953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1036.151408][T14953] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.2979: invalid indirect mapped block 4294967295 (level 0) [ 1036.303539][T14957] loop4: detected capacity change from 0 to 512 [ 1036.332349][T14953] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.353153][T14953] EXT4-fs (loop0): 1 orphan inode deleted [ 1036.360248][T14953] EXT4-fs (loop0): 1 truncate cleaned up [ 1036.369771][T14953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.468886][T14957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.485529][T14957] ext4 filesystem being mounted at /631/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.538772][T14490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.545176][T14849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1036.602769][T14849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1036.650143][T14849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1036.720740][T14849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1036.761813][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.929487][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.185955][T14849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.378725][T14849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.471409][T14987] loop4: detected capacity change from 0 to 512 [ 1038.493609][ T4004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.501339][ T4004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.521447][T14987] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1038.556292][T14987] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1038.565522][T14987] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1038.580885][T14987] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.2991: corrupted inode contents [ 1038.605147][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.613075][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.624432][T14987] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.2991: mark_inode_dirty error [ 1038.645688][T14987] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2991: invalid indirect mapped block 327680 (level 0) [ 1038.666520][T14987] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.2991: corrupted inode contents [ 1038.693892][T14987] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 1038.714476][T14987] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.2991: corrupted inode contents [ 1038.741376][T14987] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.2991: mark_inode_dirty error [ 1038.781598][T14987] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 1038.792637][T14987] EXT4-fs (loop4): 1 truncate cleaned up [ 1038.801425][T14987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1038.816678][T14987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.140495][T14991] loop7: detected capacity change from 0 to 512 [ 1039.339246][T14991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.356436][T14991] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.609325][ T30] audit: type=1800 audit(1754592552.392:614): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2993" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1039.816084][T15005] loop4: detected capacity change from 0 to 128 [ 1040.011394][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.558986][T14849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.205770][T14849] veth0_vlan: entered promiscuous mode [ 1041.379612][T14849] veth1_vlan: entered promiscuous mode [ 1041.755772][T14849] veth0_macvtap: entered promiscuous mode [ 1041.844510][T14849] veth1_macvtap: entered promiscuous mode [ 1042.041848][T14849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.127919][T14849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.212070][T15036] loop0: detected capacity change from 0 to 128 [ 1042.270145][ T4073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.304054][ T4923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.353131][ T4004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.434315][ T4923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.692202][T15063] loop9: detected capacity change from 0 to 7 [ 1043.719044][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.727538][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.735726][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.744138][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.752711][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.766166][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.775888][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.784212][T15063] ldm_validate_partition_table(): Disk read failed. [ 1043.793535][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.804079][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.812496][T15063] Buffer I/O error on dev loop9, logical block 0, async page read [ 1043.821230][T15063] Dev loop9: unable to read RDB block 0 [ 1043.827316][T15063] loop9: unable to read partition table [ 1043.834445][T15063] loop9: partition table beyond EOD, truncated [ 1043.840989][T15063] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1043.840989][T15063] ) failed (rc=-5) [ 1044.585119][T15079] loop1: detected capacity change from 0 to 512 [ 1044.635582][T15079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1044.703320][T15079] EXT4-fs (loop1): 1 truncate cleaned up [ 1044.711703][T15079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.733963][T15071] loop0: detected capacity change from 0 to 8192 [ 1044.814744][T15071] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1045.423819][T14490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.940809][T15094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.219971][T15094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.342248][T15094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.452264][T15094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.901905][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.058273][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.198694][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.324927][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.613031][ T30] audit: type=1800 audit(1754592560.312:615): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3034" name="/" dev="9p" ino=2 res=0 errno=0 [ 1048.606870][T15118] serio: Serial port ptm0 [ 1048.799041][T15122] loop1: detected capacity change from 0 to 512 [ 1048.826328][T15122] ext4: Unknown parameter 'noacl' [ 1049.050624][T15128] loop0: detected capacity change from 0 to 512 [ 1049.108267][T15128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1049.213613][T15128] EXT4-fs (loop0): 1 truncate cleaned up [ 1049.222154][T15128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.907138][T15143] loop4: detected capacity change from 0 to 164 [ 1049.930278][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.451763][ T30] audit: type=1326 audit(1754592563.072:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 1050.475355][ T30] audit: type=1326 audit(1754592563.072:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 1050.498653][ T30] audit: type=1326 audit(1754592563.142:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 1050.525135][ T30] audit: type=1326 audit(1754592563.142:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 1050.549862][ T30] audit: type=1326 audit(1754592563.142:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd337f8ebe9 code=0x7ffc0000 [ 1050.979908][T15158] serio: Serial port ptm0 [ 1051.782601][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.791053][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.959025][T15162] sctp: failed to load transform for md5: -2 [ 1052.072576][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.081290][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.228685][T15177] loop1: detected capacity change from 0 to 512 [ 1052.369634][T15177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1052.643425][T15177] EXT4-fs (loop1): 1 truncate cleaned up [ 1052.651800][T15177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.219971][T15189] 9pnet_fd: Insufficient options for proto=fd [ 1053.313793][T14490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.923875][ T76] ===================================================== [ 1054.932461][ T76] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x15e/0x9a0 [ 1054.941153][ T76] n_tty_receive_buf_closing+0x15e/0x9a0 [ 1054.947018][ T76] n_tty_receive_buf_common+0x19d5/0x2540 [ 1054.953068][ T76] n_tty_receive_buf2+0x4c/0x60 [ 1054.958606][ T76] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1054.964014][ T76] tty_port_default_receive_buf+0xd7/0x1a0 [ 1054.970149][ T76] flush_to_ldisc+0x43b/0xe30 [ 1054.975005][ T76] process_scheduled_works+0xb91/0x1d80 [ 1054.980905][ T76] worker_thread+0xedf/0x1590 [ 1054.985852][ T76] kthread+0xd59/0xf00 [ 1054.990450][ T76] ret_from_fork+0x1e3/0x310 [ 1054.995337][ T76] ret_from_fork_asm+0x1a/0x30 [ 1054.999569][T13887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1055.000639][ T76] [ 1055.000672][ T76] Uninit was created at: [ 1055.000887][ T76] __kmalloc_noprof+0x95f/0x1310 [ 1055.013177][T13887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1055.014864][ T76] __tty_buffer_request_room+0x3d4/0x7a0 [ 1055.015018][ T76] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1055.015158][ T76] uart_insert_char+0x368/0x930 [ 1055.015306][ T76] serial8250_read_char+0x1ba/0x670 [ 1055.015497][ T76] serial8250_handle_irq+0x930/0x1110 [ 1055.035203][T13887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1055.042614][ T76] serial8250_default_handle_irq+0x116/0x330 [ 1055.076497][ T76] serial8250_interrupt+0xc8/0x400 [ 1055.081973][T13887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1055.089411][ T76] __handle_irq_event_percpu+0x11f/0xbf0 [ 1055.089570][ T76] handle_irq_event+0xe0/0x2a0 [ 1055.089699][ T76] handle_edge_irq+0x2a9/0xb50 [ 1055.089814][ T76] __common_interrupt+0xa2/0x220 [ 1055.090015][ T76] common_interrupt+0x94/0xb0 [ 1055.090172][ T76] asm_common_interrupt+0x2b/0x40 [ 1055.090297][ T76] [ 1055.090344][ T76] CPU: 1 UID: 0 PID: 76 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(none) [ 1055.144010][ T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1055.154472][ T76] Workqueue: events_unbound flush_to_ldisc [ 1055.160714][ T76] ===================================================== [ 1055.167960][ T76] Disabling lock debugging due to kernel taint [ 1055.174267][ T76] Kernel panic - not syncing: kmsan.panic set ... [ 1055.180961][ T76] CPU: 1 UID: 0 PID: 76 Comm: kworker/u8:5 Tainted: G B 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(none) [ 1055.194409][ T76] Tainted: [B]=BAD_PAGE [ 1055.198692][ T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1055.209020][ T76] Workqueue: events_unbound flush_to_ldisc [ 1055.215143][ T76] Call Trace: [ 1055.218553][ T76] [ 1055.221618][ T76] __dump_stack+0x26/0x30 [ 1055.226192][ T76] dump_stack_lvl+0x53/0x270 [ 1055.231107][ T76] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1055.237155][ T76] dump_stack+0x1e/0x25 [ 1055.241522][ T76] vpanic+0x361/0xc50 [ 1055.245755][ T76] panic+0x15d/0x160 [ 1055.249941][ T76] kmsan_report+0x31c/0x320 [ 1055.254695][ T76] ? __msan_warning+0x1b/0x30 [ 1055.259642][ T76] ? n_tty_receive_buf_closing+0x15e/0x9a0 [ 1055.265692][ T76] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 1055.271841][ T76] ? n_tty_receive_buf2+0x4c/0x60 [ 1055.277185][ T76] ? tty_ldisc_receive_buf+0xc3/0x2c0 [ 1055.282786][ T76] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1055.289002][ T76] ? flush_to_ldisc+0x43b/0xe30 [ 1055.294039][ T76] ? process_scheduled_works+0xb91/0x1d80 [ 1055.299991][ T76] ? worker_thread+0xedf/0x1590 [ 1055.305092][ T76] ? kthread+0xd59/0xf00 [ 1055.309525][ T76] ? ret_from_fork+0x1e3/0x310 [ 1055.314545][ T76] ? ret_from_fork_asm+0x1a/0x30 [ 1055.319730][ T76] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1055.325898][ T76] ? __update_load_avg_cfs_rq+0xc30/0x1010 [ 1055.331998][ T76] ? update_curr_dl_se+0x2ad/0xbf0 [ 1055.337315][ T76] ? kmsan_get_metadata+0xfb/0x160 [ 1055.342684][ T76] ? kmsan_get_metadata+0xfb/0x160 [ 1055.348040][ T76] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1055.354104][ T76] ? kmsan_get_metadata+0xfb/0x160 [ 1055.359516][ T76] __msan_warning+0x1b/0x30 [ 1055.364241][ T76] n_tty_receive_buf_closing+0x15e/0x9a0 [ 1055.370268][ T76] n_tty_receive_buf_common+0x19d5/0x2540 [ 1055.376284][ T76] ? _raw_spin_lock+0x11/0x60 [ 1055.381252][ T76] ? stack_depot_save_flags+0x35/0x7b0 [ 1055.387221][ T76] n_tty_receive_buf2+0x4c/0x60 [ 1055.392316][ T76] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1055.398158][ T76] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1055.403651][ T76] tty_port_default_receive_buf+0xd7/0x1a0 [ 1055.409801][ T76] flush_to_ldisc+0x43b/0xe30 [ 1055.414762][ T76] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1055.421458][ T76] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1055.426929][ T76] process_scheduled_works+0xb91/0x1d80 [ 1055.432834][ T76] worker_thread+0xedf/0x1590 [ 1055.437826][ T76] kthread+0xd59/0xf00 [ 1055.442111][ T76] ? __pfx_worker_thread+0x10/0x10 [ 1055.447520][ T76] ? __pfx_kthread+0x10/0x10 [ 1055.452386][ T76] ret_from_fork+0x1e3/0x310 [ 1055.457162][ T76] ? __pfx_kthread+0x10/0x10 [ 1055.461949][ T76] ret_from_fork_asm+0x1a/0x30 [ 1055.466999][ T76] [ 1055.470522][ T76] Kernel Offset: disabled [ 1055.474934][ T76] Rebooting in 86400 seconds..