last executing test programs: 1m56.837366656s ago: executing program 4 (id=73): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1m56.173095529s ago: executing program 4 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m55.812832293s ago: executing program 4 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000001290200180100002020732500000000002020207b0af8ff00000000bfa100000000000016010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xe, 0xfd4, &(0x7f0000001e00)=""/4052, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffecb, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r2, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={r4}, 0x8) 1m54.537368524s ago: executing program 4 (id=91): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 1m54.05157934s ago: executing program 4 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) faccessat2(0xffffffffffffff9c, 0x0, 0x7, 0x1100) 1m53.524543039s ago: executing program 4 (id=99): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x2, 0x401, 0x1) 1m53.184028132s ago: executing program 32 (id=99): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x2, 0x401, 0x1) 5.742245378s ago: executing program 0 (id=1088): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101441, 0xe2) fallocate(r2, 0x8, 0x4000, 0x4000) 5.741826368s ago: executing program 2 (id=1090): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000480)=0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2151449, &(0x7f0000000580)={[{@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noblock_validity}, {@resuid}, {@debug}, {@dioread_lock}, {@journal_async_commit}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x13}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") 4.592291567s ago: executing program 2 (id=1093): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x10c6a) 4.567212459s ago: executing program 0 (id=1094): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmsg$inet_sctp(r4, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000001540)=[{&(0x7f00000002c0)="ed", 0x1}], 0x1, 0x0, 0x0, 0x820}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) 4.501348265s ago: executing program 1 (id=1095): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000500)='fib6_table_lookup\x00', r3, 0x0, 0xd}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 4.410104593s ago: executing program 2 (id=1096): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xd192}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) 4.281404806s ago: executing program 3 (id=1097): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) 4.095609943s ago: executing program 5 (id=1098): syz_clone(0x100200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_user}]}}) 3.739583207s ago: executing program 2 (id=1099): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x22020600) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 3.739422157s ago: executing program 1 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.739142337s ago: executing program 3 (id=1101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.129756109s ago: executing program 5 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) close_range(r1, r1, 0x200000000000000) 1.913337939s ago: executing program 0 (id=1103): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='host1x_wait_cdma\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="17ffffffffffffdf000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a0000001400078005001500000000000800"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000200000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) 1.912918029s ago: executing program 1 (id=1104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="020104080a0000002cbd7000ffdbdf2502001300030000002dbd70000435000002001000000004d4000004d300000000040004007e000000030000000000000005000000000000000100000000000000b23cb66bfc180ce371fa14ac67608b5cced8a5803a674613adf0cc2ab15474595b2d7a0f484b6d835985e8e987d3d536a4503ea8dd3dc7efb17968b7aefdd7119b139fb033fba8bf"], 0x50}}, 0x4008000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x10, 0x7ffc0002}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) mmap(&(0x7f0000036000/0x4000)=nil, 0x4000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600dc000000000004ffffff7f", @ANYRES64=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) set_robust_list(&(0x7f00000003c0)={0x0, 0x4}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.912682739s ago: executing program 2 (id=1105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r1}) 1.912623779s ago: executing program 3 (id=1106): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000080)) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) 1.752574044s ago: executing program 5 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffe8a) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.602681998s ago: executing program 3 (id=1108): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) 1.509441677s ago: executing program 0 (id=1109): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 1.439904024s ago: executing program 3 (id=1110): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.295241108s ago: executing program 0 (id=1111): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, 0x0}, 0x80c1) 949.79582ms ago: executing program 2 (id=1112): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) 865.384618ms ago: executing program 0 (id=1113): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmsg$inet_sctp(r4, &(0x7f00000015c0)={&(0x7f0000000200)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000001540)=[{&(0x7f00000002c0)="ed", 0x1}], 0x1, 0x0, 0x0, 0x820}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) 865.041258ms ago: executing program 3 (id=1114): syz_clone(0x100200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_user}]}}) 864.940498ms ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x13, &(0x7f0000000280)=""/139, &(0x7f0000000000)=0x8b) 805.318164ms ago: executing program 1 (id=1116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff2a2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 714.008672ms ago: executing program 5 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x10c, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x64}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eaf89d3fd0b41384f65d292c7c4f4c58caca1d352b68c13ac10c69632a8ccd97"}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x10c}}, 0x0) 273.250864ms ago: executing program 5 (id=1118): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") 273.008594ms ago: executing program 1 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0xfff, 0x0, 0x0}) 0s ago: executing program 1 (id=1120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='./file1\x00') kernel console output (not intermixed with test programs): v6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.877206][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.883710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.884444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.896604][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.649527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.649698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.797327][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.925813][ T4783] loop3: detected capacity change from 0 to 2048 [ 102.997078][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 103.018476][ T4783] Alternate GPT is invalid, using primary GPT. [ 103.074021][ T4755] tty tty25: ldisc open failed (-12), clearing slot 24 [ 103.139417][ T4786] device tunl0 entered promiscuous mode [ 103.177965][ T4783] loop3: p2 p3 p7 [ 103.732311][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 103.744086][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 103.765320][ T4794] loop3: detected capacity change from 0 to 512 [ 103.789815][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 103.827736][ T4794] EXT4-fs: Ignoring removed i_version option [ 103.835176][ T4794] EXT4-fs: Ignoring removed bh option [ 104.022169][ T4794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.101535][ T4794] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.171866][ T27] audit: type=1326 audit(1762858798.265:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4d7b86567 code=0x7ffc0000 [ 104.237050][ T27] audit: type=1326 audit(1762858798.285:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4d7b2b779 code=0x7ffc0000 [ 104.304733][ T27] audit: type=1326 audit(1762858798.285:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4d7b86567 code=0x7ffc0000 [ 104.331049][ T27] audit: type=1326 audit(1762858798.285:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4d7b2b779 code=0x7ffc0000 [ 104.625767][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.655138][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.739419][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.778033][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.780636][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 104.807671][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.831386][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.860755][ T4682] device veth0_vlan entered promiscuous mode [ 104.908599][ T4682] device veth1_vlan entered promiscuous mode [ 105.023609][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.043175][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.070411][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.083761][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 105.136263][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.178551][ T4682] device veth0_macvtap entered promiscuous mode [ 105.199829][ T4682] device veth1_macvtap entered promiscuous mode [ 105.242306][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.264200][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.284788][ T4852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 105.304204][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.325952][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.347558][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.379605][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.397260][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.428399][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.455318][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.482912][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.512082][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.544704][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.567560][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.598427][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.628247][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.659237][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.696639][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.731709][ T4852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 105.732063][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.763578][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.775171][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.786204][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.807870][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.828964][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.857071][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.879635][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.906277][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.935624][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.976511][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.007728][ T4682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.016507][ T4682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.042779][ T4682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.060912][ T4682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277925][ T4837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.286103][ T4837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.322611][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.373956][ T4837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.383417][ T4837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.401394][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.638401][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 106.638417][ T27] audit: type=1800 audit(1762858800.735:98): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.144" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 106.730711][ T4878] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 106.889181][ T27] audit: type=1326 audit(1762858800.985:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 106.964741][ T27] audit: type=1326 audit(1762858800.985:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.037026][ T27] audit: type=1326 audit(1762858800.985:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.107300][ T27] audit: type=1326 audit(1762858800.985:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.114041][ T4889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.169'. [ 107.158415][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 107.183263][ T27] audit: type=1326 audit(1762858800.985:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.338568][ T27] audit: type=1326 audit(1762858801.435:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.417373][ T27] audit: type=1326 audit(1762858801.435:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.478713][ T27] audit: type=1326 audit(1762858801.435:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.508094][ T4898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'. [ 107.523675][ T27] audit: type=1326 audit(1762858801.475:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 107.555711][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 108.141265][ T4918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 108.377763][ T4923] loop3: detected capacity change from 0 to 512 [ 108.450832][ T4923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.481182][ T4923] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.544368][ T4923] EXT4-fs (loop3): unmounting filesystem. [ 108.556018][ T4932] hub 9-0:1.0: USB hub found [ 108.583390][ T4932] hub 9-0:1.0: 1 port detected [ 109.790561][ T4975] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.202' sets config #1 [ 110.426750][ T4992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.210'. [ 110.439143][ T4992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 111.412369][ T5010] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 111.505940][ T5013] loop5: detected capacity change from 0 to 512 [ 111.543535][ T5010] team0: Port device dummy0 added [ 111.549378][ T5015] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 111.595788][ T5015] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.631126][ T5013] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 111.651190][ T5015] team0: Failed to send options change via netlink (err -105) [ 111.667531][ T5015] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.713687][ T5019] loop3: detected capacity change from 0 to 1024 [ 111.725409][ T5019] EXT4-fs: Ignoring removed orlov option [ 111.731871][ T5013] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.743762][ T5015] team0: Port device dummy0 removed [ 111.774436][ T5015] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.791294][ T5019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.832336][ T5013] team0: Device vxcan3 is of different type [ 111.860544][ T5019] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.970907][ T5026] loop2: detected capacity change from 0 to 164 [ 111.976439][ T5019] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.221: lblock 3 mapped to illegal pblock 3 (length 3) [ 112.026027][ T5019] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 112.057024][ T5026] Unable to read rock-ridge attributes [ 112.065722][ T27] kauditd_printk_skb: 83 callbacks suppressed [ 112.065736][ T27] audit: type=1326 audit(1762858806.155:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.097245][ T5026] Unable to read rock-ridge attributes [ 112.103683][ T5019] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.103683][ T5019] [ 112.134470][ T27] audit: type=1326 audit(1762858806.195:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.188814][ T5027] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.221: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.244574][ T27] audit: type=1326 audit(1762858806.195:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.288042][ T5027] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.221: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.328660][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 112.344447][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 112.347491][ T27] audit: type=1326 audit(1762858806.195:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.385603][ T5027] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.221: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.438268][ T5034] device veth1_macvtap left promiscuous mode [ 112.466437][ T5027] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.221: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.502451][ T27] audit: type=1326 audit(1762858806.195:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.559208][ T27] audit: type=1326 audit(1762858806.195:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.581450][ T5041] loop5: detected capacity change from 0 to 512 [ 112.625152][ T5041] EXT4-fs: Ignoring removed i_version option [ 112.637464][ T27] audit: type=1326 audit(1762858806.215:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.664690][ T5041] EXT4-fs: Ignoring removed bh option [ 112.666672][ T4837] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:38: lblock 8 mapped to illegal pblock 8 (length 8) [ 112.710772][ T27] audit: type=1326 audit(1762858806.215:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.717075][ T4837] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 112.774482][ T27] audit: type=1326 audit(1762858806.215:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.777851][ T4837] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.777851][ T4837] [ 112.818082][ T27] audit: type=1326 audit(1762858806.215:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 112.842527][ T5041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 112.884158][ T5041] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.898057][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 113.179549][ T5051] capability: warning: `syz.3.229' uses deprecated v2 capabilities in a way that may be insecure [ 113.232134][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 114.120576][ T5054] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.147398][ T5067] loop3: detected capacity change from 0 to 128 [ 114.462970][ T5054] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.648417][ T5070] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.706040][ T5075] loop2: detected capacity change from 0 to 512 [ 114.756479][ T5075] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.799702][ T5075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.843225][ T5054] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.911006][ T5075] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.240: Invalid block bitmap block 0 in block_group 0 [ 114.976615][ T5070] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.989222][ T5075] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 115.007895][ T5075] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.240: attempt to clear invalid blocks 983261 len 1 [ 115.032581][ T5075] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.240: Invalid inode table block 0 in block_group 0 [ 115.092069][ T5075] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 115.121241][ T5054] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.127873][ T5075] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 115.206482][ T5075] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.240: Invalid inode table block 0 in block_group 0 [ 115.233559][ T5075] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 115.254868][ T5070] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.265543][ T5075] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.240: mark_inode_dirty error [ 115.265917][ T5075] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 115.292826][ T5075] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.240: Invalid inode table block 0 in block_group 0 [ 115.306610][ T5075] EXT4-fs (loop2): 1 truncate cleaned up [ 115.312438][ T5086] loop3: detected capacity change from 0 to 512 [ 115.324496][ T5086] EXT4-fs: Ignoring removed i_version option [ 115.345412][ T5086] EXT4-fs: Ignoring removed bh option [ 115.364416][ T5075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.384043][ T5075] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.240: Invalid inode table block 0 in block_group 0 [ 115.420193][ T5086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.435380][ T5075] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 115.460404][ T5086] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.533104][ T5070] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.605299][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 115.607726][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 115.665688][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 115.839621][ T5096] loop3: detected capacity change from 0 to 2048 [ 115.954567][ T5096] Alternate GPT is invalid, using primary GPT. [ 115.967880][ T5096] loop3: p1 p2 p3 [ 115.971794][ T5096] loop3: partition table partially beyond EOD, truncated [ 116.221859][ T5054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.294818][ T5054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.381182][ T5054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.381887][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 116.404636][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 116.420249][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 116.468115][ T5054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.555766][ T5070] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.642015][ T5070] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.678411][ T5070] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.704164][ T5114] unsupported nla_type 52263 [ 116.799503][ T5070] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.967201][ T5121] loop3: detected capacity change from 0 to 512 [ 117.048159][ T5121] EXT4-fs: Ignoring removed i_version option [ 117.054320][ T5121] EXT4-fs: Ignoring removed bh option [ 117.118780][ T5121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.174175][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 117.174190][ T27] audit: type=1326 audit(1762858811.265:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 117.217644][ T5121] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.261498][ T27] audit: type=1326 audit(1762858811.335:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 117.309117][ T5131] loop5: detected capacity change from 0 to 512 [ 118.221119][ T5131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.261196][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 118.271953][ T5131] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.303477][ T5131] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.258: corrupted inode contents [ 118.365941][ T5131] EXT4-fs error (device loop5): ext4_dirty_inode:6133: inode #2: comm syz.5.258: mark_inode_dirty error [ 118.458134][ T5131] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.258: corrupted inode contents [ 118.482585][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 118.537384][ T5149] device syzkaller0 entered promiscuous mode [ 118.610863][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 118.639792][ T27] audit: type=1326 audit(1762858812.735:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 118.682905][ T5152] syz.2.264[5152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.683012][ T5152] syz.2.264[5152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.766179][ T5147] device syzkaller0 left promiscuous mode [ 118.809988][ T27] audit: type=1326 audit(1762858812.735:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 118.822213][ T5156] loop5: detected capacity change from 0 to 512 [ 118.856797][ T27] audit: type=1326 audit(1762858812.765:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 118.921475][ T5156] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.265: error while reading EA inode 32 err=-116 [ 118.943489][ T27] audit: type=1326 audit(1762858812.765:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 118.979972][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.987689][ T27] audit: type=1326 audit(1762858812.765:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 119.000501][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.017043][ T27] audit: type=1326 audit(1762858812.775:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 119.045956][ T27] audit: type=1326 audit(1762858812.775:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 119.070933][ T27] audit: type=1326 audit(1762858812.775:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 119.103592][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.114347][ T5156] EXT4-fs (loop5): Remounting filesystem read-only [ 119.137917][ T5156] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.265: error while reading EA inode 32 err=-116 [ 119.151661][ T5160] device bridge_slave_0 left promiscuous mode [ 119.176848][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.197105][ T5156] EXT4-fs (loop5): Remounting filesystem read-only [ 119.217897][ T5156] EXT4-fs (loop5): 1 orphan inode deleted [ 119.223719][ T5156] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 119.257351][ T5160] device bridge_slave_1 left promiscuous mode [ 119.297488][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.346126][ T5160] bond0: (slave bond_slave_0): Releasing backup interface [ 119.421713][ T5160] bond0: (slave bond_slave_1): Releasing backup interface [ 119.423995][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 119.570252][ T5160] team0: Port device team_slave_0 removed [ 119.602113][ T5160] team0: Port device team_slave_1 removed [ 119.622635][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.646740][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.669624][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.685165][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.724754][ T5165] netlink: 'syz.3.268': attribute type 10 has an invalid length. [ 119.783976][ T5165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 119.822800][ T5165] batman_adv: batadv0: Adding interface: virt_wifi0 [ 119.844276][ T5165] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.880605][ T5165] batman_adv: batadv0: Interface activated: virt_wifi0 [ 120.168666][ T5189] loop2: detected capacity change from 0 to 1024 [ 120.223670][ T5189] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 120.279944][ T5189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.323069][ T5189] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.278: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.361857][ T5189] EXT4-fs (loop2): 1 orphan inode deleted [ 120.368666][ T5189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.412628][ T5189] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.278: bg 0: block 10: padding at end of block bitmap is not set [ 120.509628][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 120.637754][ T5197] IPVS: stopping master sync thread 5198 ... [ 121.148913][ T5209] loop5: detected capacity change from 0 to 512 [ 121.190168][ T5211] device syzkaller1 entered promiscuous mode [ 121.208493][ T5209] EXT4-fs: Ignoring removed bh option [ 121.327368][ T5209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 121.387087][ T5209] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.762875][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 121.780999][ T5231] loop3: detected capacity change from 0 to 128 [ 121.819290][ T5231] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.884871][ T5231] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.912886][ T5233] netlink: 'syz.1.296': attribute type 13 has an invalid length. [ 122.096877][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.151170][ T4381] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.174745][ T5233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.230738][ T5245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.301'. [ 123.492294][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 123.492310][ T27] audit: type=1326 audit(1762858817.585:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.584342][ T27] audit: type=1326 audit(1762858817.615:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.652334][ T27] audit: type=1326 audit(1762858817.615:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.729811][ T27] audit: type=1326 audit(1762858817.615:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.787639][ T27] audit: type=1326 audit(1762858817.615:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.856273][ T27] audit: type=1326 audit(1762858817.615:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.916717][ T27] audit: type=1326 audit(1762858817.615:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.949533][ T27] audit: type=1326 audit(1762858817.615:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 123.996687][ T27] audit: type=1326 audit(1762858817.615:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 124.044640][ T27] audit: type=1326 audit(1762858817.615:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 124.501480][ T5288] loop3: detected capacity change from 0 to 512 [ 124.587811][ T5295] loop5: detected capacity change from 0 to 512 [ 124.605779][ T5288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.647351][ T5288] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.659455][ T5295] EXT4-fs: Ignoring removed i_version option [ 124.665541][ T5295] EXT4-fs: Ignoring removed bh option [ 124.701519][ T5288] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 124.731091][ T5295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 124.801227][ T5295] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.871996][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 124.941836][ T5311] loop2: detected capacity change from 0 to 2048 [ 125.062622][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.162930][ T5311] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.263345][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 125.404493][ T11] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 345: padding at end of block bitmap is not set [ 125.461323][ T11] EXT4-fs (loop2): Remounting filesystem read-only [ 125.617122][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.717170][ T5330] netlink: 'syz.5.329': attribute type 21 has an invalid length. [ 125.745346][ T5330] netlink: 156 bytes leftover after parsing attributes in process `syz.5.329'. [ 125.760398][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.329'. [ 125.783613][ T5330] loop5: detected capacity change from 0 to 512 [ 125.827219][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 125.837831][ T4257] usb 3-1: no configurations [ 125.842508][ T4257] usb 3-1: can't read configurations, error -22 [ 125.853688][ T5330] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.329: inode has both inline data and extents flags [ 125.877354][ T5330] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.329: couldn't read orphan inode 15 (err -117) [ 125.897440][ T5330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 126.120140][ T4257] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.337041][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 126.343255][ T4257] usb 3-1: no configurations [ 126.359897][ T4257] usb 3-1: can't read configurations, error -22 [ 126.369687][ T4257] usb usb3-port1: attempt power cycle [ 126.370208][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 126.807508][ T4257] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.858158][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 126.863986][ T4257] usb 3-1: no configurations [ 126.869211][ T4257] usb 3-1: can't read configurations, error -22 [ 127.017078][ T4257] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.057788][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 127.067268][ T4257] usb 3-1: no configurations [ 127.071928][ T4257] usb 3-1: can't read configurations, error -22 [ 127.084239][ T4257] usb usb3-port1: unable to enumerate USB device [ 127.269722][ T5369] atomic_op ffff888053d3d198 conn xmit_atomic 0000000000000000 [ 127.854358][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 128.115710][ T5389] netlink: 296 bytes leftover after parsing attributes in process `syz.2.346'. [ 128.170093][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 128.223457][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 128.452887][ T5397] netlink: 'syz.3.349': attribute type 13 has an invalid length. [ 128.553157][ T27] kauditd_printk_skb: 104 callbacks suppressed [ 128.553172][ T27] audit: type=1326 audit(1762858822.645:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 128.655871][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 128.658871][ T27] audit: type=1326 audit(1762858822.645:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 128.792888][ T27] audit: type=1326 audit(1762858822.685:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 128.899656][ T27] audit: type=1326 audit(1762858822.685:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 129.003953][ T27] audit: type=1326 audit(1762858822.685:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 129.158085][ T27] audit: type=1326 audit(1762858822.715:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 129.253976][ T27] audit: type=1326 audit(1762858822.715:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 129.289599][ T27] audit: type=1326 audit(1762858822.715:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 129.315524][ T27] audit: type=1326 audit(1762858822.715:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 129.354470][ T27] audit: type=1326 audit(1762858822.715:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 130.529195][ T5397] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 130.856082][ T5397] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.865429][ T5397] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.874409][ T5397] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.883611][ T5397] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.114800][ T5415] netlink: '+}[@': attribute type 6 has an invalid length. [ 131.148522][ T5435] netlink: 172 bytes leftover after parsing attributes in process `syz.1.358'. [ 131.264382][ T5438] 9pnet_fd: Insufficient options for proto=fd [ 131.721243][ T5454] syz.5.367 (5454) used greatest stack depth: 17952 bytes left [ 131.791127][ T5460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.855749][ T5460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.930531][ T4330] Process accounting resumed [ 133.322741][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.329645][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.880990][ T5484] netlink: 16 bytes leftover after parsing attributes in process `syz.5.376'. [ 134.005906][ T5488] loop2: detected capacity change from 0 to 512 [ 134.407018][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 134.407033][ T27] audit: type=1326 audit(1762858828.495:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 134.458500][ T5496] syz.2.378[5496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.458609][ T5496] syz.2.378[5496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.512674][ T27] audit: type=1326 audit(1762858828.535:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 134.711457][ T27] audit: type=1326 audit(1762858828.535:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 134.833213][ T27] audit: type=1326 audit(1762858828.535:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 134.859316][ T5506] loop2: detected capacity change from 0 to 512 [ 134.915576][ T5506] EXT4-fs: Ignoring removed i_version option [ 134.947232][ T5506] EXT4-fs: Ignoring removed bh option [ 134.952741][ T27] audit: type=1326 audit(1762858828.535:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 135.050860][ T27] audit: type=1326 audit(1762858828.535:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 135.079360][ T5514] loop5: detected capacity change from 0 to 1024 [ 135.101555][ T5506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.139013][ T5506] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.156765][ T5514] EXT4-fs: Ignoring removed orlov option [ 135.195655][ T27] audit: type=1326 audit(1762858828.545:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 135.313680][ T27] audit: type=1326 audit(1762858828.545:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 135.325362][ T5514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 135.403039][ T27] audit: type=1326 audit(1762858828.545:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 135.426759][ T27] audit: type=1326 audit(1762858828.545:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 135.522365][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 135.589179][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 136.455348][ T5557] netlink: 'syz.0.399': attribute type 29 has an invalid length. [ 136.487337][ T5557] netlink: 'syz.0.399': attribute type 29 has an invalid length. [ 136.517431][ T5557] netlink: 'syz.0.399': attribute type 29 has an invalid length. [ 136.559300][ T5560] loop5: detected capacity change from 0 to 512 [ 136.629059][ T5560] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.700780][ T5560] EXT4-fs (loop5): 1 truncate cleaned up [ 136.735309][ T5560] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 137.003689][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 138.493526][ T5613] netlink: 172 bytes leftover after parsing attributes in process `syz.1.417'. [ 138.532234][ T5612] loop5: detected capacity change from 0 to 512 [ 138.624457][ T5612] EXT4-fs warning (device loop5): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.679192][ T5612] EXT4-fs (loop5): mount failed [ 138.812099][ T5611] 9pnet: Could not find request transport: f [ 138.998647][ T5629] loop2: detected capacity change from 0 to 512 [ 139.034066][ T5629] EXT4-fs: Ignoring removed i_version option [ 139.063380][ T5629] EXT4-fs: Ignoring removed bh option [ 139.083815][ T5632] loop3: detected capacity change from 0 to 512 [ 139.114055][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.153732][ T5629] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.201818][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 139.252886][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 139.267623][ T5632] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.378438][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 139.488184][ T27] kauditd_printk_skb: 119 callbacks suppressed [ 139.488200][ T27] audit: type=1800 audit(1762858833.575:610): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.425" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 139.537958][ T5642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.578295][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 139.723295][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 139.808614][ T5642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.924790][ T5659] loop3: detected capacity change from 0 to 164 [ 139.932857][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.034162][ T27] audit: type=1326 audit(1762858834.125:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 140.091999][ T5642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.121498][ T27] audit: type=1326 audit(1762858834.125:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 140.237407][ T27] audit: type=1326 audit(1762858834.125:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff35d9915e7 code=0x7ffc0000 [ 140.322188][ T5642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.349599][ T5672] loop2: detected capacity change from 0 to 512 [ 140.356022][ T27] audit: type=1326 audit(1762858834.125:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff35d99155c code=0x7ffc0000 [ 140.378405][ T5674] loop5: detected capacity change from 0 to 512 [ 140.389529][ T5672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.419126][ T5674] EXT4-fs: Ignoring removed i_version option [ 140.438489][ T5672] EXT4-fs (loop2): 1 truncate cleaned up [ 140.444237][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.463376][ T5674] EXT4-fs: Ignoring removed bh option [ 140.469682][ T27] audit: type=1326 audit(1762858834.125:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff35d991494 code=0x7ffc0000 [ 140.492292][ T27] audit: type=1326 audit(1762858834.125:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff35d991494 code=0x7ffc0000 [ 140.514863][ T27] audit: type=1326 audit(1762858834.125:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff35d98e32a code=0x7ffc0000 [ 140.539639][ T27] audit: type=1326 audit(1762858834.125:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 140.564744][ T27] audit: type=1326 audit(1762858834.125:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 140.663028][ T5642] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.721958][ T5642] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.723018][ T5674] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 140.777788][ T5642] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.805139][ T5674] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.841762][ T5642] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.954021][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 141.026597][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 141.236513][ T5693] loop5: detected capacity change from 0 to 764 [ 141.332557][ T5693] Symlink component flag not implemented [ 141.380347][ T5693] Symlink component flag not implemented [ 141.399346][ T5693] Symlink component flag not implemented (129) [ 141.405589][ T5693] Symlink component flag not implemented (6) [ 141.524765][ T5693] rock: directory entry would overflow storage [ 141.577212][ T5693] rock: sig=0x4f50, size=4, remaining=3 [ 141.604459][ T5693] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 142.185743][ T5720] loop5: detected capacity change from 0 to 512 [ 142.210765][ T5720] EXT4-fs: Ignoring removed i_version option [ 142.236426][ T5720] EXT4-fs: Ignoring removed bh option [ 142.248957][ T5722] loop2: detected capacity change from 0 to 512 [ 142.360532][ T5720] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.380831][ T5722] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.459: error while reading EA inode 32 err=-116 [ 142.482750][ T5720] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.497828][ T5722] EXT4-fs (loop2): Remounting filesystem read-only [ 142.504893][ T5722] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.459: error while reading EA inode 32 err=-116 [ 142.546063][ T5722] EXT4-fs (loop2): Remounting filesystem read-only [ 142.588294][ T5722] EXT4-fs (loop2): 1 orphan inode deleted [ 142.606583][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.625361][ T5730] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.662464][ T5722] EXT4-fs (loop2): unmounting filesystem. [ 142.876199][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 143.057480][ T5740] syz.5.463[5740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.057600][ T5740] syz.5.463[5740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.650162][ T5758] netlink: 'syz.5.473': attribute type 13 has an invalid length. [ 144.806503][ T5784] loop5: detected capacity change from 0 to 2048 [ 144.903752][ T5784] EXT4-fs (loop5): failed to initialize system zone (-117) [ 144.916377][ T5784] EXT4-fs (loop5): mount failed [ 145.000027][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 145.000042][ T27] audit: type=1326 audit(1762858839.095:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 145.228044][ T27] audit: type=1326 audit(1762858839.205:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 145.257436][ T27] audit: type=1326 audit(1762858839.275:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 145.480973][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 145.491405][ T5794] device bridge_slave_1 left promiscuous mode [ 145.499489][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.578781][ T5794] device bridge_slave_0 left promiscuous mode [ 145.585884][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.767917][ T27] audit: type=1326 audit(1762858839.275:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 145.934807][ T27] audit: type=1326 audit(1762858839.275:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 146.187067][ T5800] netlink: 96 bytes leftover after parsing attributes in process `syz.3.486'. [ 147.694861][ T5820] netlink: 'syz.2.494': attribute type 12 has an invalid length. [ 148.111824][ T5836] tipc: Started in network mode [ 148.144660][ T5836] tipc: Node identity cae5a95772d4, cluster identity 4711 [ 148.163612][ T5836] tipc: Enabled bearer , priority 0 [ 148.200473][ T5838] device syzkaller0 entered promiscuous mode [ 148.309626][ T5836] tipc: Resetting bearer [ 148.361130][ T5834] tipc: Resetting bearer [ 148.518079][ T5834] tipc: Disabling bearer [ 148.605237][ T27] audit: type=1326 audit(1762858842.695:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 148.674711][ T27] audit: type=1326 audit(1762858842.695:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 148.747084][ T27] audit: type=1326 audit(1762858842.815:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 148.805029][ T27] audit: type=1326 audit(1762858842.835:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 148.897229][ T27] audit: type=1326 audit(1762858842.835:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 148.920380][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 149.695194][ T5879] tipc: Started in network mode [ 149.717862][ T5879] tipc: Node identity 4e9461a7cce4, cluster identity 4711 [ 149.740821][ T5879] tipc: Enabled bearer , priority 0 [ 149.824505][ T5881] tipc: Disabling bearer [ 150.422386][ T5893] loop5: detected capacity change from 0 to 512 [ 150.525088][ T5893] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 150.557355][ T5893] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.650892][ T5893] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #4: comm syz.5.519: corrupted inode contents [ 150.693440][ T5893] EXT4-fs error (device loop5): ext4_dirty_inode:6133: inode #4: comm syz.5.519: mark_inode_dirty error [ 150.718661][ T5893] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #4: comm syz.5.519: corrupted inode contents [ 150.744910][ T5893] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #4: comm syz.5.519: mark_inode_dirty error [ 150.789050][ T5893] __quota_error: 21 callbacks suppressed [ 150.789069][ T5893] Quota error (device loop5): write_blk: dquota write failed [ 150.804407][ T5893] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 150.815727][ T5893] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 150.827032][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 150.841540][ T5893] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.519: Failed to acquire dquot type 1 [ 150.956950][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 151.145396][ T5910] loop5: detected capacity change from 0 to 512 [ 151.249547][ T5910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.258776][ T5910] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.292680][ T5910] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.523: corrupted inode contents [ 151.310824][ T5910] EXT4-fs error (device loop5): ext4_dirty_inode:6133: inode #2: comm syz.5.523: mark_inode_dirty error [ 151.323787][ T5910] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.523: corrupted inode contents [ 151.371081][ T5910] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.523: mark_inode_dirty error [ 151.413369][ T5919] loop3: detected capacity change from 0 to 128 [ 151.446762][ T5919] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 151.520125][ T5919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.531391][ T5919] ext2 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.531871][ T27] audit: type=1326 audit(1762858845.625:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 151.580298][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 151.717946][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 151.732322][ T27] audit: type=1326 audit(1762858845.665:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 151.839999][ T27] audit: type=1326 audit(1762858845.665:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 151.913259][ T27] audit: type=1326 audit(1762858845.665:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 152.030182][ T27] audit: type=1326 audit(1762858845.665:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 152.136140][ T27] audit: type=1326 audit(1762858845.665:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 152.226790][ T27] audit: type=1326 audit(1762858845.665:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 152.492387][ T5947] syz.3.538[5947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.492489][ T5947] syz.3.538[5947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.827791][ T5947] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 153.653794][ T5959] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 153.822913][ T5961] block device autoloading is deprecated and will be removed. [ 154.146514][ T5968] loop1: detected capacity change from 0 to 8192 [ 154.300860][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 154.654373][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'. [ 155.182024][ T6000] loop5: detected capacity change from 0 to 1024 [ 155.219600][ T6000] EXT4-fs: Ignoring removed orlov option [ 155.300232][ T6000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.508378][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 155.650526][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 155.668066][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 155.704139][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 155.747411][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 155.790290][ T6021] netlink: 'syz.1.568': attribute type 6 has an invalid length. [ 156.269654][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 156.269670][ T27] audit: type=1326 audit(1762858850.365:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.415233][ T27] audit: type=1326 audit(1762858850.365:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.431662][ T6038] loop5: detected capacity change from 0 to 1024 [ 156.533042][ T6038] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 156.534654][ T27] audit: type=1326 audit(1762858850.365:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.565193][ T27] audit: type=1326 audit(1762858850.365:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.587791][ T27] audit: type=1326 audit(1762858850.365:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.610795][ T27] audit: type=1326 audit(1762858850.365:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.634579][ T27] audit: type=1326 audit(1762858850.365:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.657277][ T6038] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 156.666707][ T6038] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.574: Failed to acquire dquot type 0 [ 156.698254][ T6044] netlink: 'syz.3.575': attribute type 16 has an invalid length. [ 156.715245][ T6044] netlink: 'syz.3.575': attribute type 17 has an invalid length. [ 156.718564][ T27] audit: type=1326 audit(1762858850.365:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7fc00000 [ 156.745458][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 156.773137][ T6038] EXT4-fs error (device loop5): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 156.791764][ T6038] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #13: comm syz.5.574: corrupted inode contents [ 156.806476][ T6038] EXT4-fs error (device loop5): ext4_dirty_inode:6133: inode #13: comm syz.5.574: mark_inode_dirty error [ 156.820570][ T6038] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #13: comm syz.5.574: corrupted inode contents [ 156.829411][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 156.833337][ T6038] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.574: mark_inode_dirty error [ 156.851975][ T6038] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #13: comm syz.5.574: corrupted inode contents [ 156.871916][ T6038] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 156.884703][ T6038] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #13: comm syz.5.574: corrupted inode contents [ 156.905966][ T6038] EXT4-fs error (device loop5): ext4_truncate:4318: inode #13: comm syz.5.574: mark_inode_dirty error [ 156.909952][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 156.932751][ T6038] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 156.963533][ T6038] EXT4-fs (loop5): 1 truncate cleaned up [ 156.978797][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 156.986464][ T6038] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 157.027577][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 157.068968][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 157.130286][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 157.159509][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 157.166196][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 157.222978][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 157.273562][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 157.299496][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 157.313228][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 157.335360][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.351573][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.360989][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.370894][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.380407][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 157.391167][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 157.435488][ T6044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.466021][ T6048] netlink: 'syz.2.577': attribute type 12 has an invalid length. [ 157.477412][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 157.501079][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'. [ 157.544345][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 157.582848][ T6054] netlink: 2 bytes leftover after parsing attributes in process `syz.1.580'. [ 157.633318][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'. [ 157.715573][ T6062] loop3: detected capacity change from 0 to 512 [ 157.770999][ T6062] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 157.850627][ T6062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.583: bg 0: block 104: invalid block bitmap [ 157.898166][ T6062] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 157.948508][ T6062] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.583: invalid indirect mapped block 1 (level 1) [ 157.978970][ T6062] EXT4-fs (loop3): 1 truncate cleaned up [ 157.996333][ T6062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.180007][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 158.300420][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.592'. [ 158.335397][ T6077] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 158.413569][ T6081] tipc: Started in network mode [ 158.427008][ T6081] tipc: Node identity ac14140f, cluster identity 4711 [ 158.449887][ T6081] tipc: New replicast peer: 255.255.255.83 [ 158.471000][ T6081] tipc: Enabled bearer , priority 10 [ 158.914051][ T6101] netlink: 64 bytes leftover after parsing attributes in process `syz.5.600'. [ 158.926540][ T6099] loop3: detected capacity change from 0 to 8192 [ 159.497193][ T952] tipc: Node number set to 2886997007 [ 159.607035][ T6120] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 160.273896][ T6148] netlink: 'syz.2.622': attribute type 12 has an invalid length. [ 160.384054][ T6153] device veth0_to_team entered promiscuous mode [ 160.705928][ T6129] netlink: 'syz.5.612': attribute type 1 has an invalid length. [ 160.744893][ T6129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.815192][ T6129] bond1: (slave veth3): Enslaving as an active interface with a down link [ 160.837746][ T6170] loop1: detected capacity change from 0 to 128 [ 160.845000][ T6170] EXT4-fs: Ignoring removed nobh option [ 160.860727][ T6170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.869799][ T6127] delete_channel: no stack [ 160.875034][ T6170] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.022747][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 161.197124][ T6178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 161.366444][ T27] kauditd_printk_skb: 103 callbacks suppressed [ 161.366460][ T27] audit: type=1326 audit(1762858855.455:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.366656][ T27] audit: type=1326 audit(1762858855.455:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.369513][ T27] audit: type=1326 audit(1762858855.465:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.371514][ T27] audit: type=1326 audit(1762858855.465:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.734491][ T6194] loop5: detected capacity change from 0 to 512 [ 161.734570][ T27] audit: type=1326 audit(1762858855.605:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.764998][ T27] audit: type=1326 audit(1762858855.605:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.765041][ T27] audit: type=1326 audit(1762858855.605:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.765078][ T27] audit: type=1326 audit(1762858855.605:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.765115][ T27] audit: type=1326 audit(1762858855.605:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.765159][ T27] audit: type=1326 audit(1762858855.605:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.5.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 161.813847][ T6194] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 161.814177][ T6194] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.225606][ T6201] loop3: detected capacity change from 0 to 1024 [ 162.265488][ T6201] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.265524][ T6201] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.268330][ T6201] JBD2: no valid journal superblock found [ 162.268346][ T6201] EXT4-fs (loop3): error loading journal [ 162.524633][ T6194] FAT-fs (loop5): FAT read failed (blocknr 128) [ 162.721971][ T6213] loop3: detected capacity change from 0 to 512 [ 162.844026][ T6213] EXT4-fs (loop3): 1 orphan inode deleted [ 162.859039][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 1 [ 162.886107][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.898806][ T6213] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.997822][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 163.213442][ T6231] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.225163][ T6230] loop1: detected capacity change from 0 to 2048 [ 163.296532][ T6230] Alternate GPT is invalid, using primary GPT. [ 163.304271][ T6230] loop1: p1 p2 p3 [ 163.337070][ T6230] loop1: partition table partially beyond EOD, truncated [ 163.906809][ T6255] sg_write: process 321 (syz.0.657) changed security contexts after opening file descriptor, this is not allowed. [ 163.990737][ T6258] loop5: detected capacity change from 0 to 1024 [ 164.005367][ T6258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.017906][ T6258] ext4: Unknown parameter 'fsuuid' [ 164.054511][ T4463] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.491116][ T6273] syz.2.665[6273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.491216][ T6273] syz.2.665[6273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.535992][ T6275] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 164.671069][ T6278] loop3: detected capacity change from 0 to 1024 [ 164.715742][ T6278] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.739086][ T6278] EXT4-fs: Ignoring removed oldalloc option [ 164.745783][ T6278] EXT4-fs: Ignoring removed bh option [ 164.807071][ T6278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.119781][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 165.293585][ T6294] hub 2-0:1.0: USB hub found [ 165.311992][ T6294] hub 2-0:1.0: 1 port detected [ 165.323588][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.671'. [ 165.652987][ T6305] loop3: detected capacity change from 0 to 128 [ 165.678099][ T6305] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.711954][ T6305] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.857948][ T4818] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.216554][ T6322] loop5: detected capacity change from 0 to 1024 [ 166.243168][ T6322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.307248][ T6322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.430962][ T6322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 166.541056][ T6335] smc: net device bond0 applied user defined pnetid SYZ0 [ 166.562430][ T6335] smc: net device bond0 erased user defined pnetid SYZ0 [ 166.587396][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 166.621733][ T6338] program syz.0.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.739580][ T6340] loop5: detected capacity change from 0 to 1024 [ 166.760744][ T6340] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 166.863550][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 166.863566][ T27] audit: type=1326 audit(1762858860.955:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 166.931278][ T27] audit: type=1326 audit(1762858860.955:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 166.989357][ T27] audit: type=1326 audit(1762858860.955:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.036152][ T27] audit: type=1326 audit(1762858860.955:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.094251][ T27] audit: type=1326 audit(1762858860.955:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4d7b2b779 code=0x7ffc0000 [ 167.116794][ T27] audit: type=1326 audit(1762858860.955:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.139673][ T27] audit: type=1326 audit(1762858860.985:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.250084][ T27] audit: type=1326 audit(1762858861.345:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.297017][ T27] audit: type=1326 audit(1762858861.375:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.417420][ T27] audit: type=1326 audit(1762858861.375:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 167.459980][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.697'. [ 167.556663][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 167.846438][ T6379] loop1: detected capacity change from 0 to 1024 [ 167.871618][ T6379] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.904380][ T6379] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 167.973581][ T6379] JBD2: no valid journal superblock found [ 167.985171][ T6379] EXT4-fs (loop1): error loading journal [ 168.272879][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 168.300362][ T6374] netlink: 68 bytes leftover after parsing attributes in process `syz.5.700'. [ 168.981857][ T6388] team0 (unregistering): Port device team_slave_0 removed [ 169.064856][ T6388] team0 (unregistering): Port device team_slave_1 removed [ 169.153936][ T6396] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.262794][ T6396] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.355137][ T6396] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.455408][ T6396] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.602940][ T6396] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.632483][ T6396] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.675208][ T6396] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.696072][ T6396] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.919739][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.715'. [ 169.941586][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 170.178699][ T6420] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 170.274976][ T6420] tipc: New replicast peer: 255.255.255.255 [ 170.301195][ T6420] tipc: Enabled bearer , priority 10 [ 170.587924][ T6431] Zero length message leads to an empty skb [ 170.744508][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.723'. [ 170.882237][ T6439] device macvlan1 entered promiscuous mode [ 170.900329][ T6439] device ipvlan0 entered promiscuous mode [ 170.914021][ T6439] device ipvlan0 left promiscuous mode [ 170.923208][ T6439] device macvlan1 left promiscuous mode [ 170.956388][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.727'. [ 170.990088][ T6446] loop3: detected capacity change from 0 to 512 [ 171.039101][ T6446] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.122128][ T6448] loop1: detected capacity change from 0 to 256 [ 171.171889][ T6448] FAT-fs (loop1): Directory bread(block 64) failed [ 171.180693][ T6450] netlink: 'syz.2.731': attribute type 3 has an invalid length. [ 171.190282][ T6448] FAT-fs (loop1): Directory bread(block 65) failed [ 171.217241][ T6448] FAT-fs (loop1): Directory bread(block 66) failed [ 171.237590][ T6448] FAT-fs (loop1): Directory bread(block 67) failed [ 171.254656][ T6448] FAT-fs (loop1): Directory bread(block 68) failed [ 171.297083][ T6448] FAT-fs (loop1): Directory bread(block 69) failed [ 171.309121][ T6448] FAT-fs (loop1): Directory bread(block 70) failed [ 171.338836][ T6448] FAT-fs (loop1): Directory bread(block 71) failed [ 171.345514][ T6448] FAT-fs (loop1): Directory bread(block 72) failed [ 171.393224][ T6448] FAT-fs (loop1): Directory bread(block 73) failed [ 171.427046][ T4359] tipc: Node number set to 2188403111 [ 171.490986][ T6448] syz.1.730: attempt to access beyond end of device [ 171.490986][ T6448] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 171.491708][ T6456] program syz.3.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.506314][ T6448] syz.1.730: attempt to access beyond end of device [ 171.506314][ T6448] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 172.132984][ T6480] netlink: 'syz.2.746': attribute type 12 has an invalid length. [ 172.560203][ T27] kauditd_printk_skb: 257 callbacks suppressed [ 172.560220][ T27] audit: type=1326 audit(1762858866.655:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.569991][ T6499] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.613675][ T27] audit: type=1326 audit(1762858866.685:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.636292][ T27] audit: type=1326 audit(1762858866.685:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.660155][ T27] audit: type=1326 audit(1762858866.685:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.702634][ T27] audit: type=1326 audit(1762858866.685:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.746738][ T27] audit: type=1326 audit(1762858866.695:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff35d98df10 code=0x7ffc0000 [ 172.776525][ T27] audit: type=1326 audit(1762858866.695:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.808004][ T27] audit: type=1326 audit(1762858866.695:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.831612][ T27] audit: type=1326 audit(1762858866.695:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 172.854671][ T27] audit: type=1326 audit(1762858866.695:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff35d98f6c9 code=0x7ffc0000 [ 173.131135][ T6508] loop1: detected capacity change from 0 to 8192 [ 173.210680][ T6508] loop1: p2 p3 p4 [ 173.215512][ T6508] loop1: p2 start 164919041 is beyond EOD, truncated [ 173.255498][ T6508] loop1: p3 size 66846464 extends beyond EOD, truncated [ 173.294033][ T6508] loop1: p4 size 37048832 extends beyond EOD, truncated [ 173.456047][ T6518] syz.0.762[6518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.456148][ T6518] syz.0.762[6518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.135068][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 174.170367][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 174.281554][ T6540] syz.3.771[6540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.281660][ T6540] syz.3.771[6540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.145661][ T6569] loop5: detected capacity change from 0 to 512 [ 175.201780][ T6571] netlink: 'syz.0.784': attribute type 16 has an invalid length. [ 175.209888][ T6571] netlink: 156 bytes leftover after parsing attributes in process `syz.0.784'. [ 175.259023][ T6569] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 175.270259][ T6569] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.430771][ T6579] netlink: 44 bytes leftover after parsing attributes in process `syz.2.787'. [ 175.452303][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 175.881155][ T6595] loop3: detected capacity change from 0 to 1024 [ 175.954402][ T6595] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.040463][ T6595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.082459][ T6604] device syzkaller0 entered promiscuous mode [ 176.383787][ T6618] syz.2.803[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.383968][ T6618] syz.2.803[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.494581][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 176.582617][ T6622] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 176.931006][ T6639] loop5: detected capacity change from 0 to 1024 [ 176.939364][ T6639] EXT4-fs: Ignoring removed bh option [ 176.945034][ T6639] EXT4-fs: inline encryption not supported [ 176.968383][ T6639] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 177.013746][ T6639] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.810: lblock 2 mapped to illegal pblock 2 (length 1) [ 177.037844][ T6639] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.810: lblock 0 mapped to illegal pblock 48 (length 1) [ 177.069589][ T6639] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.810: Failed to acquire dquot type 0 [ 177.089762][ T6642] capability: warning: `syz.1.811' uses 32-bit capabilities (legacy support in use) [ 177.107868][ T6639] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 177.153328][ T6639] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.810: mark_inode_dirty error [ 177.179488][ T6639] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 177.198071][ T6639] EXT4-fs (loop5): 1 orphan inode deleted [ 177.203978][ T6639] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.240855][ T4802] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 177.241522][ T6645] loop1: detected capacity change from 0 to 512 [ 177.273614][ T6645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.289879][ T4802] EXT4-fs error (device loop5): ext4_release_dquot:6845: comm kworker/u4:15: Failed to release dquot type 0 [ 177.308177][ T6639] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 177.336832][ T6645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.371699][ T6645] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.417410][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 177.638916][ T27] kauditd_printk_skb: 72 callbacks suppressed [ 177.638932][ T27] audit: type=1326 audit(1762858871.735:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 177.685807][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 177.760167][ T27] audit: type=1326 audit(1762858871.735:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.5.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1078f6c9 code=0x7ffc0000 [ 177.934604][ T27] audit: type=1326 audit(1762858872.025:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.030563][ T27] audit: type=1326 audit(1762858872.055:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.053486][ T27] audit: type=1326 audit(1762858872.055:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.098901][ T27] audit: type=1326 audit(1762858872.055:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.126343][ T27] audit: type=1326 audit(1762858872.055:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.180601][ T27] audit: type=1326 audit(1762858872.075:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.227764][ T27] audit: type=1326 audit(1762858872.075:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.264824][ T27] audit: type=1326 audit(1762858872.075:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 178.329021][ T6676] syz.3.823[6676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.329129][ T6676] syz.3.823[6676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.635046][ T6693] syz.0.829[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.648994][ T6693] syz.0.829[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.736559][ T6698] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 178.773891][ T6694] syz.0.829[6694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.773998][ T6694] syz.0.829[6694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.813256][ T6693] syz.0.829[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.843267][ T6693] syz.0.829[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.330168][ T6731] xt_CT: No such helper "pptp" [ 180.582053][ T6737] device gretap0 entered promiscuous mode [ 180.622564][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 180.677555][ T6737] device gretap0 left promiscuous mode [ 180.926927][ C0] sched: RT throttling activated [ 181.082273][ T6743] netlink: 'syz.5.845': attribute type 11 has an invalid length. [ 181.102147][ T6743] netlink: 44 bytes leftover after parsing attributes in process `syz.5.845'. [ 181.400756][ T6748] syz.5.848[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.400864][ T6748] syz.5.848[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.452990][ T6748] loop5: detected capacity change from 0 to 128 [ 181.508250][ T6748] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.537854][ T6748] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.310048][ T6779] IPv6: Can't replace route, no match found [ 182.413439][ T46] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.565478][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.587500][ T6784] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 182.635558][ T6784] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 183.323636][ T6791] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 183.586492][ T6828] xt_hashlimit: max too large, truncated to 1048576 [ 183.683582][ T27] kauditd_printk_skb: 316 callbacks suppressed [ 183.683598][ T27] audit: type=1326 audit(1762858877.775:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 183.813996][ T27] audit: type=1326 audit(1762858877.825:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 183.912920][ T27] audit: type=1326 audit(1762858877.845:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 183.982873][ T27] audit: type=1326 audit(1762858877.845:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.117897][ T27] audit: type=1326 audit(1762858877.845:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.162558][ T27] audit: type=1326 audit(1762858877.845:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.207969][ T27] audit: type=1326 audit(1762858877.845:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.364109][ T27] audit: type=1326 audit(1762858877.845:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.461920][ T27] audit: type=1326 audit(1762858877.845:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.486587][ T27] audit: type=1326 audit(1762858877.845:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 184.545997][ T6861] loop1: detected capacity change from 0 to 512 [ 184.684730][ T6861] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 184.737613][ T6861] EXT4-fs (loop1): 1 truncate cleaned up [ 184.743338][ T6861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.822749][ T6861] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 184.895714][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.887'. [ 184.924821][ T6872] IPVS: Unknown mcast interface: ipvlan1 [ 184.951047][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 185.039899][ T6876] syz.5.888[6876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.040088][ T6876] syz.5.888[6876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.291575][ T6888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.892'. [ 185.447643][ T6891] loop5: detected capacity change from 0 to 1024 [ 185.483691][ T6891] EXT4-fs: Ignoring removed orlov option [ 185.556573][ T6891] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 185.710877][ T6906] x_tables: duplicate underflow at hook 1 [ 185.746505][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 185.921465][ T6910] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.773560][ T6925] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.792497][ T6925] IPv6: Can't replace route, no match found [ 186.829297][ T4402] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.857460][ T4402] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.867659][ T4402] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.936451][ T4402] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.976977][ T4402] rtc rtc0: __rtc_set_alarm: err=-22 [ 187.153161][ T6948] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 187.269255][ T6953] loop5: detected capacity change from 0 to 128 [ 187.295498][ T6954] netlink: 80 bytes leftover after parsing attributes in process `syz.3.915'. [ 187.366964][ T6954] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 187.594698][ T6962] netlink: 'syz.3.917': attribute type 21 has an invalid length. [ 187.610215][ T6962] netlink: 156 bytes leftover after parsing attributes in process `syz.3.917'. [ 187.622449][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 189.057982][ T6979] netlink: 'syz.3.922': attribute type 11 has an invalid length. [ 189.080332][ T6979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.922'. [ 189.375036][ T6987] loop3: detected capacity change from 0 to 512 [ 189.436148][ T6987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.449517][ T6987] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.497799][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 189.935805][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 189.968160][ T7008] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 190.067696][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 190.079752][ T7008] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 190.295861][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 190.312828][ T7008] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 190.873632][ T27] kauditd_printk_skb: 138 callbacks suppressed [ 190.873649][ T27] audit: type=1326 audit(1762858884.965:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.020132][ T27] audit: type=1326 audit(1762858885.015:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.091840][ T27] audit: type=1326 audit(1762858885.015:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.197378][ T27] audit: type=1326 audit(1762858885.015:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.317197][ T27] audit: type=1326 audit(1762858885.015:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.351935][ T7041] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.369746][ T27] audit: type=1326 audit(1762858885.015:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.454353][ T27] audit: type=1326 audit(1762858885.015:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.459630][ T7041] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.489983][ T27] audit: type=1326 audit(1762858885.015:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.519604][ T27] audit: type=1326 audit(1762858885.015:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.561442][ T27] audit: type=1326 audit(1762858885.015:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 191.603072][ T7041] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.630782][ T7052] loop1: detected capacity change from 0 to 512 [ 191.649898][ T7052] EXT4-fs: Ignoring removed i_version option [ 191.663887][ T7052] EXT4-fs: Ignoring removed bh option [ 191.703924][ T7052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 191.716283][ T7041] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.737323][ T7052] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.922815][ T7041] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.923707][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 191.970718][ T7041] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.016275][ T7041] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.068285][ T7059] loop1: detected capacity change from 0 to 512 [ 192.090174][ T7041] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.096242][ T7059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.134696][ T7059] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.954: bad orphan inode 131083 [ 192.187350][ T7059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.464357][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 192.604539][ T7075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.720811][ T7075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.795150][ T7082] loop3: detected capacity change from 0 to 164 [ 192.811348][ T7075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.858338][ T7082] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.893737][ T7082] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.907128][ T7075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.111633][ T7075] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.124334][ T7092] netlink: 'syz.2.961': attribute type 11 has an invalid length. [ 193.132442][ T7092] __nla_validate_parse: 1 callbacks suppressed [ 193.132456][ T7092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.961'. [ 193.161297][ T7075] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.187720][ T7075] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.211471][ T7075] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.695327][ T7113] netlink: 'syz.2.976': attribute type 21 has an invalid length. [ 193.708833][ T7113] netlink: 156 bytes leftover after parsing attributes in process `syz.2.976'. [ 193.728560][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 193.835495][ T7117] loop1: detected capacity change from 0 to 128 [ 193.852689][ T7117] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 193.883315][ T7117] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 193.900844][ T7117] FAT-fs (loop1): Filesystem has been set read-only [ 193.914335][ T7117] syz.1.978: attempt to access beyond end of device [ 193.914335][ T7117] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 194.296552][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379093][ T7129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.420413][ T7131] loop1: detected capacity change from 0 to 1024 [ 194.443582][ T7131] EXT4-fs: inline encryption not supported [ 194.487523][ T7131] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.573821][ T7131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.583791][ T7129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.740321][ T7136] loop3: detected capacity change from 0 to 164 [ 194.750622][ T7136] ISOFS: unable to read i-node block [ 194.756084][ T7136] isofs_fill_super: get root inode failed [ 194.818324][ T4396] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.830639][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 194.831450][ T7129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.847168][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 194.847490][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 195.129160][ T7129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.323514][ T7129] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.385726][ T7129] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.420294][ T7129] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.460557][ T7129] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.702063][ T7158] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.815671][ T7163] syz.1.998[7163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.815780][ T7163] syz.1.998[7163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.843322][ T7158] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.878073][ T7163] atomic_op ffff888054ca3198 conn xmit_atomic 0000000000000000 [ 196.002228][ T7158] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.195995][ T7158] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.313115][ T27] kauditd_printk_skb: 92 callbacks suppressed [ 196.313131][ T27] audit: type=1326 audit(1762858890.405:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.444779][ T7158] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.468627][ T27] audit: type=1326 audit(1762858890.455:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.518707][ T7158] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.552687][ T27] audit: type=1326 audit(1762858890.455:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.579833][ T7158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.597901][ T7158] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.606521][ T27] audit: type=1326 audit(1762858890.455:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.674790][ T7190] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1008'. [ 196.677710][ T27] audit: type=1326 audit(1762858890.455:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.770020][ T27] audit: type=1326 audit(1762858890.455:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.807876][ T7194] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.835174][ T27] audit: type=1326 audit(1762858890.455:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.862398][ T27] audit: type=1326 audit(1762858890.455:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 196.933279][ T27] audit: type=1326 audit(1762858890.455:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 197.005349][ T27] audit: type=1326 audit(1762858890.455:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4b18f6c9 code=0x7ffc0000 [ 197.038110][ T7200] loop5: detected capacity change from 0 to 1024 [ 197.049983][ T7200] EXT4-fs: Ignoring removed orlov option [ 197.055856][ T7200] EXT4-fs: Ignoring removed i_version option [ 197.140089][ T7200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 197.351245][ T4682] EXT4-fs (loop5): unmounting filesystem. [ 197.811081][ T7228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 197.818043][ T7228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.841765][ T7228] vhci_hcd vhci_hcd.0: Device attached [ 197.902274][ T7233] vhci_hcd: connection closed [ 197.905705][ T4802] vhci_hcd: stop threads [ 197.933246][ T4802] vhci_hcd: release socket [ 197.955039][ T4802] vhci_hcd: disconnect device [ 198.049898][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 198.529152][ T7254] loop4: detected capacity change from 0 to 7 [ 198.549819][ T4463] Dev loop4: unable to read RDB block 7 [ 198.555467][ T4463] loop4: unable to read partition table [ 198.574302][ T4463] loop4: partition table beyond EOD, truncated [ 198.607557][ T7254] Dev loop4: unable to read RDB block 7 [ 198.614841][ T7254] loop4: unable to read partition table [ 198.625451][ T7254] loop4: partition table beyond EOD, truncated [ 198.648921][ T7254] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 199.170427][ T7280] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.485507][ T7289] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.486635][ T7295] loop3: detected capacity change from 0 to 512 [ 199.526697][ T7295] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.547039][ T7295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.587641][ T7295] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1041: Invalid block bitmap block 0 in block_group 0 [ 199.626038][ T7289] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.666872][ T7295] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 199.676660][ T7295] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1041: attempt to clear invalid blocks 983261 len 1 [ 199.691775][ T7295] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1041: Invalid inode table block 0 in block_group 0 [ 199.709329][ T7295] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 199.720825][ T7295] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 199.735725][ T7295] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1041: Invalid inode table block 0 in block_group 0 [ 199.774516][ T7295] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 199.795525][ T7289] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.809358][ T7295] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.1041: mark_inode_dirty error [ 199.835290][ T7295] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 199.846451][ T7295] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1041: Invalid inode table block 0 in block_group 0 [ 199.876520][ T7295] EXT4-fs (loop3): 1 truncate cleaned up [ 199.903384][ T7295] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.914037][ T7289] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.091628][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 200.600156][ T7323] serio: Serial port ttyS3 [ 201.477371][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.483482][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 201.498373][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 201.498396][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 201.660170][ T7343] 9pnet_fd: Insufficient options for proto=fd [ 201.811438][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 201.818800][ T27] kauditd_printk_skb: 242 callbacks suppressed [ 201.818819][ T27] audit: type=1326 audit(1762858895.915:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 201.874951][ T27] audit: type=1326 audit(1762858895.945:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 201.898571][ T27] audit: type=1326 audit(1762858895.945:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 201.921952][ T27] audit: type=1326 audit(1762858895.945:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 201.945880][ T27] audit: type=1326 audit(1762858895.945:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 201.968981][ T27] audit: type=1326 audit(1762858895.945:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 201.993086][ T27] audit: type=1326 audit(1762858895.945:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 202.015837][ T27] audit: type=1326 audit(1762858895.945:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 202.045314][ T27] audit: type=1326 audit(1762858895.945:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 202.074680][ T27] audit: type=1326 audit(1762858895.945:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc4d7b8f6c9 code=0x7ffc0000 [ 202.399930][ T7361] serio: Serial port ttyS3 [ 203.210342][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1068'. [ 203.212044][ T7289] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.273006][ T7289] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.337295][ T7289] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.433821][ T7289] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.480512][ T7388] loop5: detected capacity change from 0 to 136 [ 204.387960][ T7420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 204.394543][ T7420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.430141][ T7420] vhci_hcd vhci_hcd.0: Device attached [ 204.448066][ T7422] vhci_hcd: connection closed [ 204.511601][ T4799] vhci_hcd: stop threads [ 204.552424][ T4799] vhci_hcd: release socket [ 204.857832][ T4799] vhci_hcd: disconnect device [ 205.066242][ T4351] vhci_hcd: vhci_device speed not set [ 205.113880][ T7430] tipc: Enabled bearer , priority 0 [ 205.122046][ T7430] +: renamed from syzkaller0 [ 205.182517][ T7425] serio: Serial port ttyS3 [ 205.298230][ T7430] tipc: Disabling bearer [ 205.439487][ T7434] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.571686][ T7434] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.806697][ T7447] loop3: detected capacity change from 0 to 128 [ 206.550004][ T7434] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.669066][ T7447] batman_adv: batadv0: Removing interface: virt_wifi0 [ 206.796189][ T7434] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.888849][ T7462] random: crng reseeded on system resumption [ 206.966250][ T7434] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.009879][ T7434] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.042070][ T7434] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.084161][ T7434] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.968526][ T27] kauditd_printk_skb: 242 callbacks suppressed [ 209.968544][ T27] audit: type=1326 audit(1762858903.995:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.043675][ T27] audit: type=1326 audit(1762858903.995:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.075628][ T27] audit: type=1326 audit(1762858903.995:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.098106][ T27] audit: type=1326 audit(1762858904.005:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.129234][ T27] audit: type=1326 audit(1762858904.005:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.152894][ T27] audit: type=1326 audit(1762858904.005:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.176187][ T27] audit: type=1326 audit(1762858904.005:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.198993][ T27] audit: type=1326 audit(1762858904.005:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.221496][ T27] audit: type=1326 audit(1762858904.005:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.246148][ T27] audit: type=1326 audit(1762858904.005:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f75f8f6c9 code=0x7ffc0000 [ 210.280903][ T7494] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1107'. [ 211.222604][ T7521] loop5: detected capacity change from 0 to 512 [ 211.274243][ T7521] ------------[ cut here ]------------ [ 211.280423][ T7521] EA inode 11 i_nlink=2 [ 212.007328][ T7521] WARNING: CPU: 1 PID: 7521 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 212.022973][ T7521] Modules linked in: [ 212.026969][ T7521] CPU: 1 PID: 7521 Comm: syz.5.1118 Not tainted syzkaller #0 [ 212.034475][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.044627][ T7521] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 212.051428][ T7521] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 212.071142][ T7521] RSP: 0018:ffffc9000db1f200 EFLAGS: 00010246 [ 212.077308][ T7521] RAX: 85fd0c5f38680e00 RBX: 0000000000000002 RCX: 0000000000080000 [ 212.085326][ T7521] RDX: ffffc900052b9000 RSI: 000000000001afab RDI: 000000000001afac [ 212.093405][ T7521] RBP: ffffc9000db1f2e8 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 212.101541][ T7521] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc9000db1f260 [ 212.109611][ T7521] R13: ffff8880702c96c0 R14: dffffc0000000000 R15: ffff8880702c9700 [ 212.117660][ T7521] FS: 00007f3f1163e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 212.126636][ T7521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.133332][ T7521] CR2: 0000001b2fa0cff8 CR3: 0000000061189000 CR4: 00000000003506e0 [ 212.141402][ T7521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.149468][ T7521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.157518][ T7521] Call Trace: [ 212.160827][ T7521] [ 212.163802][ T7521] ? ext4_xattr_block_csum+0x500/0x500 [ 212.169367][ T7521] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 212.174899][ T7521] ext4_xattr_set_entry+0xb33/0x1e90 [ 212.180305][ T7521] ext4_xattr_ibody_set+0x250/0x690 [ 212.185572][ T7521] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 212.191585][ T7521] __ext4_expand_extra_isize+0x301/0x3e0 [ 212.197311][ T7521] __ext4_mark_inode_dirty+0x47f/0x770 [ 212.202840][ T7521] ext4_evict_inode+0xa73/0x1100 [ 212.207867][ T7521] ? _raw_spin_unlock+0x24/0x40 [ 212.212784][ T7521] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 212.218804][ T7521] ? do_raw_spin_unlock+0x11d/0x230 [ 212.224081][ T7521] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 212.230095][ T7521] evict+0x485/0x870 [ 212.234029][ T7521] ? __lock_acquire+0x7c50/0x7c50 [ 212.239154][ T7521] ? proc_nr_inodes+0x2f0/0x2f0 [ 212.244046][ T7521] ? do_raw_spin_unlock+0x11d/0x230 [ 212.249313][ T7521] ? _raw_spin_unlock+0x24/0x40 [ 212.254223][ T7521] ? iput+0x768/0x980 [ 212.258284][ T7521] ext4_orphan_cleanup+0xbd3/0x1400 [ 212.263536][ T7521] ? ext4_orphan_del+0xb90/0xb90 [ 212.268565][ T7521] ? errseq_check_and_advance+0x62/0x120 [ 212.274238][ T7521] ext4_fill_super+0x7bdf/0x8150 [ 212.279246][ T7521] ? bdev_name+0x2c1/0x3f0 [ 212.283746][ T7521] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 212.290099][ T7521] ? snprintf+0xd7/0x120 [ 212.294403][ T7521] ? preempt_count_add+0x8d/0x190 [ 212.299523][ T7521] ? vscnprintf+0x80/0x80 [ 212.303895][ T7521] ? set_blocksize+0x1d3/0x350 [ 212.309105][ T7521] ? sb_set_blocksize+0xa5/0xe0 [ 212.314026][ T7521] get_tree_bdev+0x3f1/0x610 [ 212.318708][ T7521] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 212.325017][ T7521] vfs_get_tree+0x88/0x270 [ 212.329525][ T7521] do_new_mount+0x24a/0xa40 [ 212.334067][ T7521] __se_sys_mount+0x2d6/0x3c0 [ 212.338828][ T7521] ? __x64_sys_mount+0xc0/0xc0 [ 212.343659][ T7521] ? lockdep_hardirqs_on+0x94/0x140 [ 212.348927][ T7521] ? __x64_sys_mount+0x1c/0xc0 [ 212.353734][ T7521] do_syscall_64+0x4c/0xa0 [ 212.358246][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 212.363056][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 212.367820][ T7521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.373749][ T7521] RIP: 0033:0x7f3f10790e6a [ 212.378247][ T7521] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.397931][ T7521] RSP: 002b:00007f3f1163de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.406385][ T7521] RAX: ffffffffffffffda RBX: 00007f3f1163def0 RCX: 00007f3f10790e6a [ 212.414420][ T7521] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3f1163deb0 [ 212.422481][ T7521] RBP: 0000200000000180 R08: 00007f3f1163def0 R09: 0000000000800718 [ 212.430552][ T7521] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 212.438606][ T7521] R13: 00007f3f1163deb0 R14: 000000000000046f R15: 0000200000000200 [ 212.446658][ T7521] [ 212.449828][ T7521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.457162][ T7521] CPU: 1 PID: 7521 Comm: syz.5.1118 Not tainted syzkaller #0 [ 212.464546][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.474649][ T7521] Call Trace: [ 212.477937][ T7521] [ 212.480874][ T7521] dump_stack_lvl+0x168/0x22e [ 212.485573][ T7521] ? memcpy+0x3c/0x60 [ 212.489576][ T7521] ? show_regs_print_info+0x12/0x12 [ 212.494785][ T7521] ? load_image+0x3b0/0x3b0 [ 212.499345][ T7521] panic+0x2c9/0x710 [ 212.503384][ T7521] ? bpf_jit_dump+0xd0/0xd0 [ 212.507936][ T7521] __warn+0x2f8/0x4f0 [ 212.511967][ T7521] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 212.517978][ T7521] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 212.523980][ T7521] report_bug+0x2ba/0x4f0 [ 212.528377][ T7521] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 212.534382][ T7521] handle_bug+0x3a/0x70 [ 212.538575][ T7521] exc_invalid_op+0x16/0x40 [ 212.543095][ T7521] asm_exc_invalid_op+0x16/0x20 [ 212.547961][ T7521] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 212.554571][ T7521] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 212.574285][ T7521] RSP: 0018:ffffc9000db1f200 EFLAGS: 00010246 [ 212.580371][ T7521] RAX: 85fd0c5f38680e00 RBX: 0000000000000002 RCX: 0000000000080000 [ 212.588358][ T7521] RDX: ffffc900052b9000 RSI: 000000000001afab RDI: 000000000001afac [ 212.596358][ T7521] RBP: ffffc9000db1f2e8 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 212.604348][ T7521] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc9000db1f260 [ 212.612328][ T7521] R13: ffff8880702c96c0 R14: dffffc0000000000 R15: ffff8880702c9700 [ 212.620328][ T7521] ? ext4_xattr_block_csum+0x500/0x500 [ 212.625811][ T7521] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 212.631306][ T7521] ext4_xattr_set_entry+0xb33/0x1e90 [ 212.636636][ T7521] ext4_xattr_ibody_set+0x250/0x690 [ 212.641855][ T7521] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 212.647787][ T7521] __ext4_expand_extra_isize+0x301/0x3e0 [ 212.653437][ T7521] __ext4_mark_inode_dirty+0x47f/0x770 [ 212.658927][ T7521] ext4_evict_inode+0xa73/0x1100 [ 212.663884][ T7521] ? _raw_spin_unlock+0x24/0x40 [ 212.668771][ T7521] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 212.674694][ T7521] ? do_raw_spin_unlock+0x11d/0x230 [ 212.679915][ T7521] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 212.685844][ T7521] evict+0x485/0x870 [ 212.689767][ T7521] ? __lock_acquire+0x7c50/0x7c50 [ 212.694819][ T7521] ? proc_nr_inodes+0x2f0/0x2f0 [ 212.699686][ T7521] ? do_raw_spin_unlock+0x11d/0x230 [ 212.704905][ T7521] ? _raw_spin_unlock+0x24/0x40 [ 212.709773][ T7521] ? iput+0x768/0x980 [ 212.713774][ T7521] ext4_orphan_cleanup+0xbd3/0x1400 [ 212.719082][ T7521] ? ext4_orphan_del+0xb90/0xb90 [ 212.724049][ T7521] ? errseq_check_and_advance+0x62/0x120 [ 212.729701][ T7521] ext4_fill_super+0x7bdf/0x8150 [ 212.734653][ T7521] ? bdev_name+0x2c1/0x3f0 [ 212.739112][ T7521] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 212.745404][ T7521] ? snprintf+0xd7/0x120 [ 212.749672][ T7521] ? preempt_count_add+0x8d/0x190 [ 212.754742][ T7521] ? vscnprintf+0x80/0x80 [ 212.759088][ T7521] ? set_blocksize+0x1d3/0x350 [ 212.763869][ T7521] ? sb_set_blocksize+0xa5/0xe0 [ 212.768739][ T7521] get_tree_bdev+0x3f1/0x610 [ 212.773345][ T7521] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 212.779599][ T7521] vfs_get_tree+0x88/0x270 [ 212.784074][ T7521] do_new_mount+0x24a/0xa40 [ 212.788612][ T7521] __se_sys_mount+0x2d6/0x3c0 [ 212.793309][ T7521] ? __x64_sys_mount+0xc0/0xc0 [ 212.798086][ T7521] ? lockdep_hardirqs_on+0x94/0x140 [ 212.803298][ T7521] ? __x64_sys_mount+0x1c/0xc0 [ 212.808083][ T7521] do_syscall_64+0x4c/0xa0 [ 212.812519][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 212.817215][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 212.821900][ T7521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.827810][ T7521] RIP: 0033:0x7f3f10790e6a [ 212.832235][ T7521] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.851870][ T7521] RSP: 002b:00007f3f1163de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.860297][ T7521] RAX: ffffffffffffffda RBX: 00007f3f1163def0 RCX: 00007f3f10790e6a [ 212.868285][ T7521] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3f1163deb0 [ 212.876268][ T7521] RBP: 0000200000000180 R08: 00007f3f1163def0 R09: 0000000000800718 [ 212.884250][ T7521] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 212.892243][ T7521] R13: 00007f3f1163deb0 R14: 000000000000046f R15: 0000200000000200 [ 212.900241][ T7521] [ 212.903600][ T7521] Kernel Offset: disabled [ 212.908132][ T7521] Rebooting in 86400 seconds..