last executing test programs: 10.448842537s ago: executing program 0 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 9.686325717s ago: executing program 0 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 8.507866359s ago: executing program 2 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xabc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) 8.404451539s ago: executing program 0 (id=582): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) socket$inet6(0xa, 0x1, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="080005000900"], 0x24}}, 0x0) 8.256006625s ago: executing program 2 (id=583): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$sock(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)}], 0x1}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 7.888426322s ago: executing program 2 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x5, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810dc}) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55b}) 6.988227705s ago: executing program 5 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) 6.906475115s ago: executing program 1 (id=592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 6.74414853s ago: executing program 2 (id=593): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 6.687278105s ago: executing program 5 (id=595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 6.587974366s ago: executing program 1 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 6.411808592s ago: executing program 1 (id=597): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 6.222324934s ago: executing program 4 (id=598): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$sock(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="f044eee02144c200c97b003d", 0xc}], 0x1}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 6.164047881s ago: executing program 5 (id=599): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6.123114557s ago: executing program 1 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x1, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(r2, 0x7) 5.948305331s ago: executing program 4 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}}, 0x18}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 5.775171642s ago: executing program 5 (id=603): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 5.535814292s ago: executing program 1 (id=604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.243970047s ago: executing program 5 (id=606): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0xb050, 0x100, 0x2, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 5.134940826s ago: executing program 0 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r6) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x2800, 0x5, 0x1ff, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) 5.092099508s ago: executing program 3 (id=608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 3.783888872s ago: executing program 2 (id=609): socket(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usbip_server_init(0x5) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) fgetxattr(r0, &(0x7f0000001540)=@known='security.selinux\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314010028bf7000fcdbdf250900020071797a32000000000800410073697700140033006272696467653000000000000000000099ac6e2d38f874db0dae60355f6be0bf7b491952aa9cef131fbd5a1977d8c5621f5bece1bbe52b97ee8e6112e383f909"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x5) pipe2(&(0x7f0000000080), 0x80800) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) 3.750037581s ago: executing program 1 (id=610): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313d, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 3.592242589s ago: executing program 3 (id=611): mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) 3.392063287s ago: executing program 4 (id=612): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 3.152387112s ago: executing program 4 (id=613): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x7, 0x364, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 2.899082103s ago: executing program 5 (id=614): syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c696e6f646536342c6c6f63616c616c6c6f633d30303030303030303030303030303030313731342c61636c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00882bb7a63864a19f186813ab5265f313eeeea0cb144b9317f58558f596fa072f9a29c38a293509350482fc7f"], 0x1, 0x4469, &(0x7f000000c700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40046f01, 0x0) 2.388070271s ago: executing program 3 (id=615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) 2.356633592s ago: executing program 0 (id=616): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406e051c0100000000000109022400bd3e00200009040000010300bb0009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.067826345s ago: executing program 4 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 1.968018552s ago: executing program 3 (id=618): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 774.082076ms ago: executing program 0 (id=619): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) socket$inet6(0xa, 0x1, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="080005000900"], 0x24}}, 0x0) 630.700143ms ago: executing program 3 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 580.547592ms ago: executing program 4 (id=621): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{r2}, &(0x7f0000001680), &(0x7f00000016c0)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001380)=""/4096, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) 316.843245ms ago: executing program 3 (id=622): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 0s ago: executing program 2 (id=623): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 83.116553][ T5847] cgroup: Unknown subsys name 'net' [ 83.248300][ T5847] cgroup: Unknown subsys name 'cpuset' [ 83.258584][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.812007][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.914590][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.933879][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.941234][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.950290][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.956907][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.959336][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.965254][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.979065][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.987192][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.994835][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.994846][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.995885][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.013504][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.033618][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.041429][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.055655][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.057222][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.066027][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.077648][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.087296][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.094054][ T5179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.094894][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.108582][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.119448][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.120241][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.134123][ T5179] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.136553][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.141319][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.164518][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.172166][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.758695][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 88.898648][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 89.156038][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.165412][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.172742][ T5859] bridge_slave_0: entered allmulticast mode [ 89.181158][ T5859] bridge_slave_0: entered promiscuous mode [ 89.240906][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 89.253683][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.260818][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.268095][ T5859] bridge_slave_1: entered allmulticast mode [ 89.276680][ T5859] bridge_slave_1: entered promiscuous mode [ 89.407791][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.456787][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.474617][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.520251][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 89.548294][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.556039][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.563178][ T5873] bridge_slave_0: entered allmulticast mode [ 89.572082][ T5873] bridge_slave_0: entered promiscuous mode [ 89.662625][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.672678][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.680409][ T5873] bridge_slave_1: entered allmulticast mode [ 89.688958][ T5873] bridge_slave_1: entered promiscuous mode [ 89.696463][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 89.729216][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.736472][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.743721][ T5867] bridge_slave_0: entered allmulticast mode [ 89.751088][ T5867] bridge_slave_0: entered promiscuous mode [ 89.760940][ T5859] team0: Port device team_slave_0 added [ 89.829116][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.836363][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.845227][ T5867] bridge_slave_1: entered allmulticast mode [ 89.852562][ T5867] bridge_slave_1: entered promiscuous mode [ 89.861782][ T5859] team0: Port device team_slave_1 added [ 89.885941][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.898333][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.030180][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.037426][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.048750][ T5871] bridge_slave_0: entered allmulticast mode [ 90.056347][ T5871] bridge_slave_0: entered promiscuous mode [ 90.083830][ T5876] Bluetooth: hci0: command tx timeout [ 90.097426][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.104608][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.130687][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.146236][ T5873] team0: Port device team_slave_0 added [ 90.158717][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.163529][ T5876] Bluetooth: hci1: command tx timeout [ 90.166086][ T5866] Bluetooth: hci5: command tx timeout [ 90.176249][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.184944][ T5871] bridge_slave_1: entered allmulticast mode [ 90.192605][ T5871] bridge_slave_1: entered promiscuous mode [ 90.224844][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.237643][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.247714][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.247810][ T5866] Bluetooth: hci4: command tx timeout [ 90.254935][ T5876] Bluetooth: hci3: command tx timeout [ 90.261157][ T5866] Bluetooth: hci2: command tx timeout [ 90.272200][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.298583][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.311738][ T5873] team0: Port device team_slave_1 added [ 90.359398][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.432975][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.490798][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.497899][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.524901][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.538279][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.545388][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.571751][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.614906][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.622130][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.629945][ T5860] bridge_slave_0: entered allmulticast mode [ 90.637953][ T5860] bridge_slave_0: entered promiscuous mode [ 90.647940][ T5867] team0: Port device team_slave_0 added [ 90.656981][ T5867] team0: Port device team_slave_1 added [ 90.715603][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.722759][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.730217][ T5860] bridge_slave_1: entered allmulticast mode [ 90.737801][ T5860] bridge_slave_1: entered promiscuous mode [ 90.796992][ T5859] hsr_slave_0: entered promiscuous mode [ 90.804307][ T5859] hsr_slave_1: entered promiscuous mode [ 90.828132][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.835370][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.842505][ T5870] bridge_slave_0: entered allmulticast mode [ 90.851543][ T5870] bridge_slave_0: entered promiscuous mode [ 90.859944][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.867388][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.875421][ T5870] bridge_slave_1: entered allmulticast mode [ 90.883092][ T5870] bridge_slave_1: entered promiscuous mode [ 90.891910][ T5871] team0: Port device team_slave_0 added [ 90.919316][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.929606][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.936997][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.963195][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.010706][ T5873] hsr_slave_0: entered promiscuous mode [ 91.017427][ T5873] hsr_slave_1: entered promiscuous mode [ 91.024206][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 91.030032][ T5873] Cannot create hsr debugfs directory [ 91.054441][ T5871] team0: Port device team_slave_1 added [ 91.062902][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.088266][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.095464][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.121828][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.258214][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.287288][ T118] cfg80211: failed to load regulatory.db [ 91.289073][ T5860] team0: Port device team_slave_0 added [ 91.303049][ T5860] team0: Port device team_slave_1 added [ 91.361613][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.389749][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.396791][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.422739][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.436206][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.443155][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.469263][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.539125][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.546857][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.573018][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.628032][ T5870] team0: Port device team_slave_0 added [ 91.637348][ T5870] team0: Port device team_slave_1 added [ 91.644194][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.651182][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.677682][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.781117][ T5867] hsr_slave_0: entered promiscuous mode [ 91.787982][ T5867] hsr_slave_1: entered promiscuous mode [ 91.795156][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 91.800879][ T5867] Cannot create hsr debugfs directory [ 91.870741][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.878526][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.905040][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.918929][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.926169][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.958725][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.021208][ T5871] hsr_slave_0: entered promiscuous mode [ 92.034265][ T5871] hsr_slave_1: entered promiscuous mode [ 92.040584][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 92.047907][ T5871] Cannot create hsr debugfs directory [ 92.163750][ T5866] Bluetooth: hci0: command tx timeout [ 92.190899][ T5860] hsr_slave_0: entered promiscuous mode [ 92.198200][ T5860] hsr_slave_1: entered promiscuous mode [ 92.204651][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 92.210380][ T5860] Cannot create hsr debugfs directory [ 92.243817][ T5866] Bluetooth: hci5: command tx timeout [ 92.243903][ T5869] Bluetooth: hci1: command tx timeout [ 92.296526][ T5870] hsr_slave_0: entered promiscuous mode [ 92.303114][ T5870] hsr_slave_1: entered promiscuous mode [ 92.309562][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 92.315330][ T5870] Cannot create hsr debugfs directory [ 92.323461][ T5869] Bluetooth: hci3: command tx timeout [ 92.324122][ T5866] Bluetooth: hci4: command tx timeout [ 92.329369][ T5876] Bluetooth: hci2: command tx timeout [ 92.622634][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.707812][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.719370][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.773017][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.927038][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.946574][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.980365][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.007370][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.065280][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.089666][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.102866][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.136387][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.222880][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.236424][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.249996][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.280331][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.439871][ T5870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.485324][ T5870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.521714][ T5870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.553106][ T5870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.579598][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.618452][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.632722][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.647779][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.661411][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.672682][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.729977][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.761667][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.768916][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.814697][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.837834][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.848620][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.855764][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.880343][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.887475][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.902404][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.966688][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.015385][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.050603][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.132120][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.139307][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.150225][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.157356][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.169361][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.176570][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.235765][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.242935][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.250473][ T5876] Bluetooth: hci0: command tx timeout [ 94.324377][ T5876] Bluetooth: hci1: command tx timeout [ 94.329838][ T5876] Bluetooth: hci5: command tx timeout [ 94.403815][ T5869] Bluetooth: hci2: command tx timeout [ 94.409279][ T5869] Bluetooth: hci3: command tx timeout [ 94.414815][ T5876] Bluetooth: hci4: command tx timeout [ 94.437444][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.552818][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.651983][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.668819][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.692623][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.723225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.730431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.787823][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.795042][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.880281][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.887501][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.988554][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.995757][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.017580][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.142369][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.231719][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.267638][ T5859] veth0_vlan: entered promiscuous mode [ 95.329890][ T5859] veth1_vlan: entered promiscuous mode [ 95.352439][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.512874][ T5859] veth0_macvtap: entered promiscuous mode [ 95.572165][ T5859] veth1_macvtap: entered promiscuous mode [ 95.609204][ T5860] veth0_vlan: entered promiscuous mode [ 95.693237][ T5867] veth0_vlan: entered promiscuous mode [ 95.715099][ T5860] veth1_vlan: entered promiscuous mode [ 95.750935][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.792866][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.818179][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.827746][ T5867] veth1_vlan: entered promiscuous mode [ 95.885816][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.898416][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.927649][ T5873] veth0_vlan: entered promiscuous mode [ 95.938219][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.949710][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.980698][ T5873] veth1_vlan: entered promiscuous mode [ 96.029771][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.056720][ T5867] veth0_macvtap: entered promiscuous mode [ 96.109350][ T5867] veth1_macvtap: entered promiscuous mode [ 96.128447][ T5860] veth0_macvtap: entered promiscuous mode [ 96.146421][ T5860] veth1_macvtap: entered promiscuous mode [ 96.161634][ T5871] veth0_vlan: entered promiscuous mode [ 96.207048][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.286578][ T5873] veth0_macvtap: entered promiscuous mode [ 96.300139][ T5871] veth1_vlan: entered promiscuous mode [ 96.311993][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.324731][ T5869] Bluetooth: hci0: command tx timeout [ 96.370680][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.382189][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.396686][ T5873] veth1_macvtap: entered promiscuous mode [ 96.405087][ T5869] Bluetooth: hci5: command tx timeout [ 96.409547][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.410514][ T5869] Bluetooth: hci1: command tx timeout [ 96.429737][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.440946][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.469374][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.481290][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483753][ T5876] Bluetooth: hci4: command tx timeout [ 96.495470][ T5869] Bluetooth: hci3: command tx timeout [ 96.496432][ T5866] Bluetooth: hci2: command tx timeout [ 96.515358][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.578916][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.624943][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.661246][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.671900][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686826][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.716494][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727811][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.739330][ T5871] veth0_macvtap: entered promiscuous mode [ 96.756487][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.766043][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.786387][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.797822][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.811047][ T5871] veth1_macvtap: entered promiscuous mode [ 96.841852][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871338][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.902213][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.914441][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.961207][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.021644][ T5870] veth0_vlan: entered promiscuous mode [ 97.036195][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.047198][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.087645][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.114330][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.122343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.161523][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.178984][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.188327][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.251459][ T5870] veth1_vlan: entered promiscuous mode [ 97.265677][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.420723][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.465741][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.176714][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.201318][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.250162][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.271401][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.378803][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.409546][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.417445][ T5870] veth0_macvtap: entered promiscuous mode [ 98.481856][ T5870] veth1_macvtap: entered promiscuous mode [ 98.542364][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.590133][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.640046][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.707169][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.932255][ T3965] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.958620][ T6028] 9p: Unknown Cache mode or invalid value mtaÎiÅ”ùpcl [ 99.026542][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 99.064428][ T3965] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.084767][ T6030] openvswitch: netlink: Flow key attr not present in new flow. [ 99.193094][ T3965] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.228421][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.501354][ T6047] loop1: detected capacity change from 0 to 164 [ 99.531880][ T6047] Unable to read rock-ridge attributes [ 99.551402][ T6047] Unable to read rock-ridge attributes [ 99.561698][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.599273][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.603803][ T6047] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.649224][ T6051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.768848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.817823][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.914575][ T6057] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 99.986246][ T6056] syzkaller1: entered promiscuous mode [ 100.005743][ T6056] syzkaller1: entered allmulticast mode [ 100.439687][ T6072] loop2: detected capacity change from 0 to 128 [ 100.531519][ T6072] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.613906][ T6072] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.826323][ T6080] loop5: detected capacity change from 0 to 512 [ 100.922236][ T6087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.32'. [ 101.016840][ T6080] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 101.144883][ T6080] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.158145][ T30] audit: type=1326 audit(1758082443.203:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.289474][ T6080] EXT4-fs (loop5): mount failed [ 101.309016][ T30] audit: type=1326 audit(1758082443.203:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.375866][ T30] audit: type=1326 audit(1758082443.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.517856][ T30] audit: type=1326 audit(1758082443.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.599745][ T30] audit: type=1326 audit(1758082443.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.639312][ T6107] syzkaller1: entered promiscuous mode [ 101.640825][ T30] audit: type=1326 audit(1758082443.273:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.662162][ T6107] syzkaller1: entered allmulticast mode [ 101.675877][ T30] audit: type=1326 audit(1758082443.273:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.720935][ T30] audit: type=1326 audit(1758082443.273:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 101.779369][ T30] audit: type=1326 audit(1758082443.273:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3818f8eba9 code=0x7ffc0000 [ 103.408789][ T6139] loop5: detected capacity change from 0 to 512 [ 103.478399][ T6139] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.545610][ T6139] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 103.736781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.746547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.794144][ T6139] EXT4-fs (loop5): 1 truncate cleaned up [ 103.803770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.928863][ T6139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.146660][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.171571][ T6151] bridge_slave_0: left allmulticast mode [ 104.250767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.261244][ T6151] bridge_slave_0: left promiscuous mode [ 104.269467][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.354312][ T6152] loop4: detected capacity change from 0 to 4096 [ 104.361328][ T6151] bridge_slave_1: left allmulticast mode [ 104.464385][ T6151] bridge_slave_1: left promiscuous mode [ 104.520318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.559491][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.758965][ T6151] bond0: (slave bond_slave_0): Releasing backup interface [ 104.921416][ T6151] bond0: (slave bond_slave_1): Releasing backup interface [ 105.179509][ T6151] team0: Port device team_slave_0 removed [ 105.307421][ T6151] team0: Port device team_slave_1 removed [ 105.369465][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.424661][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.498799][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.569246][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.652495][ T6158] team0: Mode changed to "activebackup" [ 105.779518][ T6188] loop4: detected capacity change from 0 to 164 [ 105.900175][ T6188] Unable to read rock-ridge attributes [ 106.038956][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 106.038980][ T30] audit: type=1326 audit(1758082448.093:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.173188][ T30] audit: type=1326 audit(1758082448.123:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.218482][ T6203] loop0: detected capacity change from 0 to 164 [ 106.281826][ T6203] Unable to read rock-ridge attributes [ 106.335522][ T30] audit: type=1326 audit(1758082448.133:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.412890][ T6210] loop3: detected capacity change from 0 to 512 [ 106.456605][ T30] audit: type=1326 audit(1758082448.143:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.503818][ T6210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.614466][ T30] audit: type=1326 audit(1758082448.153:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.645879][ T30] audit: type=1326 audit(1758082448.163:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.669949][ T6210] EXT4-fs (loop3): 1 truncate cleaned up [ 106.678999][ T30] audit: type=1326 audit(1758082448.173:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.706220][ T6210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.769561][ T30] audit: type=1326 audit(1758082448.183:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.840329][ T6210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.913394][ T30] audit: type=1326 audit(1758082448.203:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 106.943998][ T30] audit: type=1326 audit(1758082448.213:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061858eba9 code=0x7ffc0000 [ 107.099962][ T6218] loop4: detected capacity change from 0 to 4096 [ 107.311076][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.2.79'. [ 107.551016][ T6237] loop0: detected capacity change from 0 to 1024 [ 107.593488][ T6237] ======================================================= [ 107.593488][ T6237] WARNING: The mand mount option has been deprecated and [ 107.593488][ T6237] and is ignored by this kernel. Remove the mand [ 107.593488][ T6237] option from the mount to silence this warning. [ 107.593488][ T6237] ======================================================= [ 107.681442][ T6237] EXT4-fs: Ignoring removed oldalloc option [ 107.697889][ T6237] EXT4-fs: Ignoring removed bh option [ 107.894030][ T6237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.448385][ T5859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.523915][ T6246] loop2: detected capacity change from 0 to 2048 [ 108.587363][ T6250] pim6reg1: entered promiscuous mode [ 108.622110][ T6250] pim6reg1: entered allmulticast mode [ 108.720031][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.775628][ T6246] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.002240][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.135137][ T6262] loop5: detected capacity change from 0 to 164 [ 109.171127][ T6262] Unable to read rock-ridge attributes [ 109.294816][ T6266] loop2: detected capacity change from 0 to 512 [ 109.405384][ T6266] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.421991][ T6266] EXT4-fs (loop2): mount failed [ 109.579362][ T6275] Zero length message leads to an empty skb [ 109.734348][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.96'. [ 109.780016][ T6277] loop0: detected capacity change from 0 to 4096 [ 110.807612][ T6302] loop5: detected capacity change from 0 to 2048 [ 110.916986][ T6302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.977392][ T6302] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.233218][ T5870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.238220][ T5229] udevd[5229]: worker [5882] terminated by signal 33 (Unknown signal 33) [ 111.289954][ T5229] udevd[5229]: worker [5882] failed while handling '/devices/virtual/block/loop3' [ 111.305241][ T6314] loop3: detected capacity change from 0 to 512 [ 111.327106][ T6314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.379934][ T6314] EXT4-fs (loop3): 1 truncate cleaned up [ 111.425245][ T6319] netlink: 60 bytes leftover after parsing attributes in process `syz.4.109'. [ 111.428221][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.563557][ T6318] loop2: detected capacity change from 0 to 512 [ 111.604611][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.699860][ T6318] __quota_error: 57 callbacks suppressed [ 111.699887][ T6318] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 111.723911][ T6318] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.761942][ T6331] loop1: detected capacity change from 0 to 128 [ 111.801062][ T6318] EXT4-fs (loop2): mount failed [ 111.833925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.852613][ T6331] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.865370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.136662][ T6331] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.303766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.316564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 112.333777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 112.900338][ T6350] loop2: detected capacity change from 0 to 2048 [ 113.100047][ T6350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.129870][ T6359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 113.142261][ T6364] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.142386][ T6350] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.726704][ T6357] loop4: detected capacity change from 0 to 512 [ 114.197336][ T6357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.241262][ T6357] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.254659][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.055763][ T6391] loop2: detected capacity change from 0 to 1764 [ 115.771142][ T6396] loop0: detected capacity change from 0 to 512 [ 115.873691][ T6396] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 115.911972][ T6396] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.913204][ T6396] EXT4-fs (loop0): mount failed [ 115.924426][ T6397] loop3: detected capacity change from 0 to 4096 [ 116.424250][ T5229] udevd[5229]: worker [5865] terminated by signal 33 (Unknown signal 33) [ 116.541711][ T5229] udevd[5229]: worker [5865] failed while handling '/devices/virtual/block/loop3' [ 116.630236][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.035522][ T6423] netlink: 60 bytes leftover after parsing attributes in process `syz.0.140'. [ 117.097115][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 117.135789][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 117.322360][ T6434] loop0: detected capacity change from 0 to 512 [ 117.420120][ T6434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.501361][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 117.553795][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.686445][ T6434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.363616][ T6447] loop2: detected capacity change from 0 to 519 [ 118.457620][ T6447] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.502986][ T6447] EXT4-fs (loop2): group descriptors corrupted! [ 118.579610][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.828424][ T24] usb 2-1: config 62 has too many interfaces: 189, using maximum allowed: 32 [ 118.895299][ T24] usb 2-1: config 62 has an invalid descriptor of length 0, skipping remainder of the config [ 118.895438][ T24] usb 2-1: config 62 has 1 interface, different from the descriptor's value: 189 [ 118.895492][ T24] usb 2-1: config 62 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.895547][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 118.895574][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.927810][ T24] usbhid 2-1:62.0: couldn't find an input interrupt endpoint [ 119.236128][ T6467] loop3: detected capacity change from 0 to 4096 [ 119.376299][ T6476] loop4: detected capacity change from 0 to 1024 [ 119.550033][ T6476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.666060][ T6475] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.232548][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.619920][ T118] usb 2-1: USB disconnect, device number 2 [ 120.910117][ T6498] loop1: detected capacity change from 0 to 512 [ 121.058853][ T6498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.834611][ T6498] EXT4-fs (loop1): 1 truncate cleaned up [ 121.842168][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.900856][ T6522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.174'. [ 121.920815][ T6498] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.006237][ T6519] pim6reg1: entered promiscuous mode [ 122.011605][ T6519] pim6reg1: entered allmulticast mode [ 122.112512][ T6525] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 122.120480][ T5967] IPVS: starting estimator thread 0... [ 122.233392][ T30] audit: type=1326 audit(1758082464.283:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 122.257400][ T6528] IPVS: using max 23 ests per chain, 55200 per kthread [ 123.072470][ T30] audit: type=1326 audit(1758082464.353:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.096020][ T30] audit: type=1326 audit(1758082464.353:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.119862][ T30] audit: type=1326 audit(1758082464.353:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.145133][ T30] audit: type=1326 audit(1758082464.363:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.167298][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.173625][ T30] audit: type=1326 audit(1758082464.363:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.195766][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.201829][ T30] audit: type=1326 audit(1758082464.363:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.306874][ T30] audit: type=1326 audit(1758082464.373:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.328987][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.517993][ T30] audit: type=1326 audit(1758082465.083:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.643362][ T30] audit: type=1326 audit(1758082465.083:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 123.665586][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.803536][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'. [ 125.248829][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 125.854720][ T6587] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 126.044036][ T6589] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.066588][ T5967] IPVS: starting estimator thread 0... [ 126.173541][ T6596] IPVS: using max 24 ests per chain, 57600 per kthread [ 126.392468][ T6604] pim6reg1: entered promiscuous mode [ 126.422467][ T6604] pim6reg1: entered allmulticast mode [ 126.432914][ T6605] loop4: detected capacity change from 0 to 256 [ 126.445228][ T6607] loop1: detected capacity change from 0 to 512 [ 126.466008][ T6605] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.528351][ T6607] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 126.541053][ T6605] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.609722][ T6607] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.719297][ T6607] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.196: corrupted inode contents [ 126.742589][ T6607] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.196: mark_inode_dirty error [ 126.763827][ T6607] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.196: corrupted inode contents [ 126.789641][ T6607] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.196: mark_inode_dirty error [ 126.820638][ T6607] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.196: corrupted inode contents [ 126.867089][ T6607] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 126.891393][ T6607] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.196: corrupted inode contents [ 126.916592][ T6607] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.196: mark_inode_dirty error [ 126.935348][ T6617] loop5: detected capacity change from 0 to 2048 [ 126.937012][ T6607] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 126.962405][ T6607] EXT4-fs (loop1): 1 truncate cleaned up [ 126.983607][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 127.037910][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.072658][ T6617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.166490][ T6617] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.388681][ T6626] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 127.442556][ T5870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.501149][ T6632] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 127.507848][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.547415][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 127.549592][ T6636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.640315][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.206'. [ 127.731177][ T6632] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 127.737761][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.753732][ T5967] vhci_hcd: vhci_device speed not set [ 127.802605][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 127.820481][ T6636] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12) [ 127.827125][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 127.873393][ T5967] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 127.905241][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 127.977828][ T6632] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 127.984535][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.044749][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 128.045551][ T6636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 128.204543][ T6649] vhci_hcd: connection closed [ 128.204694][ T6633] vhci_hcd: connection reset by peer [ 128.206357][ T6654] vhci_hcd: connection closed [ 128.211193][ T6644] vhci_hcd: connection closed [ 128.219838][ T13] vhci_hcd: stop threads [ 128.265042][ T13] vhci_hcd: release socket [ 128.277145][ T13] vhci_hcd: disconnect device [ 128.291026][ T6665] netlink: 60 bytes leftover after parsing attributes in process `syz.5.213'. [ 128.305634][ T13] vhci_hcd: stop threads [ 128.309936][ T13] vhci_hcd: release socket [ 128.357683][ T13] vhci_hcd: disconnect device [ 128.372668][ T13] vhci_hcd: stop threads [ 128.379783][ T13] vhci_hcd: release socket [ 128.385523][ T13] vhci_hcd: disconnect device [ 128.391865][ T13] vhci_hcd: stop threads [ 128.398640][ T13] vhci_hcd: release socket [ 128.409594][ T13] vhci_hcd: disconnect device [ 128.555875][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.571979][ T6675] loop5: detected capacity change from 0 to 128 [ 128.602062][ T6675] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.657318][ T6675] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.841740][ T6677] loop1: detected capacity change from 0 to 128 [ 128.920984][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 128.921010][ T30] audit: type=1800 audit(1758082470.973:135): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.220" name="file2" dev="loop1" ino=1048608 res=0 errno=0 [ 128.949508][ T6677] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 129.014864][ T6677] FAT-fs (loop1): Filesystem has been set read-only [ 129.021864][ T6677] syz.1.220: attempt to access beyond end of device [ 129.021864][ T6677] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.164701][ T6685] loop5: detected capacity change from 0 to 512 [ 129.193432][ T6685] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.267951][ T6685] EXT4-fs (loop5): 1 truncate cleaned up [ 129.321362][ T6685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.361742][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.499666][ T6696] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 129.573821][ T6698] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 129.665095][ T6696] team0: Port device dummy0 added [ 129.810299][ T6698] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 129.863093][ T6702] loop0: detected capacity change from 0 to 4096 [ 129.895787][ T6698] team0: Failed to send options change via netlink (err -105) [ 129.919149][ T6698] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 129.960464][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.234'. [ 129.977100][ T6698] team0: Port device dummy0 removed [ 130.003712][ T6698] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.983620][ T6727] loop5: detected capacity change from 0 to 512 [ 131.064284][ T6727] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 131.149708][ T6727] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.170323][ T6727] EXT4-fs (loop5): mount failed [ 131.563042][ T6743] loop2: detected capacity change from 0 to 1764 [ 131.660858][ T6745] loop4: detected capacity change from 0 to 512 [ 131.752154][ T6745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.766347][ T6745] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.884727][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.388424][ T6758] loop5: detected capacity change from 0 to 4096 [ 132.490929][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.252'. [ 133.304728][ T5967] vhci_hcd: vhci_device speed not set [ 133.710759][ T6777] loop1: detected capacity change from 0 to 512 [ 133.831844][ T6783] loop3: detected capacity change from 0 to 256 [ 135.784888][ T6800] loop5: detected capacity change from 0 to 128 [ 135.831068][ T6800] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.871337][ T6800] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.878549][ T6804] lo speed is unknown, defaulting to 1000 [ 135.914408][ T6804] lo speed is unknown, defaulting to 1000 [ 136.003697][ T6804] lo speed is unknown, defaulting to 1000 [ 136.590336][ T6804] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.800831][ T6817] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 136.854786][ T6804] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.207781][ T6817] process 'syz.3.267' launched './file1' with NULL argv: empty string added [ 137.376854][ T6804] lo speed is unknown, defaulting to 1000 [ 137.385658][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.399959][ T6804] lo speed is unknown, defaulting to 1000 [ 137.492970][ T6804] lo speed is unknown, defaulting to 1000 [ 137.615574][ T6804] lo speed is unknown, defaulting to 1000 [ 137.784914][ T6804] lo speed is unknown, defaulting to 1000 [ 137.828260][ T6824] lo speed is unknown, defaulting to 1000 [ 137.854828][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.274'. [ 137.910535][ T6804] lo speed is unknown, defaulting to 1000 [ 138.416123][ T30] audit: type=1326 audit(1758082480.463:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.527497][ T30] audit: type=1326 audit(1758082480.513:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.551982][ T30] audit: type=1326 audit(1758082480.513:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.683352][ T30] audit: type=1326 audit(1758082480.513:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.715647][ T30] audit: type=1326 audit(1758082480.553:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.800588][ T30] audit: type=1326 audit(1758082480.553:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.832504][ T30] audit: type=1326 audit(1758082480.553:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.897922][ T30] audit: type=1326 audit(1758082480.563:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.926084][ T30] audit: type=1326 audit(1758082480.563:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 138.998009][ T6859] loop2: detected capacity change from 0 to 1024 [ 139.023123][ T6859] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.043477][ T30] audit: type=1326 audit(1758082480.563:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f84dc98eba9 code=0x7ffc0000 [ 139.106642][ T6866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.133159][ T6859] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.282: Invalid block bitmap block 0 in block_group 0 [ 139.189604][ T6859] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.282: Failed to acquire dquot type 0 [ 139.246381][ T6869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.285'. [ 139.284955][ T6859] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.282: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.352860][ T6859] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.282: Invalid inode bitmap blk 0 in block_group 0 [ 139.376850][ T6593] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 139.450042][ T6859] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 139.500658][ T6859] EXT4-fs (loop2): 1 orphan inode deleted [ 139.539008][ T6859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.563032][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 139.579590][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.720625][ T6880] loop0: detected capacity change from 0 to 512 [ 139.818253][ T6880] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.837294][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.846971][ T6880] EXT4-fs (loop0): mount failed [ 140.209362][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.861812][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 140.861847][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 140.862616][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 140.862639][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 140.957198][ T6905] loop4: detected capacity change from 0 to 128 [ 140.983463][ T6907] loop3: detected capacity change from 0 to 128 [ 141.113578][ T6907] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.147752][ T6911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.299'. [ 141.193722][ T6907] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.660792][ T6918] loop3: detected capacity change from 0 to 512 [ 141.797516][ T6918] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.922743][ T6918] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.301: bad orphan inode 13 [ 141.993535][ T6918] ext4_test_bit(bit=12, block=18) = 1 [ 142.033063][ T6918] is_bad_inode(inode)=0 [ 142.040987][ T6918] NEXT_ORPHAN(inode)=2130706432 [ 142.050921][ T6918] max_ino=32 [ 142.054860][ T6918] i_nlink=1 [ 142.098755][ T6918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.259842][ T6918] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 142.566731][ T6918] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.301: bg 0: block 248: padding at end of block bitmap is not set [ 142.590332][ T6918] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.301: Failed to acquire dquot type 1 [ 142.615001][ T6918] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.701908][ T6934] loop4: detected capacity change from 0 to 4096 [ 143.724275][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.955707][ T6954] mmap: syz.1.312 (6954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.342142][ T6960] syzkaller1: entered promiscuous mode [ 144.360758][ T6960] syzkaller1: entered allmulticast mode [ 144.420528][ T6958] netlink: 144 bytes leftover after parsing attributes in process `syz.1.315'. [ 145.130130][ T6973] loop0: detected capacity change from 0 to 512 [ 145.202190][ T6976] loop4: detected capacity change from 0 to 512 [ 145.230526][ T6973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.301499][ T6976] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 145.307496][ T6973] EXT4-fs (loop0): 1 truncate cleaned up [ 145.314838][ T6976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.326840][ T6973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.359786][ T6976] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.322: corrupted inode contents [ 145.404782][ T6973] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.460794][ T6976] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.322: mark_inode_dirty error [ 145.551762][ T6976] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.322: corrupted inode contents [ 145.552361][ T6976] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.322: mark_inode_dirty error [ 145.553152][ T6976] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.322: corrupted inode contents [ 145.555060][ T6976] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 145.555523][ T6976] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.322: corrupted inode contents [ 145.555966][ T6976] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.322: mark_inode_dirty error [ 145.556455][ T6976] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 145.557972][ T6976] EXT4-fs (loop4): 1 truncate cleaned up [ 145.560755][ T2133] __quota_error: 43 callbacks suppressed [ 145.560771][ T2133] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 145.560902][ T2133] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1 [ 145.604559][ T6976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.963807][ T6991] netlink: 'syz.0.325': attribute type 10 has an invalid length. [ 146.013753][ T6991] team0: Port device dummy0 added [ 146.042748][ T6991] netlink: 'syz.0.325': attribute type 10 has an invalid length. [ 146.075557][ T6991] team0: Port device dummy0 removed [ 146.147236][ T6991] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.422610][ T7002] loop0: detected capacity change from 0 to 1764 [ 146.645867][ T7006] loop0: detected capacity change from 0 to 512 [ 146.723687][ T7006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.802200][ T7006] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.055688][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.086263][ T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.190278][ T5859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.289227][ T974] usb 6-1: config 62 has too many interfaces: 189, using maximum allowed: 32 [ 147.312975][ T974] usb 6-1: config 62 has 1 interface, different from the descriptor's value: 189 [ 147.332893][ T7017] loop2: detected capacity change from 0 to 4096 [ 147.352641][ T974] usb 6-1: config 62 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.434557][ T974] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 147.459329][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.606974][ T974] usbhid 6-1:62.0: couldn't find an input interrupt endpoint [ 147.818290][ T7026] loop4: detected capacity change from 0 to 512 [ 147.884046][ T7026] journal_path: Non-blockdev passed as './bus' [ 147.890528][ T7026] EXT4-fs: error: could not find journal device path [ 148.710920][ T7041] loop0: detected capacity change from 0 to 1764 [ 148.923821][ T7044] lo speed is unknown, defaulting to 1000 [ 148.965100][ T7044] lo speed is unknown, defaulting to 1000 [ 148.994603][ T7044] lo speed is unknown, defaulting to 1000 [ 149.087557][ T7044] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.699550][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 149.746246][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 149.797431][ T7044] lo speed is unknown, defaulting to 1000 [ 149.859730][ T7044] lo speed is unknown, defaulting to 1000 [ 149.892457][ T5939] usb 6-1: USB disconnect, device number 2 [ 149.894956][ T7044] lo speed is unknown, defaulting to 1000 [ 149.964546][ T7044] lo speed is unknown, defaulting to 1000 [ 149.982133][ T7044] lo speed is unknown, defaulting to 1000 [ 150.004714][ T7053] syzkaller1: entered promiscuous mode [ 150.025040][ T7053] syzkaller1: entered allmulticast mode [ 150.039099][ T7044] lo speed is unknown, defaulting to 1000 [ 150.697508][ T7070] netlink: 'syz.5.354': attribute type 10 has an invalid length. [ 150.737353][ T7074] IPv6: Can't replace route, no match found [ 150.779634][ T7070] team0: Port device dummy0 added [ 150.843841][ T7075] netlink: 'syz.5.354': attribute type 10 has an invalid length. [ 150.871142][ T7071] loop2: detected capacity change from 0 to 4096 [ 150.920894][ T7075] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 150.995332][ T7075] team0: Failed to send options change via netlink (err -105) [ 151.090103][ T7075] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 151.199606][ T7075] team0: Port device dummy0 removed [ 151.300353][ T7083] loop4: detected capacity change from 0 to 1764 [ 151.748524][ T7075] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.327264][ T7103] sch_fq: defrate 7 ignored. [ 153.133879][ T974] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.339785][ T974] usb 5-1: config 62 has too many interfaces: 189, using maximum allowed: 32 [ 153.387516][ T974] usb 5-1: config 62 has 1 interface, different from the descriptor's value: 189 [ 153.460771][ T974] usb 5-1: config 62 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.498746][ T974] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 153.538043][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.575718][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 153.612260][ T974] usbhid 5-1:62.0: couldn't find an input interrupt endpoint [ 153.625551][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 153.660863][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 153.701511][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 154.178527][ T7135] loop1: detected capacity change from 0 to 1764 [ 154.191950][ T7137] loop0: detected capacity change from 0 to 128 [ 154.199794][ T7137] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.212227][ T7137] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.289772][ T7139] netlink: 'syz.2.376': attribute type 10 has an invalid length. [ 154.306258][ T7139] team0: Port device dummy0 added [ 154.314952][ T7139] netlink: 'syz.2.376': attribute type 10 has an invalid length. [ 154.326735][ T7139] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.449374][ T7139] team0: Failed to send options change via netlink (err -105) [ 154.493605][ T7139] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.528295][ T7139] team0: Port device dummy0 removed [ 154.594183][ T7139] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.660669][ T7131] pim6reg1: entered promiscuous mode [ 154.675804][ T7131] pim6reg1: entered allmulticast mode [ 154.907383][ T7147] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.971258][ T7149] sch_fq: defrate 7 ignored. [ 154.973020][ T7147] FAT-fs (loop11): unable to read boot sector [ 155.124607][ T974] usb 5-1: USB disconnect, device number 2 [ 155.256456][ T7154] syzkaller1: entered promiscuous mode [ 155.262043][ T7154] syzkaller1: entered allmulticast mode [ 155.792706][ T30] audit: type=1326 audit(1758082497.843:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 155.854736][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 155.874015][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 155.878942][ T30] audit: type=1326 audit(1758082497.873:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 155.903379][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 155.928100][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 155.990518][ T30] audit: type=1326 audit(1758082497.883:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.100617][ T30] audit: type=1326 audit(1758082497.883:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.207404][ T30] audit: type=1326 audit(1758082497.883:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.319614][ T30] audit: type=1326 audit(1758082497.903:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.377948][ T7177] loop2: detected capacity change from 0 to 1024 [ 156.440251][ T7177] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.472280][ T30] audit: type=1326 audit(1758082497.903:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.550147][ T30] audit: type=1326 audit(1758082497.913:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.575586][ T30] audit: type=1326 audit(1758082497.913:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1f98eba9 code=0x7ffc0000 [ 156.600052][ T30] audit: type=1326 audit(1758082497.913:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c1f98d510 code=0x7ffc0000 [ 156.601448][ T7177] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.391: Invalid block bitmap block 0 in block_group 0 [ 156.730983][ T7177] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.391: Failed to acquire dquot type 0 [ 156.812919][ T7187] loop3: detected capacity change from 0 to 2048 [ 156.821019][ T7177] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.391: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.963917][ T7177] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.391: Invalid inode bitmap blk 0 in block_group 0 [ 157.003137][ T7187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.023515][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 157.061945][ T7177] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 157.071085][ T7177] EXT4-fs (loop2): 1 orphan inode deleted [ 157.083777][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.272005][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.461878][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.051168][ T7220] loop2: detected capacity change from 0 to 128 [ 159.090364][ T7220] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.147086][ T7220] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.151549][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'. [ 159.561578][ T7233] netlink: 144 bytes leftover after parsing attributes in process `syz.1.412'. [ 160.959717][ T7261] loop0: detected capacity change from 0 to 128 [ 161.026750][ T7259] loop4: detected capacity change from 0 to 512 [ 161.034433][ T7264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.424'. [ 161.065528][ T7259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.093578][ T5939] Process accounting resumed [ 161.100836][ T5939] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 161.144450][ T7259] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 161.152408][ T7259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 161.163476][ T5939] FAT-fs (loop0): Filesystem has been set read-only [ 161.234945][ T7259] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 161.302423][ T7259] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 161.360099][ T7271] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 161.377220][ T7259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.564126][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 161.564160][ T30] audit: type=1107 audit(1758082503.613:224): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 161.665601][ T7272] loop3: detected capacity change from 0 to 4096 [ 161.675865][ T7280] overlayfs: failed to clone upperpath [ 162.340616][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.830972][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.439'. [ 163.210669][ T5939] IPVS: starting estimator thread 0... [ 163.227755][ T7314] loop4: detected capacity change from 0 to 512 [ 163.243524][ T7314] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 163.323584][ T7316] IPVS: using max 25 ests per chain, 60000 per kthread [ 163.390207][ T7314] EXT4-fs (loop4): invalid journal inode [ 163.448955][ T7314] EXT4-fs (loop4): can't get journal size [ 163.542532][ T7314] EXT4-fs (loop4): 1 truncate cleaned up [ 163.575294][ T7318] loop1: detected capacity change from 0 to 4096 [ 163.624877][ T7314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.647565][ T7320] tipc: Started in network mode [ 163.652482][ T7320] tipc: Node identity 5a8031d7b974, cluster identity 4711 [ 163.660580][ T7320] tipc: Enabled bearer , priority 0 [ 163.681309][ T7314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.910229][ T6134] tipc: Resetting bearer [ 163.994942][ T7309] tipc: Resetting bearer [ 164.042881][ T30] audit: type=1326 audit(1758082506.093:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 164.139356][ T30] audit: type=1326 audit(1758082506.093:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 164.161673][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.335489][ T30] audit: type=1326 audit(1758082506.153:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 164.357723][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.437899][ T30] audit: type=1326 audit(1758082506.153:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 164.460299][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.630435][ T30] audit: type=1326 audit(1758082506.153:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 164.726296][ T974] tipc: Node number set to 3824431575 [ 164.905081][ T30] audit: type=1326 audit(1758082506.163:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 164.927363][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.477403][ T7352] loop1: detected capacity change from 0 to 512 [ 165.485681][ T30] audit: type=1326 audit(1758082506.163:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 165.508190][ T30] audit: type=1326 audit(1758082506.163:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 165.542690][ T30] audit: type=1326 audit(1758082506.163:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 165.655193][ T7352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.683848][ T7352] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.328951][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.469811][ T5998] IPVS: starting estimator thread 0... [ 166.567272][ T7363] IPVS: using max 23 ests per chain, 55200 per kthread [ 166.753359][ T7369] loop3: detected capacity change from 0 to 128 [ 166.768150][ T7369] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.768754][ T7367] loop1: detected capacity change from 0 to 4096 [ 166.781059][ T7369] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.618659][ T7309] tipc: Disabling bearer [ 168.650983][ T7330] lo speed is unknown, defaulting to 1000 [ 168.848190][ T7374] pim6reg1: entered promiscuous mode [ 168.854298][ T7374] pim6reg1: entered allmulticast mode [ 169.342180][ T7401] loop3: detected capacity change from 0 to 128 [ 169.366120][ T7401] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.487590][ T7401] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.532871][ T7406] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 169.615025][ T7409] loop2: detected capacity change from 0 to 512 [ 169.698824][ T7409] EXT4-fs (loop2): orphan cleanup on readonly fs [ 169.999470][ T7409] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.479: bad orphan inode 13 [ 170.052793][ T7409] ext4_test_bit(bit=12, block=18) = 1 [ 170.058606][ T7409] is_bad_inode(inode)=0 [ 170.062981][ T7409] NEXT_ORPHAN(inode)=2130706432 [ 170.071284][ T7409] max_ino=32 [ 170.074616][ T7409] i_nlink=1 [ 170.079887][ T7409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.133890][ T7409] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 170.193172][ T7409] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 170.293042][ T7426] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.348293][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.587053][ T7435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.489'. [ 170.968414][ T7443] loop5: detected capacity change from 0 to 1024 [ 171.023775][ T7443] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.091833][ T7443] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.491: Invalid block bitmap block 0 in block_group 0 [ 171.222906][ T7443] Quota error (device loop5): write_blk: dquota write failed [ 171.263589][ T7443] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 171.312471][ T7443] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.491: Failed to acquire dquot type 0 [ 171.349131][ T7443] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.491: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.403582][ T7443] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.491: Invalid inode bitmap blk 0 in block_group 0 [ 171.424262][ T64] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 171.445168][ T7443] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 171.466224][ T64] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 171.562648][ T7443] EXT4-fs (loop5): 1 orphan inode deleted [ 171.605909][ T7443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.821423][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.491'. [ 171.865190][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.491'. [ 171.893564][ T30] audit: type=1326 audit(1758082513.943:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 171.941879][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.491'. [ 171.960313][ T7470] loop2: detected capacity change from 0 to 1024 [ 171.975323][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.491'. [ 172.028376][ T30] audit: type=1326 audit(1758082513.943:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 172.062232][ T7470] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.079054][ T30] audit: type=1326 audit(1758082513.943:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 172.149388][ T7470] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.500: Invalid block bitmap block 0 in block_group 0 [ 172.169347][ T30] audit: type=1326 audit(1758082513.943:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 172.196253][ T30] audit: type=1326 audit(1758082513.943:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 172.222919][ T30] audit: type=1326 audit(1758082513.973:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 172.235433][ T5870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.245917][ T30] audit: type=1326 audit(1758082513.973:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5fb38eba9 code=0x7ffc0000 [ 172.307973][ T7470] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.500: Failed to acquire dquot type 0 [ 172.328790][ T7447] loop1: detected capacity change from 0 to 32768 [ 172.364291][ T7470] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.500: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.446590][ T7470] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.500: Invalid inode bitmap blk 0 in block_group 0 [ 172.475760][ T13] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 172.522750][ T7470] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 172.661852][ T7470] EXT4-fs (loop2): 1 orphan inode deleted [ 172.674134][ T7447] JBD2: Ignoring recovery information on journal [ 172.772975][ T7470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.059870][ T7447] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.243029][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.486196][ T5871] ocfs2: Unmounting device (7,1) on (node local) [ 174.094019][ T7511] loop5: detected capacity change from 0 to 1024 [ 174.147916][ T7511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.302178][ T7513] loop1: detected capacity change from 0 to 2048 [ 174.396276][ T7513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 174.579055][ T5870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.652623][ T7529] bond0: (slave dummy0): Releasing backup interface [ 174.772456][ T7529] bridge_slave_0: left allmulticast mode [ 174.802253][ T7529] bridge_slave_0: left promiscuous mode [ 174.823972][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.046231][ T7529] bridge_slave_1: left allmulticast mode [ 175.079150][ T7529] bridge_slave_1: left promiscuous mode [ 175.106221][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.169993][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 175.212571][ T7529] bond0: (slave bond_slave_0): Releasing backup interface [ 175.336688][ T7529] bond0: (slave bond_slave_1): Releasing backup interface [ 175.458859][ T7554] tmpfs: Bad value for 'mpol' [ 175.521627][ T7559] netlink: 132 bytes leftover after parsing attributes in process `syz.5.532'. [ 175.542266][ T7558] loop2: detected capacity change from 0 to 512 [ 175.557395][ T7529] team0: Port device team_slave_0 removed [ 175.610170][ T7558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.637843][ T7558] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.530: iget: bad extended attribute block 1 [ 175.705378][ T7529] team0: Port device team_slave_1 removed [ 175.747843][ T7558] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.530: couldn't read orphan inode 15 (err -117) [ 175.784768][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.792203][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.837288][ T7558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.886052][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.903529][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.148110][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.354075][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 176.420905][ T7571] pim6reg: entered allmulticast mode [ 176.618753][ T7571] pim6reg: left allmulticast mode [ 176.729854][ T7565] lo speed is unknown, defaulting to 1000 [ 176.730554][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 176.892081][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 177.157073][ T7590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.173384][ T7590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.197198][ T7590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.246595][ T7590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.446800][ T7616] loop4: detected capacity change from 0 to 2048 [ 178.467940][ T7618] pim6reg1: entered promiscuous mode [ 178.521712][ T7618] pim6reg1: entered allmulticast mode [ 178.566130][ T7616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.700156][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 178.700181][ T30] audit: type=1800 audit(1758082520.753:273): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.551" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 178.888414][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.352748][ T7635] loop4: detected capacity change from 0 to 128 [ 179.365905][ T7635] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.169387][ T7635] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.875277][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 181.139184][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 181.710684][ T7673] loop1: detected capacity change from 0 to 512 [ 182.198161][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 182.373951][ T7682] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 182.459860][ T7684] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 182.730051][ T7682] team0: Port device dummy0 added [ 182.765370][ T7684] team0: Port device dummy0 removed [ 182.783855][ T7684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.575921][ T7710] netlink: 48 bytes leftover after parsing attributes in process `syz.5.584'. [ 183.657656][ T30] audit: type=1326 audit(1758082525.713:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.1.585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c1f98eba9 code=0x0 [ 183.715364][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 183.748193][ T7716] tipc: Started in network mode [ 183.771559][ T7716] tipc: Node identity 7, cluster identity 4711 [ 183.794983][ T7716] tipc: Node number set to 7 [ 184.185572][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 184.215273][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 184.245254][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 184.277383][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 184.771186][ T7732] loop2: detected capacity change from 0 to 512 [ 184.863698][ T7735] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 184.888612][ T7732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.925832][ T7732] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.944050][ T7735] bond0: (slave dummy0): Releasing backup interface [ 184.976918][ T7743] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 185.077404][ T7735] team0: Port device dummy0 added [ 185.184189][ T7743] team0: Port device dummy0 removed [ 185.216549][ T7743] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 185.648000][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 185.927147][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.603'. [ 185.984849][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.603'. [ 186.085877][ T7768] bridge0: entered promiscuous mode [ 186.117024][ T7768] bridge0: port 3(macsec1) entered blocking state [ 186.144314][ T7768] bridge0: port 3(macsec1) entered disabled state [ 186.168050][ T7768] macsec1: entered allmulticast mode [ 186.198992][ T7768] bridge0: entered allmulticast mode [ 186.241271][ T7768] macsec1: left allmulticast mode [ 186.261144][ T7768] bridge0: left allmulticast mode [ 186.296349][ T7768] bridge0: left promiscuous mode [ 187.743051][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.409985][ T7793] loop4: detected capacity change from 0 to 128 [ 188.788414][ T30] audit: type=1800 audit(1758082530.833:275): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.613" name="file2" dev="loop4" ino=1048621 res=0 errno=0 [ 188.836589][ T7793] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 188.973853][ T7793] FAT-fs (loop4): Filesystem has been set read-only [ 189.022692][ T7793] syz.4.613: attempt to access beyond end of device [ 189.022692][ T7793] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 189.276285][ T7802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 189.282956][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.366678][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 189.415974][ T7807] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 189.422550][ T7807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.505370][ T7807] vhci_hcd vhci_hcd.0: Device attached [ 189.549652][ T7802] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 189.556308][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.641834][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 189.730731][ T7802] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18) [ 189.737470][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.772157][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 189.807690][ T7817] __nla_validate_parse: 3 callbacks suppressed [ 189.807726][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 189.864323][ T7802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.872955][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 189.893407][ T5998] usb 38-1: SetAddress Request (2) to port 0 [ 189.900812][ T5998] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 189.917094][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 189.929407][ T7802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.943434][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 190.554077][ T7819] vhci_hcd: connection closed [ 190.603504][ T64] vhci_hcd: stop threads [ 190.673961][ T7804] vhci_hcd: connection reset by peer [ 190.679826][ T7813] vhci_hcd: connection closed [ 190.680086][ T7809] vhci_hcd: connection closed [ 190.691224][ T64] vhci_hcd: release socket [ 190.774564][ T64] vhci_hcd: disconnect device [ 190.823754][ T64] vhci_hcd: stop threads [ 190.828104][ T64] vhci_hcd: release socket [ 190.832655][ T64] vhci_hcd: disconnect device [ 190.843644][ T64] vhci_hcd: stop threads [ 190.847970][ T64] vhci_hcd: release socket [ 190.863707][ T64] vhci_hcd: disconnect device [ 190.868648][ T64] vhci_hcd: stop threads [ 190.872992][ T64] vhci_hcd: release socket [ 190.892498][ T64] vhci_hcd: disconnect device [ 190.924467][ T7795] loop5: detected capacity change from 0 to 32768 [ 191.038991][ T7829] loop4: detected capacity change from 0 to 512 [ 191.092715][ T7795] JBD2: Ignoring recovery information on journal [ 191.237417][ T7834] loop3: detected capacity change from 0 to 512 [ 191.396568][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.466240][ T7829] ------------[ cut here ]------------ [ 191.472101][ T7829] EA inode 11 i_nlink=2 [ 191.503565][ T7834] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.517644][ T7795] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 191.558134][ T7829] WARNING: CPU: 0 PID: 7829 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 191.569078][ T7829] Modules linked in: [ 191.574488][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(full) [ 191.584483][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.595661][ T7829] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 191.602367][ T7829] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 a0 e5 9f 8b 4c 89 fe e8 7d 58 fd fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 f4 54 [ 191.622855][ T7829] RSP: 0018:ffffc9000e4af1a0 EFLAGS: 00010246 [ 191.631411][ T7829] RAX: db756c8bba900400 RBX: dffffc0000000000 RCX: 0000000000080000 [ 191.641778][ T7829] RDX: ffffc9000c6c3000 RSI: 00000000000086ca RDI: 00000000000086cb [ 191.650574][ T7829] RBP: ffffc9000e4af298 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 191.659790][ T7829] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff888055c775a0 [ 191.668511][ T7829] R13: 1ffff1100ab8eeb4 R14: 00000000ffffffff R15: 000000000000000b [ 191.677637][ T7829] FS: 00007f84dd8156c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 191.687552][ T7829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.695625][ T7829] CR2: 000000110c2a2140 CR3: 0000000031f89000 CR4: 0000000000350ef0 [ 191.704429][ T7829] Call Trace: [ 191.707840][ T7829] [ 191.711501][ T7829] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 191.718241][ T7829] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 191.725319][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.730996][ T7829] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 191.738474][ T7829] ext4_xattr_set_entry+0xabb/0x1e20 [ 191.746041][ T7829] ext4_xattr_ibody_set+0x254/0x6a0 [ 191.751311][ T7829] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 191.757989][ T7829] __ext4_expand_extra_isize+0x30d/0x400 [ 191.764406][ T7829] __ext4_mark_inode_dirty+0x46c/0x700 [ 191.770036][ T7829] ext4_evict_inode+0x80d/0xee0 [ 191.775778][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.781689][ T7829] ? __pfx_ext4_evict_inode+0x10/0x10 [ 191.787837][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.794197][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.800091][ T7829] ? do_raw_spin_unlock+0x122/0x240 [ 191.806255][ T7829] ? __pfx_ext4_evict_inode+0x10/0x10 [ 191.811677][ T7829] evict+0x504/0x9c0 [ 191.816317][ T7829] ? __pfx_evict+0x10/0x10 [ 191.820910][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.827295][ T7829] ? do_raw_spin_unlock+0x122/0x240 [ 191.832553][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.840722][ T7829] ? _raw_spin_unlock+0x28/0x50 [ 191.847589][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.853917][ T7829] ? iput+0x6d8/0x9d0 [ 191.857950][ T7829] ext4_orphan_cleanup+0xc20/0x1460 [ 191.863204][ T7829] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 191.869628][ T7829] ? ext4_register_li_request+0x640/0x720 [ 191.876016][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.882258][ T7829] ? errseq_check_and_advance+0x66/0x120 [ 191.888640][ T7829] ext4_fill_super+0x57df/0x6090 [ 191.894258][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.899930][ T7829] ? __pfx_ext4_fill_super+0x10/0x10 [ 191.905908][ T7829] ? set_blocksize+0x21e/0x500 [ 191.910711][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.917084][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.922766][ T7829] ? sb_set_blocksize+0x104/0x180 [ 191.928590][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.936366][ T7829] ? setup_bdev_super+0x4c1/0x5b0 [ 191.941546][ T7829] get_tree_bdev_flags+0x40e/0x4d0 [ 191.948692][ T7829] ? __pfx_ext4_fill_super+0x10/0x10 [ 191.954880][ T7829] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 191.960563][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.966884][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.972548][ T7829] vfs_get_tree+0x92/0x2b0 [ 191.977650][ T7829] do_new_mount+0x2a2/0x9e0 [ 191.982197][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.988537][ T7829] ? ns_capable+0x8a/0xf0 [ 191.992895][ T7829] ? __pfx_do_new_mount+0x10/0x10 [ 191.998675][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.005082][ T7829] ? path_mount+0x61c/0xfe0 [ 192.009631][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.016001][ T7829] __se_sys_mount+0x317/0x410 [ 192.020747][ T7829] ? __pfx___se_sys_mount+0x10/0x10 [ 192.026685][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.035214][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.040957][ T7829] ? __x64_sys_mount+0x20/0xc0 [ 192.047677][ T7829] do_syscall_64+0xfa/0x3b0 [ 192.052255][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.059026][ T7829] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 192.065373][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.071943][ T7829] RIP: 0033:0x7f84dc99034a [ 192.077125][ T7829] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.097467][ T7829] RSP: 002b:00007f84dd814e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.106669][ T7829] RAX: ffffffffffffffda RBX: 00007f84dd814ef0 RCX: 00007f84dc99034a [ 192.115498][ T7829] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f84dd814eb0 [ 192.124197][ T7829] RBP: 0000200000000180 R08: 00007f84dd814ef0 R09: 0000000000800700 [ 192.132216][ T7829] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 192.142634][ T7829] R13: 00007f84dd814eb0 R14: 000000000000046f R15: 00002000000002c0 [ 192.152576][ T7829] [ 192.156446][ T7829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.163929][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(full) [ 192.173146][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.183581][ T7829] Call Trace: [ 192.186977][ T7829] [ 192.189928][ T7829] dump_stack_lvl+0x99/0x250 [ 192.194662][ T7829] ? __asan_memcpy+0x40/0x70 [ 192.199368][ T7829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.204597][ T7829] ? __pfx__printk+0x10/0x10 [ 192.209270][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.214950][ T7829] vpanic+0x281/0x750 [ 192.218987][ T7829] ? __pfx__printk+0x10/0x10 [ 192.223613][ T7829] ? __pfx_vpanic+0x10/0x10 [ 192.228131][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.233786][ T7829] ? is_bpf_text_address+0x26/0x2b0 [ 192.239102][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.244898][ T7829] panic+0xb9/0xc0 [ 192.248652][ T7829] ? __pfx_panic+0x10/0x10 [ 192.253323][ T7829] __warn+0x31b/0x4b0 [ 192.257332][ T7829] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 192.263433][ T7829] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 192.269527][ T7829] report_bug+0x2be/0x4f0 [ 192.273854][ T7829] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 192.280044][ T7829] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 192.286067][ T7829] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 192.292081][ T7829] handle_bug+0x84/0x160 [ 192.296362][ T7829] exc_invalid_op+0x1a/0x50 [ 192.300898][ T7829] asm_exc_invalid_op+0x1a/0x20 [ 192.305877][ T7829] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 192.312880][ T7829] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 a0 e5 9f 8b 4c 89 fe e8 7d 58 fd fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 f4 54 [ 192.333681][ T7829] RSP: 0018:ffffc9000e4af1a0 EFLAGS: 00010246 [ 192.339993][ T7829] RAX: db756c8bba900400 RBX: dffffc0000000000 RCX: 0000000000080000 [ 192.348612][ T7829] RDX: ffffc9000c6c3000 RSI: 00000000000086ca RDI: 00000000000086cb [ 192.356634][ T7829] RBP: ffffc9000e4af298 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 192.365145][ T7829] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff888055c775a0 [ 192.373300][ T7829] R13: 1ffff1100ab8eeb4 R14: 00000000ffffffff R15: 000000000000000b [ 192.381504][ T7829] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 192.387685][ T7829] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 192.394051][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.399721][ T7829] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 192.405231][ T7829] ext4_xattr_set_entry+0xabb/0x1e20 [ 192.410719][ T7829] ext4_xattr_ibody_set+0x254/0x6a0 [ 192.416019][ T7829] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 192.422320][ T7829] __ext4_expand_extra_isize+0x30d/0x400 [ 192.427968][ T7829] __ext4_mark_inode_dirty+0x46c/0x700 [ 192.433468][ T7829] ext4_evict_inode+0x80d/0xee0 [ 192.438773][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.444609][ T7829] ? __pfx_ext4_evict_inode+0x10/0x10 [ 192.450166][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.455806][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.462423][ T7829] ? do_raw_spin_unlock+0x122/0x240 [ 192.467775][ T7829] ? __pfx_ext4_evict_inode+0x10/0x10 [ 192.473273][ T7829] evict+0x504/0x9c0 [ 192.477191][ T7829] ? __pfx_evict+0x10/0x10 [ 192.481608][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.487334][ T7829] ? do_raw_spin_unlock+0x122/0x240 [ 192.492599][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.498339][ T7829] ? _raw_spin_unlock+0x28/0x50 [ 192.503224][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.508877][ T7829] ? iput+0x6d8/0x9d0 [ 192.513323][ T7829] ext4_orphan_cleanup+0xc20/0x1460 [ 192.518650][ T7829] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 192.524384][ T7829] ? ext4_register_li_request+0x640/0x720 [ 192.530206][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.535856][ T7829] ? errseq_check_and_advance+0x66/0x120 [ 192.541530][ T7829] ext4_fill_super+0x57df/0x6090 [ 192.546494][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.552144][ T7829] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.557434][ T7829] ? set_blocksize+0x21e/0x500 [ 192.562519][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.568525][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.574352][ T7829] ? sb_set_blocksize+0x104/0x180 [ 192.580054][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.586159][ T7829] ? setup_bdev_super+0x4c1/0x5b0 [ 192.591236][ T7829] get_tree_bdev_flags+0x40e/0x4d0 [ 192.596560][ T7829] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.602173][ T7829] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 192.607858][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.613627][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.619443][ T7829] vfs_get_tree+0x92/0x2b0 [ 192.623998][ T7829] do_new_mount+0x2a2/0x9e0 [ 192.628731][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.634553][ T7829] ? ns_capable+0x8a/0xf0 [ 192.639012][ T7829] ? __pfx_do_new_mount+0x10/0x10 [ 192.644086][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.649887][ T7829] ? path_mount+0x61c/0xfe0 [ 192.654590][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.660469][ T7829] __se_sys_mount+0x317/0x410 [ 192.665551][ T7829] ? __pfx___se_sys_mount+0x10/0x10 [ 192.671081][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.676781][ T7829] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.682439][ T7829] ? __x64_sys_mount+0x20/0xc0 [ 192.687239][ T7829] do_syscall_64+0xfa/0x3b0 [ 192.691846][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.698041][ T7829] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 192.703889][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.709789][ T7829] RIP: 0033:0x7f84dc99034a [ 192.714200][ T7829] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.733910][ T7829] RSP: 002b:00007f84dd814e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.742517][ T7829] RAX: ffffffffffffffda RBX: 00007f84dd814ef0 RCX: 00007f84dc99034a [ 192.750499][ T7829] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f84dd814eb0 [ 192.758488][ T7829] RBP: 0000200000000180 R08: 00007f84dd814ef0 R09: 0000000000800700 [ 192.766495][ T7829] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 192.774482][ T7829] R13: 00007f84dd814eb0 R14: 000000000000046f R15: 00002000000002c0 [ 192.782517][ T7829] [ 192.785872][ T7829] Kernel Offset: disabled [ 192.790224][ T7829] Rebooting in 86400 seconds..