last executing test programs: 5.670646901s ago: executing program 0 (id=2153): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pause() openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.140265472s ago: executing program 0 (id=2169): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000003c0)=""/62}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4093, 0xffd) 2.887074071s ago: executing program 3 (id=2173): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) 2.460562149s ago: executing program 1 (id=2179): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd7000000000000000", @ANYRES32=r5], 0x20}}, 0x0) 2.428820379s ago: executing program 4 (id=2181): rmdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) pipe2(&(0x7f0000000000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{0x0}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) pipe2(&(0x7f0000000240), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 2.268162098s ago: executing program 4 (id=2182): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xfe0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmmsg$unix(r2, &(0x7f000001e940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=ANY=[], 0x38, 0x20000800}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}, {{0x0, 0x0, &(0x7f000001a380)=[{&(0x7f00000191c0)="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", 0x5dd}], 0x1, 0x0, 0x0, 0xf5ef7fccad820254}}], 0x4, 0x0) 2.267523068s ago: executing program 2 (id=2183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe000000000000", 0x1b) dup2(r0, r1) 2.191749868s ago: executing program 0 (id=2184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2.110493428s ago: executing program 2 (id=2185): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@errors_continue}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@noload}, {@data_err_abort}]}, 0x1, 0x5e1, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000002, 0x354}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.109933608s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000004257ca0000008008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200003, 0x80) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x1, 0x0) io_uring_setup(0x1de0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20821, 0x0) syslog(0x4, &(0x7f0000000400)=""/91, 0x5b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, 0xffffffffffffffff, 0x0) mount$9p_rdma(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8010, &(0x7f0000001240)=ANY=[]) execveat$binfmt(r0, r1, &(0x7f0000000200)={[&(0x7f0000000080)='-\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\xe1.#\x00', &(0x7f00000001c0)='&$\xbd^\x00']}, &(0x7f0000000440)={[&(0x7f0000000240)='@\x00', &(0x7f00000002c0)='*^\x00', &(0x7f0000000300)='@%-{\x00', &(0x7f0000000340)=':\'\'-\xc6!$\x00', &(0x7f0000000380)='{}\x00', &(0x7f00000003c0)=',\x00', &(0x7f0000000400)='+}\x00']}, 0x100) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000010c0)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d) 2.109682428s ago: executing program 1 (id=2195): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd700000000000000000", @ANYRES32=r5], 0x20}}, 0x0) 2.094048228s ago: executing program 0 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), 0x0}, 0x20) getrusage(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) socketpair(0x1, 0x80000, 0x2000000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_writepages\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) syz_clone(0x24005200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) 1.912328467s ago: executing program 3 (id=2188): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001800000000000000000000010000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.808513617s ago: executing program 1 (id=2189): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.777835197s ago: executing program 3 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x990e9783628d522e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0x1d, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x65, 0x0, 0xf, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp={0x44, 0x4, 0x9e, 0x0, 0xe}]}}}}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = inotify_init() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000000c0)={[{@grpid}, {@dioread_lock}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") dup(0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000010000000000000004000000"], 0x24, 0x0) llistxattr(0x0, 0x0, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x64000811) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[], 0x3c}}, 0x0) inotify_rm_watch(r1, r4) 1.644110196s ago: executing program 1 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32, @ANYBLOB="24002f80"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="e80000000102050000000000000000000a0000010600074000000000240002800c0002800500010084000000140001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 1.636717656s ago: executing program 0 (id=2192): write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x2a02) r1 = dup3(r0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f00000000c0)=""/226, 0xe2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@private}]}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_clone3(&(0x7f0000000cc0)={0x22000380, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000000), 0x1, 0x500, &(0x7f0000001d40)="$eJzs3c9vG1kdAPDvTJI2aVOcBQ7LSuxW7KJ0BbWTht0GDlWRELeVgOUeosSJojhxFDu7TbRapeIPQEIIDpw4cUHiD0BCvXCvkCrBHSEEqmgLBw6A0djjJqR2YoFjb53PR3qdNz883+9L6tG8mae8AC6s6xFxNyLGIuLtiCjk29O8xGGrZMc9e/rRSlaSaDTe/2sSSb6tfa4kX17NPzYZEd9Jju04prZ/sLlcqZR38/VSfWunVNs/uLmxtbxeXi9vLyzMv7t4e/Gdxbm+tfXON/704x/8/Jt3fv3lD/+w9JcbH2dpTef7jrejn1pNn2j+LNrGI2L3PIINwVjenokej798zvkAAHC67B7/0xHxheb9fyHGmndzAAAAwChpJBH/TCIaAAAAwMhKm2Ngk7SYjwWYjjQtFltjeD8bV9JKtVb/0lp1b3u1NVZ2JibStY1KeS4fKzwTE0m2Pt+sH63fOrG+EBGvRMSPClPJ2uUoF1eqldVhP/wAAACAC+Lqif7/3wut/j8AAAAwYmaGnQAAAABw7vT/AQAAYPR17f8nJgMAAACAEfCt997LSqM9//XqB/t7m9UPbq6Wa5vFrb2V4kp1d6e4Xq2uV8rFlerWWeerVKs7X4ntvXulerlWL9X2D5a2qnvb9aXmvN5L5V7niQYAAAD655U3Hvw+iYjDr001S+ZSvk9fHUZbevYhU8fqyXnmAgzW2LATAIbmfxvga1gwjIKz+vhPGo0BZQIMS7eOfeVaaznZ7YMPzykhAACg72Y/1/39PzDaenj/38HdvucBDJ73/3BxeZMPF5cx/sBZA/tPf/9vkBAAALwMppslSYv5u8DpSNNiMeJac1qAiWRto1Kei4hPRcTvChOXs/X5YScNAAAAAAAAAAAAAAAAAAAAAAAAAC+ZRiOJxkmXXtwEAAAAvLwi0j8n+fxfs4W3pk8+H7iU/KPQXEbEhz99/yf3luv13fls+5PC0axh+fZbA398AQAAAGR+89+r7X56ux8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3USFrLlWdPP1oZZODHX4+ImYgsbru09ozHZHM5GRMRceVvSYwf+1yW71gf4h/ej4hXO8VPsrRiJs/iZPw0IqaGHP9qH+LDRfYgu/7c7fT9S+N6c9n5+zeel//X4+vdrn/p8+vfWJfr37UeY7z26JelrvHvR7w23vn6046fdIn/Zo/xv/fdg4Nu+xo/i5iNk/HTPMJRrFJ9a6dU2z+4ubG1vF5eL28vLMy/u3h78Z3FudLaRqWc/9sxxg8//6t/n9b+Ky/Ej+fX39Pa/1aP7f/Xo3tPP/PC1o9vtePfeLPz7//VU+Jn/ye+GEc/qdl2/bBVP+71X/z29dPav9ql/ZNx+6vt4zq1/0aP7X/729//Y4+HAgADUNs/2FyuVMq7p1YextnHXNxKdi+UVe4MLmj70UM/z/xGdr6p80x+Kj4Rvy+VXipDvjABAAB9d3TTP+xMAAAAAAAAAAAAAAAAAAAA4OIaxJ8TG3YbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB68Z8AAAD//wBXyiU=") setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_GET_SE(r4, 0x0, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$nl_route_sched(r3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2000000000007b, 0x3) 1.634986196s ago: executing program 2 (id=2193): rmdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) pipe2(&(0x7f0000000000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{0x0}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) pipe2(&(0x7f0000000240), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 1.465626106s ago: executing program 3 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x4800) 1.309448775s ago: executing program 4 (id=2196): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xfe0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmmsg$unix(r2, &(0x7f000001e940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=ANY=[], 0x38, 0x20000800}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}, {{0x0, 0x0, &(0x7f000001a380)=[{&(0x7f00000191c0)="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", 0x5dd}], 0x1, 0x0, 0x0, 0xf5ef7fccad820254}}], 0x4, 0x0) 1.294366035s ago: executing program 2 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe000000000000", 0x1b) dup2(r0, r1) 1.293382495s ago: executing program 1 (id=2198): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000003c0)=""/62}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4093, 0xffd) 1.204517564s ago: executing program 3 (id=2199): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 1.118270424s ago: executing program 2 (id=2200): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd700000000000000000", @ANYRES32=r5], 0x20}}, 0x0) 924.312213ms ago: executing program 4 (id=2201): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001800000000000000000000010000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 550.176272ms ago: executing program 4 (id=2202): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 199.294121ms ago: executing program 2 (id=2203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), 0x0}, 0x20) getrusage(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) socketpair(0x1, 0x80000, 0x2000000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_writepages\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) syz_clone(0x24005200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) 81.06628ms ago: executing program 0 (id=2204): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 72.81029ms ago: executing program 1 (id=2205): r0 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000002, 0x354}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2206): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000004257ca0000008008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200003, 0x80) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x1, 0x0) io_uring_setup(0x1de0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20821, 0x0) syslog(0x4, &(0x7f0000000400)=""/91, 0x5b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, 0xffffffffffffffff, 0x0) mount$9p_rdma(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8010, &(0x7f0000001240)=ANY=[]) execveat$binfmt(r0, r1, &(0x7f0000000200)={[&(0x7f0000000080)='-\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\xe1.#\x00', &(0x7f00000001c0)='&$\xbd^\x00']}, &(0x7f0000000440)={[&(0x7f0000000240)='@\x00', &(0x7f00000002c0)='*^\x00', &(0x7f0000000300)='@%-{\x00', &(0x7f0000000340)=':\'\'-\xc6!$\x00', &(0x7f0000000380)='{}\x00', &(0x7f00000003c0)=',\x00', &(0x7f0000000400)='+}\x00']}, 0x100) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000010c0)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d) kernel console output (not intermixed with test programs): [ 159.115787][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.947'. [ 159.128202][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.947'. [ 159.279080][ T6833] sit0 speed is unknown, defaulting to 1000 [ 159.295139][ T6836] loop3: detected capacity change from 0 to 512 [ 159.367047][ T6836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.392742][ T6836] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.540248][ T6833] lo speed is unknown, defaulting to 1000 [ 159.557942][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 159.776373][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 159.869081][ T6854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.879929][ T6854] bond0: (slave bond2): Enslaving as an active interface with an up link [ 159.960871][ T6857] loop2: detected capacity change from 0 to 512 [ 159.994291][ T6857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.960: inode #1: comm syz.2.960: iget: illegal inode # [ 160.029858][ T6857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.960: error while reading EA inode 1 err=-117 [ 160.086918][ T6866] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.117206][ T6857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.960: inode #1: comm syz.2.960: iget: illegal inode # [ 160.151595][ T6857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.960: error while reading EA inode 1 err=-117 [ 160.178288][ T6857] EXT4-fs (loop2): 1 orphan inode deleted [ 160.189471][ T6857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.214415][ T6871] loop4: detected capacity change from 0 to 512 [ 160.245157][ T6871] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 160.269804][ T6871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 160.278364][ T6871] System zones: 1-12 [ 160.286100][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 160.286615][ T6871] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.299101][ T26] kauditd_printk_skb: 211 callbacks suppressed [ 160.299119][ T26] audit: type=1326 audit(1734467895.876:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 160.335895][ T6871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.965: bg 0: block 361: padding at end of block bitmap is not set [ 160.354871][ T6871] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 160.364730][ T6871] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.965: attempt to clear invalid blocks 33619980 len 1 [ 160.406967][ T6871] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.965: invalid indirect mapped block 1811939328 (level 0) [ 160.425618][ T26] audit: type=1326 audit(1734467895.916:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 160.462256][ T6871] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.965: invalid indirect mapped block 2 (level 2) [ 160.486699][ T6871] EXT4-fs (loop4): 1 truncate cleaned up [ 160.494550][ T26] audit: type=1326 audit(1734467895.916:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 160.530549][ T6871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 160.565554][ T26] audit: type=1326 audit(1734467895.916:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 160.629823][ T26] audit: type=1326 audit(1734467895.916:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 160.684166][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 160.970145][ T6887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.024640][ T6887] bond0: (slave bond1): Enslaving as an active interface with an up link [ 161.183818][ T6900] netlink: 96 bytes leftover after parsing attributes in process `syz.4.976'. [ 161.293425][ T6905] rdma_rxe: rxe_register_device failed with error -23 [ 161.311537][ T6905] rdma_rxe: failed to add lo [ 161.405572][ T26] audit: type=1326 audit(1734467896.987:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 161.448712][ T26] audit: type=1326 audit(1734467896.987:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 161.507994][ T26] audit: type=1326 audit(1734467897.007:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 161.631462][ T26] audit: type=1326 audit(1734467897.007:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 161.691027][ T26] audit: type=1326 audit(1734467897.007:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 161.792431][ T6924] loop4: detected capacity change from 0 to 512 [ 161.810667][ T6924] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.822632][ T6924] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 161.833278][ T6924] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.985: Corrupt directory, running e2fsck is recommended [ 161.849782][ T6924] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 161.858535][ T6924] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.985: corrupted in-inode xattr [ 161.872095][ T6924] EXT4-fs (loop4): Remounting filesystem read-only [ 161.878790][ T6924] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.985: couldn't read orphan inode 15 (err -117) [ 161.893305][ T6924] EXT4-fs (loop4): Remounting filesystem read-only [ 161.899971][ T6924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.918663][ T6924] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.937965][ T6924] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 162.002293][ T6924] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.985: Corrupt directory, running e2fsck is recommended [ 162.116309][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 162.131284][ T6935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.140844][ T6935] bond0: (slave bond1): Enslaving as an active interface with an up link [ 162.456744][ T6956] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 162.483969][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 162.689230][ T6964] syz.0.1000 uses obsolete (PF_INET,SOCK_PACKET) [ 162.718385][ T6966] loop3: detected capacity change from 0 to 512 [ 162.758801][ T6966] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 162.783678][ T6966] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 162.809977][ T6966] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1001: Corrupt directory, running e2fsck is recommended [ 162.843672][ T6966] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 162.860206][ T6966] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1001: corrupted in-inode xattr [ 162.879216][ T6966] EXT4-fs (loop3): Remounting filesystem read-only [ 162.886227][ T6966] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1001: couldn't read orphan inode 15 (err -117) [ 162.898939][ T6966] EXT4-fs (loop3): Remounting filesystem read-only [ 162.906133][ T6966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.924715][ T6966] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 162.937909][ T6966] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 162.948918][ T6966] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1001: Corrupt directory, running e2fsck is recommended [ 163.035662][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 163.397043][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 164.060558][ T7022] loop4: detected capacity change from 0 to 1024 [ 164.075336][ T7026] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.089797][ T7026] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 164.104553][ T7022] EXT4-fs: Mount option(s) incompatible with ext3 [ 164.155532][ T7028] loop3: detected capacity change from 0 to 4096 [ 164.186884][ T7028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.476785][ T7046] blktrace: Concurrent blktraces are not allowed on sg0 [ 164.606179][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 165.080203][ T7065] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.177543][ T7075] blktrace: Concurrent blktraces are not allowed on sg0 [ 165.603722][ T26] kauditd_printk_skb: 158 callbacks suppressed [ 165.603740][ T26] audit: type=1326 audit(1734467901.188:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 165.660585][ T26] audit: type=1326 audit(1734467901.188:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 165.709451][ T26] audit: type=1326 audit(1734467901.218:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 165.755694][ T26] audit: type=1326 audit(1734467901.218:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 165.803307][ T26] audit: type=1326 audit(1734467901.218:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 166.128906][ T7099] blktrace: Concurrent blktraces are not allowed on sg0 [ 166.384563][ T26] audit: type=1326 audit(1734467901.968:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 166.438263][ T26] audit: type=1326 audit(1734467901.998:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 166.509219][ T26] audit: type=1326 audit(1734467901.998:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 166.562211][ T26] audit: type=1326 audit(1734467901.998:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 166.602798][ T7120] loop1: detected capacity change from 0 to 512 [ 166.642301][ T7120] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.652822][ T26] audit: type=1326 audit(1734467901.998:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 166.710225][ T7120] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1065: bad orphan inode 131083 [ 166.728309][ T7123] ALSA: seq fatal error: cannot create timer (-19) [ 166.728496][ T7120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.825335][ T7132] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 166.938581][ T7136] blktrace: Concurrent blktraces are not allowed on sg0 [ 167.000589][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 167.703300][ T7162] loop2: detected capacity change from 0 to 2048 [ 167.723470][ T7166] rdma_rxe: rxe_register_device failed with error -23 [ 167.748266][ T7162] EXT4-fs (loop2): failed to initialize system zone (-117) [ 167.765862][ T7166] rdma_rxe: failed to add lo [ 167.774285][ T7162] EXT4-fs (loop2): mount failed [ 168.039675][ T7177] loop2: detected capacity change from 0 to 512 [ 168.075257][ T7177] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 168.117306][ T7177] EXT4-fs (loop2): mount failed [ 169.250989][ T7191] sit0 speed is unknown, defaulting to 1000 [ 169.582241][ T7191] lo speed is unknown, defaulting to 1000 [ 170.453400][ T7200] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1093'. [ 170.615405][ T7206] syz.3.1099[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.616705][ T7206] syz.3.1099[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.260367][ T7219] bond0: (slave bond1): Error -95 calling ndo_bpf [ 171.339088][ T7219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.347625][ T7219] bond0: (slave bond2): Enslaving as an active interface with an up link [ 171.414658][ T7222] loop4: detected capacity change from 0 to 256 [ 171.453194][ T7224] Cannot find del_set index 1 as target [ 171.479262][ T4305] kernel write not supported for file /sg0 (pid: 4305 comm: kworker/0:4) [ 171.491608][ T7222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1105'. [ 171.735578][ T7231] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 171.804906][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 171.804924][ T26] audit: type=1326 audit(1734467907.389:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 171.888293][ T26] audit: type=1326 audit(1734467907.389:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 171.971056][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 171.992417][ T26] audit: type=1326 audit(1734467907.439:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.050193][ T26] audit: type=1326 audit(1734467907.439:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.081447][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 172.135622][ T26] audit: type=1326 audit(1734467907.439:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.164753][ T26] audit: type=1326 audit(1734467907.439:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.225774][ T26] audit: type=1326 audit(1734467907.439:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.253632][ T26] audit: type=1326 audit(1734467907.439:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.276674][ T26] audit: type=1326 audit(1734467907.439:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.300034][ T26] audit: type=1326 audit(1734467907.439:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 172.492823][ T7261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1120'. [ 172.684514][ T7267] loop4: detected capacity change from 0 to 128 [ 172.747063][ T7267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 172.796929][ T7267] ext4 filesystem being mounted at /244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.085202][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 173.204896][ T7275] device syzkaller0 entered promiscuous mode [ 173.304035][ T7275] infiniband syz0: set down [ 173.478573][ T22] lo speed is unknown, defaulting to 1000 [ 173.496122][ T22] lo speed is unknown, defaulting to 1000 [ 173.521739][ T7280] loop4: detected capacity change from 0 to 1024 [ 173.643800][ T7280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.779088][ T7285] netlink: 'syz.0.1130': attribute type 13 has an invalid length. [ 174.667353][ T7285] gretap0: refused to change device tx_queue_len [ 174.703674][ T7285] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.724786][ T4504] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 174.741306][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 174.775320][ T4504] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 174.794920][ T4504] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.794920][ T4504] [ 174.797800][ T7291] bridge0: port 3(erspan0) entered blocking state [ 174.804834][ T4504] EXT4-fs (loop4): Total free blocks count 0 [ 174.822206][ T4504] EXT4-fs (loop4): Free/Dirty block details [ 174.842041][ T7291] bridge0: port 3(erspan0) entered disabled state [ 174.848693][ T4504] EXT4-fs (loop4): free_blocks=68451041280 [ 174.863887][ T4504] EXT4-fs (loop4): dirty_blocks=2304 [ 174.870467][ T7291] device erspan0 entered promiscuous mode [ 174.876301][ T4504] EXT4-fs (loop4): Block reservation details [ 174.889149][ T7291] bridge0: port 3(erspan0) entered blocking state [ 174.895706][ T7291] bridge0: port 3(erspan0) entered forwarding state [ 174.903884][ T4504] EXT4-fs (loop4): i_reserved_data_blocks=144 [ 174.976433][ T4504] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 248 with error 28 [ 176.181351][ T7306] bond0: (slave bond1): Error -95 calling ndo_bpf [ 176.294344][ T7307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.311151][ T7307] device bond2 entered promiscuous mode [ 176.317345][ T7307] bond0: (slave bond2): Enslaving as an active interface with an up link [ 176.340369][ T7311] loop2: detected capacity change from 0 to 1024 [ 176.375544][ T7311] EXT4-fs: Ignoring removed orlov option [ 176.414120][ T7311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.440998][ T7316] device wireguard0 entered promiscuous mode [ 176.495154][ T7311] Invalid option length (303) for dns_resolver key [ 176.616589][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1142'. [ 176.722836][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 176.850934][ T7327] device syzkaller0 entered promiscuous mode [ 177.090793][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 177.365139][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 177.496416][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 177.496432][ T26] audit: type=1326 audit(1734467913.080:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.582544][ T26] audit: type=1326 audit(1734467913.130:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.643249][ T26] audit: type=1326 audit(1734467913.130:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.715914][ T26] audit: type=1326 audit(1734467913.130:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.746459][ T26] audit: type=1326 audit(1734467913.130:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.840922][ T26] audit: type=1326 audit(1734467913.130:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.905242][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 177.908993][ T26] audit: type=1326 audit(1734467913.130:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 177.973690][ T26] audit: type=1326 audit(1734467913.130:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 178.025722][ T26] audit: type=1326 audit(1734467913.130:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 178.054152][ T26] audit: type=1326 audit(1734467913.130:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 178.408818][ T7384] loop4: detected capacity change from 0 to 1024 [ 178.416122][ T7384] EXT4-fs: Ignoring removed bh option [ 178.460730][ T7384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.470423][ T7384] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.502875][ T7384] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1169: bg 0: block 273: padding at end of block bitmap is not set [ 178.628263][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 178.628601][ T7392] sit0 speed is unknown, defaulting to 1000 [ 178.658982][ T7394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 54669 - 0 [ 178.659025][ T7394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 54669 - 0 [ 178.659057][ T7394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 54669 - 0 [ 178.659089][ T7394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 54669 - 0 [ 178.659351][ T7394] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 34834 - 0 [ 178.659385][ T7394] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 34834 - 0 [ 178.659416][ T7394] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 34834 - 0 [ 178.659448][ T7394] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 34834 - 0 [ 178.659528][ T7394] device geneve2 entered promiscuous mode [ 178.890307][ T7392] lo speed is unknown, defaulting to 1000 [ 179.239502][ T7418] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1179'. [ 179.258301][ T7411] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1179'. [ 179.404843][ T7420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.416037][ T7420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54669 - 0 [ 179.448466][ T7420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 34834 - 0 [ 179.463438][ T7421] loop2: detected capacity change from 0 to 512 [ 179.470787][ T7421] EXT4-fs: quotafile must be on filesystem root [ 179.821703][ T7427] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1183'. [ 180.733472][ T7420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.870993][ T7420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54669 - 0 [ 180.990844][ T7420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 34834 - 0 [ 181.437811][ T7420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.505831][ T7420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54669 - 0 [ 181.609192][ T7420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 34834 - 0 [ 181.647596][ T7449] loop3: detected capacity change from 0 to 512 [ 181.725679][ T7449] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.747308][ T7449] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 181.784676][ T7449] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1192: Corrupt directory, running e2fsck is recommended [ 181.841027][ T7449] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 181.849814][ T7449] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1192: corrupted in-inode xattr [ 181.868232][ T7420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.879222][ T7420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54669 - 0 [ 181.890019][ T7449] EXT4-fs (loop3): Remounting filesystem read-only [ 181.896903][ T7449] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1192: couldn't read orphan inode 15 (err -117) [ 181.909473][ T7420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 34834 - 0 [ 181.920060][ T7449] EXT4-fs (loop3): Remounting filesystem read-only [ 181.929274][ T7449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.961193][ T7449] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.973650][ T7449] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 181.984321][ T7449] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1192: Corrupt directory, running e2fsck is recommended [ 182.100319][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 182.117290][ T7420] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 34834 - 0 [ 182.185877][ T7420] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 54669 - 0 [ 182.194248][ T7420] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 182.258970][ T7420] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 34834 - 0 [ 182.285119][ T7420] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 54669 - 0 [ 182.306859][ T7420] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 182.342556][ T7420] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 34834 - 0 [ 182.353122][ T7420] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 54669 - 0 [ 182.370810][ T7420] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 182.383117][ T7464] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.1197'. [ 182.405771][ T7464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1197'. [ 182.449143][ T7420] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 34834 - 0 [ 182.461165][ T7420] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 54669 - 0 [ 182.477644][ T7420] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 182.541603][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 182.541621][ T26] audit: type=1326 audit(1734467918.121:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.606152][ T26] audit: type=1326 audit(1734467918.161:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.628538][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.680299][ T26] audit: type=1326 audit(1734467918.161:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.757890][ T26] audit: type=1326 audit(1734467918.161:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.780278][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.814210][ T26] audit: type=1326 audit(1734467918.161:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.884450][ T26] audit: type=1326 audit(1734467918.171:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.936290][ T26] audit: type=1326 audit(1734467918.171:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 182.969576][ T7483] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1202'. [ 183.015446][ T7474] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1202'. [ 183.032154][ T26] audit: type=1326 audit(1734467918.171:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 183.046338][ T7485] syz.1.1205[7485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.054868][ T7485] syz.1.1205[7485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.124351][ T26] audit: type=1326 audit(1734467918.181:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 183.160405][ T26] audit: type=1326 audit(1734467918.181:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 183.218960][ T7491] loop4: detected capacity change from 0 to 512 [ 183.252278][ T7491] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.275538][ T7491] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 183.300927][ T7491] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1208: Corrupt directory, running e2fsck is recommended [ 183.321201][ T7491] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 183.331414][ T7491] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1208: corrupted in-inode xattr [ 183.347921][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 183.354557][ T7491] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1208: couldn't read orphan inode 15 (err -117) [ 183.367202][ T7491] EXT4-fs (loop4): Remounting filesystem read-only [ 183.373750][ T7491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.392999][ T7491] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.404971][ T7491] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 183.415341][ T7491] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1208: Corrupt directory, running e2fsck is recommended [ 183.461806][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 183.576570][ T7501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.584857][ T7501] device bond3 entered promiscuous mode [ 183.591510][ T7501] bond0: (slave bond3): Enslaving as an active interface with an up link [ 183.916878][ T7512] loop3: detected capacity change from 0 to 256 [ 183.971314][ T7512] FAT-fs (loop3): Directory bread(block 64) failed [ 183.989791][ T7512] FAT-fs (loop3): Directory bread(block 65) failed [ 184.010215][ T7512] FAT-fs (loop3): Directory bread(block 66) failed [ 184.030275][ T7512] FAT-fs (loop3): Directory bread(block 67) failed [ 184.049753][ T7512] FAT-fs (loop3): Directory bread(block 68) failed [ 184.070314][ T7512] FAT-fs (loop3): Directory bread(block 69) failed [ 184.077847][ T7517] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1217'. [ 184.085252][ T7512] FAT-fs (loop3): Directory bread(block 70) failed [ 184.092824][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1217'. [ 184.093549][ T7512] FAT-fs (loop3): Directory bread(block 71) failed [ 184.137546][ T7512] FAT-fs (loop3): Directory bread(block 72) failed [ 184.144215][ T7512] FAT-fs (loop3): Directory bread(block 73) failed [ 184.161850][ T7520] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 184.199881][ T7512] syz.3.1216: attempt to access beyond end of device [ 184.199881][ T7512] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 184.216042][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 184.466096][ T7529] loop2: detected capacity change from 0 to 1024 [ 184.538760][ T7529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.659288][ T7537] blktrace: Concurrent blktraces are not allowed on sg0 [ 184.699921][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 185.440425][ T7541] syz.0.1227[7541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.440539][ T7541] syz.0.1227[7541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.652569][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 186.744915][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 186.809590][ T7568] blktrace: Concurrent blktraces are not allowed on sg0 [ 186.842389][ T7570] bond0: (slave bond1): Error -95 calling ndo_bpf [ 186.906527][ T7574] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.1239'. [ 187.231608][ T7581] device dummy0 entered promiscuous mode [ 187.250479][ T7581] device macvtap1 entered promiscuous mode [ 187.264214][ T7581] device dummy0 left promiscuous mode [ 187.920540][ T7592] syz.3.1246[7592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.920651][ T7592] syz.3.1246[7592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.262146][ T26] kauditd_printk_skb: 143 callbacks suppressed [ 188.262163][ T26] audit: type=1326 audit(1734467923.843:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.366743][ T7597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.410215][ T7597] bond0: (slave bond3): Enslaving as an active interface with an up link [ 188.433624][ T26] audit: type=1326 audit(1734467923.893:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.461238][ T7610] __nla_validate_parse: 1 callbacks suppressed [ 188.461263][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 188.562308][ T26] audit: type=1326 audit(1734467923.893:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.624808][ T26] audit: type=1326 audit(1734467923.893:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.715906][ T26] audit: type=1326 audit(1734467923.893:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.811395][ T26] audit: type=1326 audit(1734467923.903:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.864669][ T26] audit: type=1326 audit(1734467923.903:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 188.888451][ T7621] ÿÿÿÿÿÿ: renamed from vlan1 [ 188.927933][ T7628] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.1256'. [ 188.964889][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 188.975014][ T26] audit: type=1326 audit(1734467923.903:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 189.024283][ T26] audit: type=1326 audit(1734467923.903:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 189.122691][ T26] audit: type=1326 audit(1734467923.903:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.1.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 189.181205][ T7638] loop2: detected capacity change from 0 to 256 [ 189.238099][ T7638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1260'. [ 189.875818][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 190.127122][ T7676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1275'. [ 190.287765][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 190.560171][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 190.726254][ T7679] IPv4: Oversized IP packet from 127.202.26.0 [ 190.946289][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 191.134417][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 191.140533][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 191.141148][ T7718] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1289'. [ 191.146783][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 191.156058][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 191.163093][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 191.451369][ T7730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.484544][ T7730] bond0: (slave bond3): Enslaving as an active interface with an up link [ 192.132919][ T7763] loop4: detected capacity change from 0 to 512 [ 192.202265][ T7763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.244038][ T7763] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.310466][ T7763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1302: bg 0: block 18: invalid block bitmap [ 192.419888][ T7763] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.1302: Failed to acquire dquot type 1 [ 193.022189][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 194.092533][ T7833] __nla_validate_parse: 8 callbacks suppressed [ 194.092547][ T7833] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1324'. [ 194.180369][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571517][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 194.999338][ T7862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1336'. [ 195.076855][ T7868] syz.3.1339[7868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.076969][ T7868] syz.3.1339[7868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.208649][ T7870] bridge: RTM_NEWNEIGH with invalid ether address [ 195.531938][ T7887] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.1346'. [ 195.611268][ T7889] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1342'. [ 196.252603][ T7885] loop4: detected capacity change from 0 to 512 [ 196.342901][ T7885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.361526][ T7885] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.372453][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1346'. [ 197.283849][ T7880] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1344: bg 0: block 18: invalid block bitmap [ 197.317219][ T7880] __quota_error: 117 callbacks suppressed [ 197.317240][ T7880] Quota error (device loop4): write_blk: dquota write failed [ 197.361863][ T7880] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 197.402875][ T7880] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.1344: Failed to acquire dquot type 1 [ 197.718573][ T7905] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1348'. [ 198.590325][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 198.734265][ T7921] syz.3.1359[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.734378][ T7921] syz.3.1359[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.741357][ T7923] loop4: detected capacity change from 0 to 512 [ 198.779317][ T7919] Invalid option length (303) for dns_resolver key [ 198.829779][ T7923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.895405][ T7923] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.940150][ T7923] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1355: corrupted inode contents [ 198.981241][ T7923] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.1355: mark_inode_dirty error [ 199.030126][ T7923] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1355: corrupted inode contents [ 199.062138][ T7923] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1355: mark_inode_dirty error [ 199.175478][ T7937] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1362'. [ 199.687179][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 200.382101][ T7954] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.526325][ T7954] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.579135][ T26] audit: type=1326 audit(1734468962.070:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 200.698498][ T26] audit: type=1326 audit(1734468962.070:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 200.803885][ T26] audit: type=1326 audit(1734468962.080:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 200.907409][ T26] audit: type=1326 audit(1734468962.080:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 200.994846][ T26] audit: type=1326 audit(1734468962.080:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 201.092176][ T26] audit: type=1326 audit(1734468962.090:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 201.175156][ T7965] loop4: detected capacity change from 0 to 1024 [ 201.193528][ T7965] EXT4-fs: Ignoring removed orlov option [ 201.202136][ T26] audit: type=1326 audit(1734468962.090:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 201.263589][ T26] audit: type=1326 audit(1734468962.090:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 201.278075][ T7965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.319056][ T7954] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.401079][ T7954] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.531837][ T7971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1374'. [ 201.569863][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 201.693319][ T7975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.701560][ T7975] device bond4 entered promiscuous mode [ 201.707946][ T7975] bond0: (slave bond4): Enslaving as an active interface with an up link [ 201.742184][ T7954] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.769634][ T7954] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.782034][ T7980] syz.1.1378[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.782144][ T7980] syz.1.1378[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.800142][ T7954] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.828971][ T7954] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.892275][ T7983] loop2: detected capacity change from 0 to 512 [ 201.920928][ T7983] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 201.934173][ T7983] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 201.944596][ T7983] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1379: Corrupt directory, running e2fsck is recommended [ 201.959419][ T7983] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 201.968547][ T7983] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1379: corrupted in-inode xattr [ 201.981900][ T7983] EXT4-fs (loop2): Remounting filesystem read-only [ 201.992385][ T7983] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1379: couldn't read orphan inode 15 (err -117) [ 202.009690][ T7983] EXT4-fs (loop2): Remounting filesystem read-only [ 202.019642][ T7983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.062896][ T7983] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 202.079570][ T7983] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 202.104724][ T7983] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1379: Corrupt directory, running e2fsck is recommended [ 202.172995][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 202.193663][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1384'. [ 202.203089][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1384'. [ 202.359958][ T8001] loop2: detected capacity change from 0 to 1024 [ 202.367376][ T8001] EXT4-fs: Ignoring removed orlov option [ 202.381364][ T8001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.424193][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 202.489396][ T8008] rdma_rxe: already configured on lo [ 202.570139][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 202.711741][ T8012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.720689][ T8012] bond0: (slave bond4): Enslaving as an active interface with an up link [ 203.232626][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 203.232646][ T26] audit: type=1326 audit(1734468964.819:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 203.327869][ T26] audit: type=1326 audit(1734468964.819:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 203.363449][ T8041] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.377222][ T8041] bond0: (slave bond5): Enslaving as an active interface with an up link [ 203.392633][ T8045] syz.4.1404[8045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.398362][ T8045] syz.4.1404[8045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.418728][ T26] audit: type=1326 audit(1734468964.819:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 203.463009][ T26] audit: type=1326 audit(1734468964.819:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 203.487996][ T26] audit: type=1326 audit(1734468964.819:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 203.511168][ T8050] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1407'. [ 203.520783][ T26] audit: type=1326 audit(1734468964.819:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 203.555001][ T26] audit: type=1326 audit(1734468964.819:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 204.118672][ T8055] netlink: 2076 bytes leftover after parsing attributes in process `syz.2.1409'. [ 204.610684][ T8070] loop3: detected capacity change from 0 to 1024 [ 204.625916][ T8070] EXT4-fs: Ignoring removed orlov option [ 204.662945][ T8070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.711765][ T26] audit: type=1326 audit(1734468966.299:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 204.734885][ T26] audit: type=1326 audit(1734468966.309:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 204.757688][ T26] audit: type=1326 audit(1734468966.309:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 204.821530][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 205.299607][ T8085] syz.3.1422[8085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.299718][ T8085] syz.3.1422[8085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.527951][ T8090] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.1423'. [ 205.764679][ T8096] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1425'. [ 206.725405][ T8104] loop2: detected capacity change from 0 to 1024 [ 206.732512][ T8104] EXT4-fs: Ignoring removed orlov option [ 206.927084][ T8104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.152498][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 207.292641][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 207.385806][ T8118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.429326][ T8118] bond0: (slave bond2): Enslaving as an active interface with an up link [ 207.666565][ T8125] rdma_rxe: rxe_register_device failed with error -23 [ 207.692074][ T8125] rdma_rxe: failed to add lo [ 207.826853][ T8133] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1440'. [ 207.923788][ T8136] device syzkaller0 entered promiscuous mode [ 207.993858][ T8139] syz.3.1444[8139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.998829][ T8139] syz.3.1444[8139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.233085][ T8143] loop4: detected capacity change from 0 to 1024 [ 208.252260][ T8143] EXT4-fs: Ignoring removed orlov option [ 208.267459][ T8143] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.341826][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 208.813860][ T8161] device netdevsim0 entered promiscuous mode [ 208.850487][ T8161] device netdevsim0 left promiscuous mode [ 208.900245][ T8163] syz.4.1455[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.900355][ T8163] syz.4.1455[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.933659][ T26] audit: type=1326 audit(1734468970.519:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.016449][ T26] audit: type=1326 audit(1734468970.569:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.065308][ T26] audit: type=1326 audit(1734468970.569:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.107000][ T26] audit: type=1326 audit(1734468970.569:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.169657][ T26] audit: type=1326 audit(1734468970.569:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.222746][ T8173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.252765][ T26] audit: type=1326 audit(1734468970.569:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.287221][ T8173] bond0: (slave bond3): Enslaving as an active interface with an up link [ 209.319756][ T26] audit: type=1326 audit(1734468970.569:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.347681][ T26] audit: type=1326 audit(1734468970.569:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.416194][ T26] audit: type=1326 audit(1734468970.659:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.443876][ T8178] rdma_rxe: rxe_register_device failed with error -23 [ 209.445335][ T26] audit: type=1326 audit(1734468970.699:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99af85d19 code=0x7ffc0000 [ 209.465813][ T8178] rdma_rxe: failed to add lo [ 211.949205][ T8241] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1483'. [ 211.974548][ T8240] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1483'. [ 212.313692][ T8256] device syzkaller0 entered promiscuous mode [ 212.440634][ T8263] loop4: detected capacity change from 0 to 512 [ 212.505355][ T8263] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1491: iget: bad extended attribute block 1 [ 212.561194][ T8263] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1491: couldn't read orphan inode 15 (err -117) [ 212.575770][ T8263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.626370][ T8260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 212.773774][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 212.792863][ T8277] loop2: detected capacity change from 0 to 128 [ 212.901578][ T8279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.909880][ T8279] device bond5 entered promiscuous mode [ 212.916143][ T8279] bond0: (slave bond5): Enslaving as an active interface with an up link [ 213.804031][ T8308] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1509'. [ 214.046955][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 214.216067][ T8326] rdma_rxe: rxe_register_device failed with error -23 [ 214.234823][ T8326] rdma_rxe: failed to add lo [ 215.097358][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1524'. [ 215.486011][ T8369] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 215.589006][ T8372] loop4: detected capacity change from 0 to 512 [ 215.669697][ T8372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.710591][ T8372] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.773089][ T8367] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1530: bg 0: block 18: invalid block bitmap [ 215.853987][ T8367] __quota_error: 25 callbacks suppressed [ 215.854005][ T8367] Quota error (device loop4): write_blk: dquota write failed [ 215.911376][ T8367] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 215.927539][ T8367] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.1530: Failed to acquire dquot type 1 [ 215.965037][ T26] audit: type=1326 audit(1734468977.559:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.029868][ T26] audit: type=1326 audit(1734468977.589:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.113291][ T26] audit: type=1326 audit(1734468977.589:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.158407][ T26] audit: type=1326 audit(1734468977.609:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.211960][ T26] audit: type=1326 audit(1734468977.609:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.259273][ T26] audit: type=1326 audit(1734468977.609:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.308461][ T26] audit: type=1326 audit(1734468977.609:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.358436][ T26] audit: type=1326 audit(1734468977.609:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 216.617929][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 217.089033][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 217.098369][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 217.498460][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 217.659670][ T8450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1558'. [ 217.741700][ T8456] loop4: detected capacity change from 0 to 512 [ 217.839151][ T8456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.904629][ T8456] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.050664][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 219.280518][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 219.619685][ T8515] rdma_rxe: rxe_register_device failed with error -23 [ 219.649377][ T8515] rdma_rxe: failed to add sit0 [ 219.680507][ T8515] tipc: New replicast peer: 255.255.255.255 [ 219.729587][ T8515] tipc: Enabled bearer , priority 10 [ 221.432966][ T8525] loop2: detected capacity change from 0 to 512 [ 221.918668][ T8525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.035921][ T8525] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.439632][ T8525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1584: bg 0: block 18: invalid block bitmap [ 222.551804][ T8525] __quota_error: 88 callbacks suppressed [ 222.551918][ T8525] Quota error (device loop2): write_blk: dquota write failed [ 222.577126][ T8525] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 222.594718][ T8525] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1584: Failed to acquire dquot type 1 [ 222.628108][ T8558] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1593'. [ 222.936159][ T8564] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1594'. [ 224.446816][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 224.689181][ T8577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1601'. [ 224.837714][ T8581] loop2: detected capacity change from 0 to 128 [ 225.076232][ T8591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.086054][ T8591] bond0: (slave bond4): Enslaving as an active interface with an up link [ 225.241573][ T26] audit: type=1326 audit(1734468986.829:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.316847][ T26] audit: type=1326 audit(1734468986.869:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.363858][ T26] audit: type=1326 audit(1734468986.869:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.419272][ T26] audit: type=1326 audit(1734468986.869:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.447661][ T26] audit: type=1326 audit(1734468986.869:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.476095][ T26] audit: type=1326 audit(1734468986.869:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.499850][ T26] audit: type=1326 audit(1734468986.869:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.523782][ T26] audit: type=1326 audit(1734468986.869:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 225.909542][ T8626] syz.4.1620[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.909734][ T8626] syz.4.1620[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.043263][ T8631] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1622'. [ 226.064581][ T8630] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1622'. [ 227.087046][ T8683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.096166][ T8683] bond0: (slave bond4): Enslaving as an active interface with an up link [ 227.234038][ T8691] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1643'. [ 227.639645][ T8698] syz.0.1647[8698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.639760][ T8698] syz.0.1647[8698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.170664][ T8716] bond0: (slave bond1): Error -95 calling ndo_bpf [ 228.737092][ T8749] netlink: 1832 bytes leftover after parsing attributes in process `syz.0.1666'. [ 229.493577][ T8759] bond0: (slave bond1): Error -95 calling ndo_bpf [ 229.650713][ T8766] syz.1.1673[8766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.650829][ T8766] syz.1.1673[8766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.826813][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 229.874556][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 229.874575][ T26] audit: type=1326 audit(1734468991.459:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 229.913401][ T26] audit: type=1326 audit(1734468991.469:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 229.926079][ T8780] loop3: detected capacity change from 0 to 512 [ 229.941666][ T26] audit: type=1326 audit(1734468991.469:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 229.973623][ T26] audit: type=1326 audit(1734468991.469:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.003252][ T26] audit: type=1326 audit(1734468991.469:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.032473][ T26] audit: type=1326 audit(1734468991.469:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.058078][ T26] audit: type=1326 audit(1734468991.469:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.081994][ T8780] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.095197][ T8780] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 230.105476][ T8780] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1678: Corrupt directory, running e2fsck is recommended [ 230.118708][ T26] audit: type=1326 audit(1734468991.469:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.143696][ T26] audit: type=1326 audit(1734468991.469:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.167232][ T8780] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 230.185621][ T8780] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1678: corrupted in-inode xattr [ 230.213056][ T8780] EXT4-fs (loop3): Remounting filesystem read-only [ 230.235115][ T26] audit: type=1326 audit(1734468991.469:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 230.235784][ T8780] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1678: couldn't read orphan inode 15 (err -117) [ 230.324831][ T8780] EXT4-fs (loop3): Remounting filesystem read-only [ 230.331422][ T8780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.391990][ T8780] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.422043][ T8780] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 230.445585][ T8780] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1678: Corrupt directory, running e2fsck is recommended [ 230.528907][ T8803] netlink: 1832 bytes leftover after parsing attributes in process `syz.4.1685'. [ 230.540541][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 230.647203][ T8807] bond0: (slave bond1): Error -95 calling ndo_bpf [ 230.688766][ T8811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1690'. [ 231.013604][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'. [ 231.103601][ T8832] syz.3.1698[8832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.103728][ T8832] syz.3.1698[8832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.184003][ T8836] loop2: detected capacity change from 0 to 512 [ 231.215652][ T8836] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 231.234051][ T8836] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 231.246742][ T8836] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1700: Corrupt directory, running e2fsck is recommended [ 231.261562][ T8836] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 231.286294][ T8836] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1700: corrupted in-inode xattr [ 231.309564][ T8836] EXT4-fs (loop2): Remounting filesystem read-only [ 231.325076][ T8836] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1700: couldn't read orphan inode 15 (err -117) [ 231.359548][ T8836] EXT4-fs (loop2): Remounting filesystem read-only [ 231.372761][ T8836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.413102][ T8845] bond0: (slave bridge0): Error: Slave device does not support XDP [ 231.459633][ T8836] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 231.521229][ T8836] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 231.557276][ T8836] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1700: Corrupt directory, running e2fsck is recommended [ 231.616789][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 231.631621][ T8850] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1702'. [ 231.730995][ T8855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1705'. [ 232.075188][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 232.132187][ T8877] netlink: 1832 bytes leftover after parsing attributes in process `syz.3.1713'. [ 232.321266][ T8879] device syzkaller0 entered promiscuous mode [ 232.458492][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 232.949367][ T8905] syz.0.1723[8905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.949917][ T8905] syz.0.1723[8905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.007897][ T8918] __nla_validate_parse: 1 callbacks suppressed [ 234.007918][ T8918] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1728'. [ 235.778106][ T8898] Set syz1 is full, maxelem 65536 reached [ 236.610099][ T26] kauditd_printk_skb: 110 callbacks suppressed [ 236.610118][ T26] audit: type=1326 audit(1734468998.199:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 236.705944][ T26] audit: type=1326 audit(1734468998.239:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 236.735316][ T8940] loop3: detected capacity change from 0 to 512 [ 236.757701][ T8940] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 236.772902][ T8940] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 236.791345][ T8940] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1735: Corrupt directory, running e2fsck is recommended [ 236.830683][ T26] audit: type=1326 audit(1734468998.239:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 236.859006][ T26] audit: type=1326 audit(1734468998.239:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 236.887373][ T8940] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 236.907242][ T8942] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1736'. [ 236.916560][ T8940] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1735: corrupted in-inode xattr [ 236.975052][ T26] audit: type=1326 audit(1734468998.239:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 237.006321][ T26] audit: type=1326 audit(1734468998.239:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 237.056010][ T26] audit: type=1326 audit(1734468998.239:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 237.157138][ T26] audit: type=1326 audit(1734468998.239:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 237.251373][ T26] audit: type=1326 audit(1734468998.239:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 237.345461][ T26] audit: type=1326 audit(1734468998.239:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 237.375843][ T8940] EXT4-fs (loop3): Remounting filesystem read-only [ 237.382537][ T8940] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1735: couldn't read orphan inode 15 (err -117) [ 237.435153][ T8940] EXT4-fs (loop3): Remounting filesystem read-only [ 237.444867][ T8940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.500165][ T8940] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 237.536313][ T8940] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 237.584777][ T8940] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1735: Corrupt directory, running e2fsck is recommended [ 237.681794][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 237.719695][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 238.050530][ T8989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1751'. [ 238.055259][ T8990] bond0: (slave bond1): Error -95 calling ndo_bpf [ 238.160466][ T8996] syz.0.1755[8996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.160585][ T8996] syz.0.1755[8996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.031579][ T9030] bond0: (slave bond1): Error -95 calling ndo_bpf [ 239.082358][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 239.290212][ T9042] syz.1.1772[9042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.290337][ T9042] syz.1.1772[9042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.316369][ T9040] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1770'. [ 239.790419][ T9065] bond0: (slave bond1): Error -95 calling ndo_bpf [ 240.007588][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 240.061121][ T9080] syz.0.1786[9080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.061253][ T9080] syz.0.1786[9080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.165446][ T9086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1787'. [ 240.509712][ T9104] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1796'. [ 240.539730][ T9101] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1796'. [ 240.646267][ T9110] syz.0.1799[9110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.646397][ T9110] syz.0.1799[9110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.783446][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 240.970558][ T9124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1805'. [ 241.320586][ T9146] syz.1.1814[9146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.320709][ T9146] syz.1.1814[9146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.780715][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 241.862003][ T9166] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1817'. [ 242.515825][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 242.515844][ T26] audit: type=1326 audit(1734469004.109:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 242.626490][ T26] audit: type=1326 audit(1734469004.139:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 242.760405][ T26] audit: type=1326 audit(1734469004.139:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 242.884233][ T26] audit: type=1326 audit(1734469004.139:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 242.991055][ T26] audit: type=1326 audit(1734469004.139:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 243.098150][ T26] audit: type=1326 audit(1734469004.139:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 243.230668][ T26] audit: type=1326 audit(1734469004.139:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 243.353726][ T26] audit: type=1326 audit(1734469004.139:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 243.479186][ T26] audit: type=1326 audit(1734469004.149:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 243.559501][ T26] audit: type=1326 audit(1734469004.149:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 243.810047][ T9203] loop4: detected capacity change from 0 to 512 [ 243.901386][ T9203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.976780][ T9203] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.011154][ T9199] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1835: bg 0: block 18: invalid block bitmap [ 244.092355][ T9199] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.1835: Failed to acquire dquot type 1 [ 244.176489][ T9219] loop3: detected capacity change from 0 to 512 [ 244.218236][ T9219] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 244.231241][ T9221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.261477][ T9219] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 244.279606][ T9219] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1840: Corrupt directory, running e2fsck is recommended [ 244.294357][ T9219] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 244.315969][ T9219] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1840: corrupted in-inode xattr [ 244.355184][ T9219] EXT4-fs (loop3): Remounting filesystem read-only [ 244.362067][ T9219] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1840: couldn't read orphan inode 15 (err -117) [ 244.382818][ T9219] EXT4-fs (loop3): Remounting filesystem read-only [ 244.389982][ T9219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.401037][ T9221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.410429][ T9219] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 244.425013][ T9219] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 244.435709][ T9219] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1840: Corrupt directory, running e2fsck is recommended [ 244.501292][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 244.607075][ T9221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.676941][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 244.808036][ T9221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.032745][ T9221] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.051122][ T9221] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.107608][ T9251] __nla_validate_parse: 3 callbacks suppressed [ 245.107627][ T9251] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1848'. [ 245.337577][ T9221] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.454125][ T9221] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.469585][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1851'. [ 245.508786][ T9257] syz.1.1852[9257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.508898][ T9257] syz.1.1852[9257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.774196][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 245.904214][ T9267] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1855'. [ 245.934349][ T9266] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1855'. [ 246.537030][ T9275] bond0: (slave bond1): Error -95 calling ndo_bpf [ 247.063045][ T9295] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 247.078878][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 247.200419][ T9300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1866'. [ 247.272642][ T9303] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1868'. [ 247.352669][ T9307] syz.0.1870[9307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.352789][ T9307] syz.0.1870[9307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.461229][ T9313] bond0: (slave bridge0): Error: Slave device does not support XDP [ 247.503966][ T9314] loop4: detected capacity change from 0 to 128 [ 247.513062][ T9313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.521650][ T9313] bond0: (slave bond6): Enslaving as an active interface with an up link [ 248.856187][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1882'. [ 248.966665][ T9344] syz.4.1884[9344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.966778][ T9344] syz.4.1884[9344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.144271][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 250.075266][ T9381] loop2: detected capacity change from 0 to 128 [ 250.541302][ T9388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1900'. [ 250.571635][ T9390] syz.4.1901[9390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.571748][ T9390] syz.4.1901[9390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.856086][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 251.157693][ T9419] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 251.815299][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1913'. [ 252.378235][ T9434] syz.1.1915[9434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.378347][ T9434] syz.1.1915[9434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.813048][ T9463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1928'. [ 253.033438][ T9460] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1926'. [ 253.818759][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1942'. [ 254.410232][ T9535] loop3: detected capacity change from 0 to 128 [ 254.414231][ T9538] loop2: detected capacity change from 0 to 512 [ 254.437885][ T9538] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1955: inode #1: comm syz.2.1955: iget: illegal inode # [ 254.456296][ T9538] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1955: error while reading EA inode 1 err=-117 [ 254.482941][ T9538] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1955: inode #1: comm syz.2.1955: iget: illegal inode # [ 254.508714][ T9538] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1955: error while reading EA inode 1 err=-117 [ 254.535103][ T9538] EXT4-fs (loop2): 1 orphan inode deleted [ 254.541411][ T9538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 254.552603][ T9542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1956'. [ 254.641461][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 254.843105][ T9555] loop4: detected capacity change from 0 to 512 [ 254.882318][ T9555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.893452][ T9555] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.908987][ T9547] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1960: bg 0: block 18: invalid block bitmap [ 254.923868][ T9547] __quota_error: 50 callbacks suppressed [ 254.923882][ T9547] Quota error (device loop4): write_blk: dquota write failed [ 254.949628][ T9547] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.960108][ T9547] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.1960: Failed to acquire dquot type 1 [ 255.264242][ T26] audit: type=1326 audit(1734469016.849:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.325123][ T26] audit: type=1326 audit(1734469016.879:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.370059][ T26] audit: type=1326 audit(1734469016.879:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.396130][ T26] audit: type=1326 audit(1734469016.879:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.419992][ T26] audit: type=1326 audit(1734469016.879:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.622112][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650073][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 255.718118][ T9584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1970'. [ 255.721666][ T26] audit: type=1326 audit(1734469016.879:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.802358][ T26] audit: type=1326 audit(1734469016.879:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 255.885048][ T26] audit: type=1326 audit(1734469016.879:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa454385d19 code=0x7ffc0000 [ 256.162937][ T9600] syz.3.1975[9600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.163050][ T9600] syz.3.1975[9600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.177943][ T9597] device syzkaller0 entered promiscuous mode [ 258.952576][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 259.064442][ T9643] syz.0.1988[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.064558][ T9643] syz.0.1988[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.374319][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1996'. [ 259.649381][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 259.833732][ T9684] device syzkaller0 entered promiscuous mode [ 260.215656][ T9694] loop2: detected capacity change from 0 to 512 [ 260.304733][ T9694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 260.313938][ T9694] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.352357][ T9694] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2006: bg 0: block 18: invalid block bitmap [ 260.403989][ T9694] __quota_error: 30 callbacks suppressed [ 260.404009][ T9694] Quota error (device loop2): write_blk: dquota write failed [ 260.419307][ T9694] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 260.430048][ T9694] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.2006: Failed to acquire dquot type 1 [ 260.639442][ T26] audit: type=1326 audit(1734469022.229:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.681926][ T9711] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2012'. [ 260.708428][ T26] audit: type=1326 audit(1734469022.259:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.777630][ T26] audit: type=1326 audit(1734469022.269:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.836878][ T26] audit: type=1326 audit(1734469022.269:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.879826][ T26] audit: type=1326 audit(1734469022.269:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.919956][ T26] audit: type=1326 audit(1734469022.269:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.947174][ T26] audit: type=1326 audit(1734469022.269:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 260.977210][ T26] audit: type=1326 audit(1734469022.269:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 261.047924][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 263.317991][ T9769] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2031'. [ 265.100371][ T9782] syz.4.2035[9782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.100497][ T9782] syz.4.2035[9782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.291040][ T9789] loop4: detected capacity change from 0 to 512 [ 265.367563][ T9789] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.423637][ T9789] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 265.439332][ T9789] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2037: Corrupt directory, running e2fsck is recommended [ 265.486368][ T9789] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 265.512681][ T9789] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.2037: corrupted in-inode xattr [ 265.555393][ T9789] EXT4-fs (loop4): Remounting filesystem read-only [ 265.562036][ T9789] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2037: couldn't read orphan inode 15 (err -117) [ 265.581042][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 265.601321][ T9803] loop3: detected capacity change from 0 to 2048 [ 265.626188][ T9789] EXT4-fs (loop4): Remounting filesystem read-only [ 265.632758][ T9789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.635951][ T9803] loop3: p1 < > p4 [ 265.659805][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 265.659823][ T26] audit: type=1326 audit(1734469027.248:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.668153][ T9803] loop3: p4 size 8388608 extends beyond EOD, [ 265.697843][ T9789] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.743176][ T9803] truncated [ 265.754125][ T26] audit: type=1326 audit(1734469027.278:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.777539][ T9789] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 265.795869][ T26] audit: type=1326 audit(1734469027.278:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.829432][ T9789] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2037: Corrupt directory, running e2fsck is recommended [ 265.865151][ T26] audit: type=1326 audit(1734469027.278:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.907994][ T26] audit: type=1326 audit(1734469027.278:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.924474][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'. [ 265.939489][ T26] audit: type=1326 audit(1734469027.278:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.966088][ T26] audit: type=1326 audit(1734469027.278:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 265.976875][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 266.000932][ T26] audit: type=1326 audit(1734469027.278:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 266.024361][ T26] audit: type=1326 audit(1734469027.278:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 266.048789][ T26] audit: type=1326 audit(1734469027.288:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 266.123861][ T9817] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 266.160330][ T9817] team0: Device hsr_slave_0 failed to register rx_handler [ 266.428952][ T9829] syz.3.2049[9829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.429065][ T9829] syz.3.2049[9829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.478995][ T9822] device syzkaller0 entered promiscuous mode [ 269.098313][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'. [ 269.125092][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'. [ 269.302809][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 269.375963][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2061'. [ 269.503989][ T9871] syz.0.2062[9871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.504099][ T9871] syz.0.2062[9871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.840348][ T9885] device syzkaller0 entered promiscuous mode [ 270.129837][ T9899] loop4: detected capacity change from 0 to 512 [ 270.164179][ T9899] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.182689][ T9899] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 270.201919][ T9899] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2073: Corrupt directory, running e2fsck is recommended [ 270.238652][ T9899] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 270.261510][ T9899] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.2073: corrupted in-inode xattr [ 270.296240][ T9899] EXT4-fs (loop4): Remounting filesystem read-only [ 270.303177][ T9899] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2073: couldn't read orphan inode 15 (err -117) [ 270.332449][ T9899] EXT4-fs (loop4): Remounting filesystem read-only [ 270.340690][ T9899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.379634][ T9899] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.399179][ T9899] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 270.417716][ T9899] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2073: Corrupt directory, running e2fsck is recommended [ 270.497318][ T9910] syz.3.2077[9910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.497431][ T9910] syz.3.2077[9910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.551061][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 272.479051][ T9907] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 272.526543][ T9907] team0: Device hsr_slave_0 failed to register rx_handler [ 272.551149][ T26] kauditd_printk_skb: 90 callbacks suppressed [ 272.551167][ T26] audit: type=1326 audit(1734469034.138:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 272.631783][ T26] audit: type=1326 audit(1734469034.168:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 272.732776][ T26] audit: type=1326 audit(1734469034.168:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 272.739068][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'. [ 272.786798][ T26] audit: type=1326 audit(1734469034.168:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 272.799734][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'. [ 272.845629][ T26] audit: type=1326 audit(1734469034.168:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 272.877075][ T9936] loop4: detected capacity change from 0 to 512 [ 272.902001][ T26] audit: type=1326 audit(1734469034.168:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 272.937500][ T9936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.955274][ T9936] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.975191][ T26] audit: type=1326 audit(1734469034.168:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 273.002220][ T9943] syz.3.2089[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.002364][ T9943] syz.3.2089[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.056011][ T26] audit: type=1326 audit(1734469034.168:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 273.211526][ T26] audit: type=1326 audit(1734469034.168:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 273.284369][ T26] audit: type=1326 audit(1734469034.168:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fca95d85d19 code=0x7ffc0000 [ 273.394737][ T9955] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2091'. [ 273.524685][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 274.032687][ T9963] device syzkaller0 entered promiscuous mode [ 274.463783][ T9989] syz.4.2103[9989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.464000][ T9989] syz.4.2103[9989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.093526][T10020] syz.1.2115[10020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.109467][T10020] syz.1.2115[10020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.573386][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 277.801121][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 277.801140][ T26] audit: type=1326 audit(1734469039.388:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 277.874575][ T26] audit: type=1326 audit(1734469039.418:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 277.932692][ T26] audit: type=1326 audit(1734469039.428:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.073462][ T26] audit: type=1326 audit(1734469039.428:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.209326][ T26] audit: type=1326 audit(1734469039.428:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.233380][ T26] audit: type=1326 audit(1734469039.428:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.274849][T10049] loop4: detected capacity change from 0 to 512 [ 278.293815][ T26] audit: type=1326 audit(1734469039.428:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.373218][T10052] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2125'. [ 278.393593][ T26] audit: type=1326 audit(1734469039.428:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.420978][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 278.427452][T10049] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 278.514457][T10049] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 278.535239][T10049] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2127: Corrupt directory, running e2fsck is recommended [ 278.576710][ T26] audit: type=1326 audit(1734469039.438:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.608278][T10049] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 278.638071][T10049] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.2127: corrupted in-inode xattr [ 278.699279][T10049] EXT4-fs (loop4): Remounting filesystem read-only [ 278.703691][ T26] audit: type=1326 audit(1734469039.438:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d5785d19 code=0x7ffc0000 [ 278.722045][T10049] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2127: couldn't read orphan inode 15 (err -117) [ 278.782466][T10049] EXT4-fs (loop4): Remounting filesystem read-only [ 278.808211][T10049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.884465][T10049] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 278.932821][T10049] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 278.961382][T10049] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2127: Corrupt directory, running e2fsck is recommended [ 279.052661][T10067] device syzkaller0 entered promiscuous mode [ 279.096259][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 280.147414][T10101] loop4: detected capacity change from 0 to 1024 [ 280.199452][T10101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 280.408676][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 281.050398][T10116] loop4: detected capacity change from 0 to 512 [ 281.122778][T10116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.235407][T10116] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.323360][T10116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2150: bg 0: block 18: invalid block bitmap [ 281.365068][T10116] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.2150: Failed to acquire dquot type 1 [ 282.028875][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 282.114472][T10133] loop3: detected capacity change from 0 to 512 [ 282.136875][T10135] loop4: detected capacity change from 0 to 512 [ 282.156349][T10133] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 282.171754][T10135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.173148][T10133] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 282.180993][T10135] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.198269][T10133] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2154: Corrupt directory, running e2fsck is recommended [ 282.223138][T10133] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 282.231942][T10133] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.2154: corrupted in-inode xattr [ 282.249820][T10133] EXT4-fs (loop3): Remounting filesystem read-only [ 282.256618][T10133] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2154: couldn't read orphan inode 15 (err -117) [ 282.279397][T10133] EXT4-fs (loop3): Remounting filesystem read-only [ 282.300933][T10133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.302244][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 282.333182][T10133] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 282.361939][T10133] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 282.398654][T10133] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2154: Corrupt directory, running e2fsck is recommended [ 282.529107][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 282.678029][T10146] loop3: detected capacity change from 0 to 1024 [ 282.704005][T10146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.823455][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 283.253805][ T26] kauditd_printk_skb: 139 callbacks suppressed [ 283.253822][ T26] audit: type=1326 audit(1734469044.838:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.283157][ T26] audit: type=1326 audit(1734469044.848:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.325772][ T26] audit: type=1326 audit(1734469044.848:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.397538][ T26] audit: type=1326 audit(1734469044.848:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.421036][ T26] audit: type=1326 audit(1734469044.848:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.444351][ T26] audit: type=1326 audit(1734469044.848:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.467432][ T26] audit: type=1326 audit(1734469044.848:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.505461][ T26] audit: type=1326 audit(1734469044.848:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.551571][ T26] audit: type=1326 audit(1734469044.848:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.604137][ T26] audit: type=1326 audit(1734469044.848:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 283.720124][T10169] loop4: detected capacity change from 0 to 512 [ 283.758998][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 283.774458][T10169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 283.871565][T10169] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.940496][T10176] loop2: detected capacity change from 0 to 512 [ 283.984454][T10164] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2165: bg 0: block 18: invalid block bitmap [ 284.042799][T10164] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.2165: Failed to acquire dquot type 1 [ 284.064366][T10176] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.102266][T10176] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 284.132907][T10176] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2167: Corrupt directory, running e2fsck is recommended [ 284.157079][T10176] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 284.182095][T10176] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.2167: corrupted in-inode xattr [ 284.209578][T10176] EXT4-fs (loop2): Remounting filesystem read-only [ 284.239912][T10176] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2167: couldn't read orphan inode 15 (err -117) [ 284.275219][T10176] EXT4-fs (loop2): Remounting filesystem read-only [ 284.281807][T10176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.311672][T10176] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.325773][T10176] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 284.336525][T10176] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2167: Corrupt directory, running e2fsck is recommended [ 284.408852][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 284.590770][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 284.683623][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 285.117792][T10221] loop4: detected capacity change from 0 to 512 [ 285.131418][T10226] loop2: detected capacity change from 0 to 1024 [ 285.197327][T10221] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 285.213272][T10226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.235398][T10221] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 285.277517][T10221] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2186: Corrupt directory, running e2fsck is recommended [ 285.311222][T10221] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 285.351036][T10221] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.2186: corrupted in-inode xattr [ 285.382390][T10239] loop3: detected capacity change from 0 to 512 [ 285.413960][T10221] EXT4-fs (loop4): Remounting filesystem read-only [ 285.429224][T10239] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 285.435302][T10221] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2186: couldn't read orphan inode 15 (err -117) [ 285.467816][T10239] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.479432][T10221] EXT4-fs (loop4): Remounting filesystem read-only [ 285.494569][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 285.523721][T10221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.561180][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 285.576645][T10221] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 285.609226][T10221] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 285.641518][T10221] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2186: Corrupt directory, running e2fsck is recommended [ 285.643069][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 285.811956][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 287.140360][T10280] [ 287.142861][T10280] ====================================================== [ 287.142991][T10283] loop3: detected capacity change from 0 to 512 [ 287.149881][T10280] WARNING: possible circular locking dependency detected [ 287.149894][T10280] 6.1.120-syzkaller-00773-g52f863f820fd #0 Tainted: G W [ 287.149907][T10280] ------------------------------------------------------ [ 287.149914][T10280] syz.0.2204/10280 is trying to acquire lock: [ 287.149925][T10280] ffff88807ca417d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 287.196112][T10280] [ 287.196112][T10280] but task is already holding lock: [ 287.203961][T10280] ffff888079364800 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 287.215975][T10280] [ 287.215975][T10280] which lock already depends on the new lock. [ 287.215975][T10280] [ 287.226407][T10280] [ 287.226407][T10280] the existing dependency chain (in reverse order) is: [ 287.235637][T10280] [ 287.235637][T10280] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 287.244587][T10280] lock_acquire+0x1f8/0x5a0 [ 287.249664][T10280] down_write+0x36/0x60 [ 287.254385][T10280] process_measurement+0x446/0x21b0 [ 287.260147][T10280] ima_file_mmap+0x121/0x1c0 [ 287.265301][T10280] __se_sys_remap_file_pages+0x67a/0x8b0 [ 287.271488][T10280] do_syscall_64+0x3b/0xb0 [ 287.276470][T10280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.282964][T10280] [ 287.282964][T10280] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 287.290570][T10280] validate_chain+0x1661/0x5950 [ 287.295983][T10280] __lock_acquire+0x125b/0x1f80 [ 287.301402][T10280] lock_acquire+0x1f8/0x5a0 [ 287.306560][T10280] down_read_killable+0xc6/0xd10 [ 287.312066][T10280] mmap_read_lock_killable+0x1d/0x60 [ 287.317914][T10280] lock_mm_and_find_vma+0x2a7/0x2e0 [ 287.323686][T10280] exc_page_fault+0x169/0x620 [ 287.328927][T10280] asm_exc_page_fault+0x22/0x30 [ 287.334352][T10280] fault_in_readable+0x1c8/0x340 [ 287.339853][T10280] fault_in_iov_iter_readable+0xdb/0x270 [ 287.346048][T10280] generic_perform_write+0x207/0x5e0 [ 287.351898][T10280] __generic_file_write_iter+0x176/0x400 [ 287.358076][T10280] generic_file_write_iter+0xab/0x310 [ 287.363985][T10280] vfs_write+0x857/0xbc0 [ 287.368770][T10280] ksys_write+0x19c/0x2c0 [ 287.373669][T10280] do_syscall_64+0x3b/0xb0 [ 287.378660][T10280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.385116][T10280] [ 287.385116][T10280] other info that might help us debug this: [ 287.385116][T10280] [ 287.395352][T10280] Possible unsafe locking scenario: [ 287.395352][T10280] [ 287.402805][T10280] CPU0 CPU1 [ 287.408170][T10280] ---- ---- [ 287.413537][T10280] lock(&sb->s_type->i_mutex_key#12); [ 287.419014][T10280] lock(&mm->mmap_lock); [ 287.425868][T10280] lock(&sb->s_type->i_mutex_key#12); [ 287.433865][T10280] lock(&mm->mmap_lock); [ 287.438203][T10280] [ 287.438203][T10280] *** DEADLOCK *** [ 287.438203][T10280] [ 287.446348][T10280] 3 locks held by syz.0.2204/10280: [ 287.451546][T10280] #0: ffff88807e7d2ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 287.460791][T10280] #1: ffff888026ea2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 287.469700][T10280] #2: ffff888079364800 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 287.481035][T10280] [ 287.481035][T10280] stack backtrace: [ 287.486948][T10280] CPU: 1 PID: 10280 Comm: syz.0.2204 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 287.498405][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 287.508560][T10280] Call Trace: [ 287.511866][T10280] [ 287.515079][T10280] dump_stack_lvl+0x1e3/0x2cb [ 287.519794][T10280] ? nf_tcp_handle_invalid+0x642/0x642 [ 287.525285][T10280] ? print_circular_bug+0x12b/0x1a0 [ 287.530497][T10280] check_noncircular+0x2fa/0x3b0 [ 287.535443][T10280] ? add_chain_block+0x850/0x850 [ 287.540383][T10280] ? lockdep_lock+0x11f/0x2a0 [ 287.545078][T10280] ? _find_first_zero_bit+0xd0/0x100 [ 287.550378][T10280] validate_chain+0x1661/0x5950 [ 287.555256][T10280] ? reacquire_held_locks+0x660/0x660 [ 287.560637][T10280] ? reacquire_held_locks+0x660/0x660 [ 287.566016][T10280] ? mark_lock+0x9a/0x340 [ 287.570362][T10280] ? reacquire_held_locks+0x660/0x660 [ 287.575747][T10280] ? __lock_acquire+0x125b/0x1f80 [ 287.580965][T10280] ? mark_lock+0x9a/0x340 [ 287.585312][T10280] __lock_acquire+0x125b/0x1f80 [ 287.590209][T10280] lock_acquire+0x1f8/0x5a0 [ 287.594739][T10280] ? mmap_read_lock_killable+0x1d/0x60 [ 287.600238][T10280] ? read_lock_is_recursive+0x10/0x10 [ 287.605628][T10280] ? __might_sleep+0xb0/0xb0 [ 287.610231][T10280] down_read_killable+0xc6/0xd10 [ 287.615180][T10280] ? mmap_read_lock_killable+0x1d/0x60 [ 287.620751][T10280] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 287.626747][T10280] ? cmp_ex_search+0x70/0x90 [ 287.631343][T10280] ? mmap_read_lock_killable+0x1d/0x60 [ 287.636811][T10280] ? bsearch+0x8e/0xb0 [ 287.640889][T10280] ? down_read_interruptible+0xc40/0xc40 [ 287.646536][T10280] ? search_extable+0xaf/0xf0 [ 287.651220][T10280] ? trim_init_extable+0x3c0/0x3c0 [ 287.656335][T10280] ? fault_in_readable+0x1c8/0x340 [ 287.661448][T10280] ? __init_rwsem+0x160/0x160 [ 287.666139][T10280] ? print_irqtrace_events+0x210/0x210 [ 287.671614][T10280] mmap_read_lock_killable+0x1d/0x60 [ 287.676911][T10280] lock_mm_and_find_vma+0x2a7/0x2e0 [ 287.682123][T10280] exc_page_fault+0x169/0x620 [ 287.686807][T10280] asm_exc_page_fault+0x22/0x30 [ 287.691671][T10280] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 287.697413][T10280] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 d2 b1 bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 287.717046][T10280] RSP: 0018:ffffc9000d91f9e0 EFLAGS: 00050287 [ 287.723119][T10280] RAX: ffffffff81caea9e RBX: 00000000202c2000 RCX: 0000000000080000 [ 287.731099][T10280] RDX: ffffc90004259000 RSI: 0000000000047ae6 RDI: 0000000000047ae7 [ 287.739163][T10280] RBP: ffffc9000d91fa98 R08: ffffffff81caea36 R09: ffffffff844210c5 [ 287.747143][T10280] R10: 0000000000000002 R11: ffff888056b80000 R12: 0000000000001000 [ 287.755118][T10280] R13: dffffc0000000000 R14: 00000000202c3000 R15: 1ffff92001b23f44 [ 287.763534][T10280] ? fault_in_iov_iter_readable+0x45/0x270 [ 287.769350][T10280] ? fault_in_readable+0x156/0x340 [ 287.774486][T10280] ? fault_in_readable+0x1be/0x340 [ 287.779625][T10280] ? fault_in_safe_writeable+0x250/0x250 [ 287.785269][T10280] ? inode_to_bdi+0x65/0xd0 [ 287.789785][T10280] fault_in_iov_iter_readable+0xdb/0x270 [ 287.795425][T10280] generic_perform_write+0x207/0x5e0 [ 287.800724][T10280] ? generic_file_direct_write+0x460/0x460 [ 287.806534][T10280] ? __file_remove_privs+0x640/0x640 [ 287.811839][T10280] ? generic_write_checks+0x15c/0x1c0 [ 287.817225][T10280] ? clear_nonspinnable+0x60/0x60 [ 287.822264][T10280] __generic_file_write_iter+0x176/0x400 [ 287.827905][T10280] generic_file_write_iter+0xab/0x310 [ 287.833282][T10280] vfs_write+0x857/0xbc0 [ 287.837528][T10280] ? file_end_write+0x250/0x250 [ 287.842381][T10280] ? __fget_files+0x28/0x4a0 [ 287.846973][T10280] ? __fget_files+0x435/0x4a0 [ 287.851656][T10280] ? __fdget_pos+0x2ba/0x360 [ 287.856250][T10280] ? ksys_write+0x77/0x2c0 [ 287.860670][T10280] ksys_write+0x19c/0x2c0 [ 287.865012][T10280] ? print_irqtrace_events+0x210/0x210 [ 287.870484][T10280] ? __ia32_sys_read+0x80/0x80 [ 287.875251][T10280] ? syscall_enter_from_user_mode+0x2e/0x230 [ 287.881237][T10280] ? lockdep_hardirqs_on+0x94/0x130 [ 287.886532][T10280] ? syscall_enter_from_user_mode+0x2e/0x230 [ 287.892517][T10280] do_syscall_64+0x3b/0xb0 [ 287.896953][T10280] ? clear_bhb_loop+0x45/0xa0 [ 287.901631][T10280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.907540][T10280] RIP: 0033:0x7fca95d85d19 [ 287.911966][T10280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.931584][T10280] RSP: 002b:00007fca96c9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.940011][T10280] RAX: ffffffffffffffda RBX: 00007fca95f75fa0 RCX: 00007fca95d85d19 [ 287.947985][T10280] RDX: 000000000208e24b RSI: 0000000020000380 RDI: 0000000000000003 [ 287.956047][T10280] RBP: 00007fca95e01a20 R08: 0000000000000000 R09: 0000000000000000 [ 287.964019][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.971992][T10280] R13: 0000000000000000 R14: 00007fca95f75fa0 R15: 00007ffc206a7318 [ 287.979976][T10280] [ 287.996897][T10283] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 288.004798][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 288.008977][T10283] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 288.054445][T10283] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2206: Corrupt directory, running e2fsck is recommended [ 288.076847][T10283] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 288.086675][T10283] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.2206: corrupted in-inode xattr [ 288.102238][T10283] EXT4-fs (loop3): Remounting filesystem read-only [ 288.109829][T10283] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2206: couldn't read orphan inode 15 (err -117) [ 288.124392][T10283] EXT4-fs (loop3): Remounting filesystem read-only [ 288.131254][T10283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.206260][T10283] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 288.221301][T10283] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 288.238546][T10283] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2206: Corrupt directory, running e2fsck is recommended [ 288.259195][ T26] kauditd_printk_skb: 241 callbacks suppressed [ 288.259212][ T26] audit: type=1326 audit(1734469049.838:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.289373][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 288.290047][ T26] audit: type=1326 audit(1734469049.848:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.324067][ T26] audit: type=1326 audit(1734469049.848:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.349531][ T26] audit: type=1326 audit(1734469049.848:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.372615][ T26] audit: type=1326 audit(1734469049.848:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.395249][ T26] audit: type=1326 audit(1734469049.848:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.417950][ T26] audit: type=1326 audit(1734469049.848:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.440761][ T26] audit: type=1326 audit(1734469049.848:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.463904][ T26] audit: type=1326 audit(1734469049.848:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000 [ 288.486513][ T26] audit: type=1326 audit(1734469049.848:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb85d19 code=0x7ffc0000