last executing test programs: 11m14.21791444s ago: executing program 0 (id=4138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20008040) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0xf5, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x5e, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000001c0)=@l={0x92, 0x0, 0xd0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m13.619241148s ago: executing program 0 (id=4139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000084000000000000"], 0x18}, 0x41) close(r4) 11m8.940168556s ago: executing program 0 (id=4151): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 11m6.997013594s ago: executing program 0 (id=4155): creat(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 11m5.066902303s ago: executing program 0 (id=4157): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001900000019000000020000c5061a7d23c5ae3177e4a00f3c4c8821d36700"], 0x0, 0x36, 0x0, 0x1, 0x100}, 0x28) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d74c405d7b3302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f2380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c796f1ab841e4e9c27bfc7aafa2101c157745926241ad5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ed11cb24c435d589b17a396377800f00af7fcb5394000000000000000000000000000000b77852afdd71c74bb5b7c57112371a41531d1cdd68715fa9cc59195e4aeb5878987cefd666ef6b56a81553b8c7ffdcf6658d8a70ad52a23a68b6d0e5ea"], 0x1, 0x229, &(0x7f0000000b80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB], 0xfd1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) 11m3.862272001s ago: executing program 0 (id=4159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x8000000, 0x200, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(0xffffffffffffffff, 0x40000000) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10m48.616107586s ago: executing program 32 (id=4159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x8000000, 0x200, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(0xffffffffffffffff, 0x40000000) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m15.191382224s ago: executing program 5 (id=6857): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) open$dir(&(0x7f0000000000)='./file1\x00', 0x2, 0x40) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0xac6, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r3, 0x7f, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bd", 0x44}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) shutdown(r0, 0x1) 1m14.696660107s ago: executing program 5 (id=6863): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r0, 0x4) 1m14.462208838s ago: executing program 5 (id=6866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = fsmount(r1, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(0x3) 1m14.46196607s ago: executing program 1 (id=6867): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 1m13.120087577s ago: executing program 5 (id=6874): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='siox_get_data\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000200)={0x30, r9, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000930000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r11], 0x20}}, 0x0) 1m12.780858138s ago: executing program 1 (id=6876): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r0, 0x4) 1m12.617933903s ago: executing program 3 (id=6878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 1m12.588024531s ago: executing program 1 (id=6879): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0ffff200021000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1m12.586087481s ago: executing program 4 (id=6880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m12.425602028s ago: executing program 4 (id=6881): r0 = open(&(0x7f0000000280)='./file1\x00', 0x14dc7e, 0x1) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0xfe00}]) 1m12.425184961s ago: executing program 3 (id=6882): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) 1m12.405285149s ago: executing program 1 (id=6883): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd97) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) 1m12.33495964s ago: executing program 3 (id=6884): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = fsmount(r1, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(0x3) 150.052124ms ago: executing program 2 (id=6885): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002de5c55e9164030000000000000000000e000000000000000000e1a2"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB="0000ca29fa646700"/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa8000000060a0b040000000000000000020000067c000480780001800a0001006d617463680700006800028008000240000000000900010064736370000000004d000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495f0000000900010073797a30000000000900020073797a320000000020000000050a05000000000000000000030000010900010073797a3000000000140000001100010000000000000000000500000a"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008090) socket$kcm(0x29, 0x2, 0x0) msgrcv(0x0, &(0x7f0000000c80)={0x0, ""/4096}, 0x1008, 0x0, 0x2000) msgsnd(0x0, &(0x7f0000000940)={0x3}, 0x8, 0x0) 149.101504ms ago: executing program 4 (id=6886): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 148.155535ms ago: executing program 5 (id=6887): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 147.49083ms ago: executing program 3 (id=6888): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0xfffd, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'nq\x00', 0xc, 0x3, 0x5}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 146.97513ms ago: executing program 4 (id=6889): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@abort}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 146.354725ms ago: executing program 2 (id=6890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) 145.955997ms ago: executing program 2 (id=6891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 145.64947ms ago: executing program 2 (id=6892): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 145.258151ms ago: executing program 2 (id=6893): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0ffff200021000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 144.483732ms ago: executing program 1 (id=6894): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e240000000900000000000000000000000000000000060000000000000002001300"], 0x98}, 0x1, 0x7}, 0x0) 132.249862ms ago: executing program 5 (id=6895): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 131.655569ms ago: executing program 1 (id=6896): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 131.445287ms ago: executing program 2 (id=6897): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 127.308458ms ago: executing program 3 (id=6898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b90703600000f007049e0ff086dd", 0x0, 0x104, 0xa000000, 0x29, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999", 0x0}, 0x34) 102.235317ms ago: executing program 4 (id=6899): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 367.529µs ago: executing program 3 (id=6900): connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) 0s ago: executing program 4 (id=6901): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) kernel console output (not intermixed with test programs): 0000 r/w without journal. Quota mode: writeback. [ 2115.423813][T28948] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2115.550643][T28960] syzkaller1: entered promiscuous mode [ 2115.569473][T28960] syzkaller1: entered allmulticast mode [ 2115.651297][T26258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2115.662893][T26258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2115.680643][T26258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2115.690421][T26258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2115.698710][T26258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2116.323693][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2116.422043][T26258] Bluetooth: hci2: command tx timeout [ 2116.603914][T28971] loop4: detected capacity change from 0 to 512 [ 2116.656337][T28971] EXT4-fs (loop4): 1 truncate cleaned up [ 2116.709936][T28971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2116.874238][T28971] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6050: bg 0: block 465: padding at end of block bitmap is not set [ 2116.919115][T28971] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 2116.931648][T28971] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2116.931648][T28971] [ 2117.004818][T28976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6053'. [ 2117.030495][ T991] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 2117.065740][ T991] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2117.065740][ T991] [ 2117.106730][ T991] EXT4-fs (loop4): Total free blocks count 0 [ 2117.112765][ T991] EXT4-fs (loop4): Free/Dirty block details [ 2117.146844][ T991] EXT4-fs (loop4): free_blocks=0 [ 2117.151835][ T991] EXT4-fs (loop4): dirty_blocks=64 [ 2117.175898][ T991] EXT4-fs (loop4): Block reservation details [ 2117.180671][T28978] fuse: Unknown parameter 'use00000000000000000000' [ 2117.333206][T17851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.692654][T28987] loop2: detected capacity change from 0 to 512 [ 2117.765924][T17851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.791880][T26258] Bluetooth: hci5: command tx timeout [ 2117.804538][T28987] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2118.246569][T17851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.546411][T17851] bond0: (slave netdevsim0): Releasing backup interface [ 2118.624543][T17851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.679488][T28997] syzkaller1: entered promiscuous mode [ 2118.698838][T28997] syzkaller1: entered allmulticast mode [ 2119.115590][T29004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2119.195472][T28961] chnl_net:caif_netlink_parms(): no params data found [ 2119.705603][T29015] fuse: Unknown parameter 'user_i00000000000000000000' [ 2119.857038][T26258] Bluetooth: hci5: command tx timeout [ 2121.078813][T17851] bond3 (unregistering): (slave geneve2): Releasing active interface [ 2121.357547][T28982] kexec: Could not allocate control_code_buffer [ 2121.663363][T17851] bond0 (unregistering): Released all slaves [ 2121.707725][T17851] bond1 (unregistering): Released all slaves [ 2121.735925][T17851] bond2 (unregistering): Released all slaves [ 2121.936718][T26258] Bluetooth: hci5: command tx timeout [ 2122.192590][T17851] bond3 (unregistering): Released all slaves [ 2122.219636][T28961] bridge0: port 1(bridge_slave_0) entered blocking state [ 2122.236820][T28961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.244111][T28961] bridge_slave_0: entered allmulticast mode [ 2122.290437][T28961] bridge_slave_0: entered promiscuous mode [ 2122.390130][T17851] tipc: Disabling bearer [ 2122.407474][T17851] tipc: Left network mode [ 2122.407646][T28961] bridge0: port 2(bridge_slave_1) entered blocking state [ 2122.432965][T28961] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.452384][T28961] bridge_slave_1: entered allmulticast mode [ 2122.464304][T28961] bridge_slave_1: entered promiscuous mode [ 2122.467363][T23992] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2122.618713][T29045] fuse: Unknown parameter 'user_i00000000000000000000' [ 2122.842305][T23992] usb 5-1: Using ep0 maxpacket: 16 [ 2122.849734][T23992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2122.866453][T23992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2122.887432][T23992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2122.908407][T23992] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2122.930153][T23992] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2122.979514][T23992] usb 5-1: Manufacturer: syz [ 2122.992504][T23992] usb 5-1: config 0 descriptor?? [ 2123.068566][T28961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2123.118643][T29053] atomic_op ffff888044e2b998 conn xmit_atomic 0000000000000000 [ 2123.330898][T28961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.440809][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6081'. [ 2123.577811][T28961] team0: Port device team_slave_0 added [ 2123.611128][T28961] team0: Port device team_slave_1 added [ 2123.697730][T29061] loop4: detected capacity change from 0 to 512 [ 2123.804845][T29061] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2123.865304][T29061] EXT4-fs error (device loop4): ext4_iget_extra_inode:5079: inode #12: comm syz.4.6074: corrupted in-inode xattr: invalid ea_ino [ 2123.897457][T29061] EXT4-fs (loop4): Remounting filesystem read-only [ 2123.910499][T29061] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2123.935549][T28961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.954592][T28961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2124.023447][T26258] Bluetooth: hci5: command tx timeout [ 2124.059625][T28961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2124.096237][T29072] loop5: detected capacity change from 0 to 512 [ 2124.117394][T17851] hsr_slave_0: left promiscuous mode [ 2124.122139][T29072] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2124.134618][T17851] hsr_slave_1: left promiscuous mode [ 2124.185775][T17851] team0: left allmulticast mode [ 2124.201804][T17851] team0: left promiscuous mode [ 2124.213624][T17851] veth1_macvtap: left promiscuous mode [ 2124.227264][T17851] veth0_macvtap: left promiscuous mode [ 2124.241961][T17851] veth1_vlan: left promiscuous mode [ 2124.253341][T17851] veth0_vlan: left promiscuous mode [ 2124.523559][T29077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6086'. [ 2124.649919][T29079] fuse: Unknown parameter '0x0000000000000003' [ 2125.235050][T23992] usb 5-1: USB disconnect, device number 44 [ 2125.254632][T28563] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 2125.491099][ T6847] smc: removing ib device syz0 [ 2125.849357][T29087] loop4: detected capacity change from 0 to 512 [ 2125.856513][T29087] EXT4-fs: Ignoring removed bh option [ 2125.880629][T29087] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2125.892608][T29087] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 2125.906008][T29087] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2125.915692][T29087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 2125.941952][T29087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2126.058852][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2126.412384][T29095] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6093'. [ 2126.427337][T28961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.434334][T28961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2126.483154][T28961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2127.642330][T29117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6100'. [ 2127.752992][T28961] hsr_slave_0: entered promiscuous mode [ 2127.760828][T28961] hsr_slave_1: entered promiscuous mode [ 2127.786005][T28961] debugfs: 'hsr0' already exists in 'hsr' [ 2127.818724][T28961] Cannot create hsr debugfs directory [ 2127.916229][T29120] loop4: detected capacity change from 0 to 512 [ 2127.970864][T29120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2128.045658][T29120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2128.072769][T29120] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2129.067446][T29128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6103'. [ 2129.118281][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2129.268321][T29134] atomic_op ffff8880a1489198 conn xmit_atomic 0000000000000000 [ 2129.495366][T29141] loop2: detected capacity change from 0 to 512 [ 2129.503651][T29139] loop4: detected capacity change from 0 to 1024 [ 2129.519297][T29139] EXT4-fs: inline encryption not supported [ 2129.561106][T29141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6109: bg 0: block 248: padding at end of block bitmap is not set [ 2129.585133][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2129.585155][ T30] audit: type=1326 audit(1764175762.027:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29142 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2129.642820][T29141] Quota error (device loop2): write_blk: dquota write failed [ 2129.653577][T29139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2129.653611][T29149] xt_policy: output policy not valid in PREROUTING and INPUT [ 2129.676666][T29141] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2129.700220][ T30] audit: type=1326 audit(1764175762.027:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29142 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2129.723149][T29141] EXT4-fs error (device loop2): ext4_acquire_dquot:6948: comm syz.2.6109: Failed to acquire dquot type 1 [ 2129.771386][T29141] EXT4-fs (loop2): 1 truncate cleaned up [ 2129.789789][T29141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2129.818822][ T30] audit: type=1326 audit(1764175762.027:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29142 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2129.862899][T29141] ext4 filesystem being mounted at /642/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2129.912496][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2129.917439][ T30] audit: type=1804 audit(1764175762.307:4463): pid=29154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6112" name="/newroot/357/file0" dev="tmpfs" ino=1906 res=1 errno=0 [ 2130.074044][T29158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6115'. [ 2130.112273][T18091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2130.158859][T29160] loop4: detected capacity change from 0 to 512 [ 2130.219720][T29160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2130.279063][T29160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2130.358388][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6117'. [ 2130.369848][T29160] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2131.312311][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2132.180722][T29186] netlink: 'syz.2.6122': attribute type 10 has an invalid length. [ 2132.324599][T29186] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2132.421738][ T30] audit: type=1804 audit(1764175764.867:4464): pid=29191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6124" name="/newroot/361/file0" dev="tmpfs" ino=1927 res=1 errno=0 [ 2132.594240][T29188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2132.844985][T28961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2132.880209][T28961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2132.919788][T28961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2132.951118][T28961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2134.751309][T29235] loop5: detected capacity change from 0 to 1024 [ 2134.767496][ T30] audit: type=1804 audit(1764175767.217:4465): pid=29237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6137" name="/newroot/25/file0" dev="tmpfs" ino=152 res=1 errno=0 [ 2134.800396][T29235] EXT4-fs: inline encryption not supported [ 2134.854503][T29235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2134.908342][T28961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.969297][T29235] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.6136: Allocating blocks 385-513 which overlap fs metadata [ 2135.085959][T28961] 8021q: adding VLAN 0 to HW filter on device team0 [ 2135.103357][T29234] EXT4-fs (loop5): pa ffff88807de43658: logic 16, phys. 129, len 24 [ 2135.112062][T29234] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2135.217660][T23146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2135.307565][T29246] loop2: detected capacity change from 0 to 512 [ 2135.325050][T29246] EXT4-fs: Ignoring removed oldalloc option [ 2135.355933][T29246] EXT4-fs (loop2): 1 truncate cleaned up [ 2135.418732][T29246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2135.461075][ T30] audit: type=1800 audit(1764175767.897:4466): pid=29246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6139" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2135.544990][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.552290][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2135.679313][T23516] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.686657][T23516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2136.245565][T18091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2136.464322][T17851] IPVS: stop unused estimator thread 0... [ 2136.648386][T29269] atomic_op ffff88804c0fc198 conn xmit_atomic 0000000000000000 [ 2136.709913][T29270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6147'. [ 2136.939289][ T30] audit: type=1804 audit(1764175769.387:4467): pid=29273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6148" name="/newroot/37/file0" dev="tmpfs" ino=217 res=1 errno=0 [ 2136.985049][T29277] loop2: detected capacity change from 0 to 1024 [ 2137.023825][T29277] EXT4-fs: inline encryption not supported [ 2137.130954][T29277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2137.165207][T29277] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6149: Allocating blocks 385-513 which overlap fs metadata [ 2137.182395][T29277] EXT4-fs (loop2): pa ffff888055a5acb0: logic 16, phys. 129, len 24 [ 2137.191113][T29277] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2137.209351][T29277] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 2137.405320][T18091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2137.451284][T28961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2137.635114][T28961] veth0_vlan: entered promiscuous mode [ 2137.655493][T29293] loop5: detected capacity change from 0 to 2048 [ 2137.684440][T28961] veth1_vlan: entered promiscuous mode [ 2137.739227][T29293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2137.765737][T28961] veth0_macvtap: entered promiscuous mode [ 2137.777777][T28961] veth1_macvtap: entered promiscuous mode [ 2137.803477][T28961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2137.825463][T28961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2137.842965][T18727] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.869564][T18727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.878578][T29302] atomic_op ffff88804ab31198 conn xmit_atomic 0000000000000000 [ 2137.886352][T18727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.917503][T18727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.222806][T29293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2139.271622][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2139.332278][T17851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2139.338186][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2139.362204][T17851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2139.475039][T29325] atomic_op ffff888032c24998 conn xmit_atomic 0000000000000000 [ 2139.609785][ T30] audit: type=1804 audit(1764175772.057:4468): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6170" name="/newroot/658/file0" dev="tmpfs" ino=3460 res=1 errno=0 [ 2140.061461][T29344] loop3: detected capacity change from 0 to 2048 [ 2141.693839][T29344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2141.975393][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2141.986958][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2142.003254][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2142.012620][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2142.021425][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2142.032512][T29344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2142.134915][T29357] loop4: detected capacity change from 0 to 8192 [ 2142.515159][ T30] audit: type=1326 audit(1764175774.957:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.541729][T21799] bond0: (slave syz_tun): Releasing backup interface [ 2142.583013][ T30] audit: type=1326 audit(1764175775.007:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.629315][ T30] audit: type=1326 audit(1764175775.007:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.685824][ T30] audit: type=1326 audit(1764175775.007:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.713240][T29373] loop9: detected capacity change from 0 to 7 [ 2142.714508][ T30] audit: type=1326 audit(1764175775.007:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.743642][T29373] buffer_io_error: 4 callbacks suppressed [ 2142.743661][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.744759][ T30] audit: type=1326 audit(1764175775.007:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.768258][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.806834][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.825046][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.847009][T15148] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2142.869583][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.906884][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.925033][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2142.943596][T29373] ldm_validate_partition_table(): Disk read failed. [ 2142.945082][ T30] audit: type=1326 audit(1764175775.007:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2142.953700][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2143.006898][T15148] usb 6-1: Using ep0 maxpacket: 8 [ 2143.011031][T18727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2143.027167][ T30] audit: type=1326 audit(1764175775.007:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2143.027843][T15148] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2143.058843][ T30] audit: type=1326 audit(1764175775.007:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2143.058903][ T30] audit: type=1326 audit(1764175775.007:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2143.060223][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2143.099419][T15148] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2143.165992][T15148] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2143.176217][T15148] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2143.190329][T15148] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2143.204855][T15148] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2143.272329][T15148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.329791][T29373] Buffer I/O error on dev loop9, logical block 0, async page read [ 2143.338651][T29373] Dev loop9: unable to read RDB block 0 [ 2143.345134][T29373] loop9: unable to read partition table [ 2143.351116][T29373] loop9: partition table beyond EOD, truncated [ 2143.357341][T29373] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2143.357341][T29373] ) failed (rc=-5) [ 2143.981173][T15148] usb 6-1: usb_control_msg returned -32 [ 2143.988186][T15148] usbtmc 6-1:16.0: can't read capabilities [ 2144.015430][T18727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.097281][ T5838] Bluetooth: hci1: command tx timeout [ 2144.253423][T29387] loop3: detected capacity change from 0 to 2048 [ 2144.333649][T29387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2144.362713][T18727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.394953][T29387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2144.455491][T29393] loop4: detected capacity change from 0 to 512 [ 2144.459643][T29351] chnl_net:caif_netlink_parms(): no params data found [ 2144.498878][T29393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2144.535001][T18727] bond0: (slave netdevsim0): Releasing backup interface [ 2144.554948][T18727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.798794][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2144.818817][T29410] loop9: detected capacity change from 0 to 7 [ 2144.830052][T29410] ldm_validate_partition_table(): Disk read failed. [ 2144.837434][T29410] Dev loop9: unable to read RDB block 0 [ 2144.843449][T29410] loop9: unable to read partition table [ 2144.849596][T29410] loop9: partition table beyond EOD, truncated [ 2144.855952][T29410] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2144.855952][T29410] ) failed (rc=-5) [ 2144.856477][T29351] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.918561][T29351] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.938040][T29351] bridge_slave_0: entered allmulticast mode [ 2144.956520][T29351] bridge_slave_0: entered promiscuous mode [ 2145.122716][T29417] loop4: detected capacity change from 0 to 128 [ 2145.133203][T29351] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.133342][T29351] bridge0: port 2(bridge_slave_1) entered disabled state [ 2145.133654][T29351] bridge_slave_1: entered allmulticast mode [ 2145.136155][T29351] bridge_slave_1: entered promiscuous mode [ 2145.170110][T29417] FAT-fs (loop4): Directory bread(block 32) failed [ 2145.217250][T29417] FAT-fs (loop4): Directory bread(block 33) failed [ 2145.217364][T29417] FAT-fs (loop4): Directory bread(block 34) failed [ 2145.217390][T29417] FAT-fs (loop4): Directory bread(block 35) failed [ 2145.217469][T29417] FAT-fs (loop4): Directory bread(block 36) failed [ 2145.217492][T29417] FAT-fs (loop4): Directory bread(block 37) failed [ 2145.217564][T29417] FAT-fs (loop4): Directory bread(block 38) failed [ 2145.217588][T29417] FAT-fs (loop4): Directory bread(block 39) failed [ 2145.217666][T29417] FAT-fs (loop4): Directory bread(block 40) failed [ 2145.217692][T29417] FAT-fs (loop4): Directory bread(block 41) failed [ 2145.637371][ T24] usb 6-1: USB disconnect, device number 41 [ 2146.177313][ T5838] Bluetooth: hci1: command tx timeout [ 2146.676739][T19820] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2146.856820][T19820] usb 6-1: Using ep0 maxpacket: 8 [ 2146.872882][T19820] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2146.903262][T19820] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2146.919344][T19820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2146.942730][T19820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2146.953733][T18727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2146.954130][T19820] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2146.990267][T19820] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2147.000760][T19820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.090806][T18727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2147.144048][T18727] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2147.194280][T18727] bond0 (unregistering): Released all slaves [ 2147.245610][T18727] bond1 (unregistering): Released all slaves [ 2147.259718][T19820] usb 6-1: usb_control_msg returned -32 [ 2147.274951][T19820] usbtmc 6-1:16.0: can't read capabilities [ 2147.632874][T18727] bond2 (unregistering): Released all slaves [ 2147.754781][T29351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2147.771801][T29351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2147.944940][T29451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6211'. [ 2148.119405][T29351] team0: Port device team_slave_0 added [ 2148.130634][T29453] netlink: 'syz.4.6211': attribute type 6 has an invalid length. [ 2148.238356][T29351] team0: Port device team_slave_1 added [ 2148.257409][ T5838] Bluetooth: hci1: command tx timeout [ 2148.308552][T29457] loop4: detected capacity change from 0 to 512 [ 2148.352373][T29457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2148.393436][T29457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2148.414847][T29457] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2148.429242][T18727] hsr_slave_0: left promiscuous mode [ 2148.435748][T18727] hsr_slave_1: left promiscuous mode [ 2148.457620][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2148.465002][T18727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2148.528302][T18727] veth1_macvtap: left promiscuous mode [ 2148.539721][T18727] veth0_macvtap: left promiscuous mode [ 2148.557601][T18727] veth1_vlan: left promiscuous mode [ 2148.565795][T18727] veth0_vlan: left promiscuous mode [ 2148.646428][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2149.489526][T23315] usb 6-1: USB disconnect, device number 42 [ 2149.801996][T18727] team0 (unregistering): Port device team_slave_1 removed [ 2149.867935][T18727] team0 (unregistering): Port device team_slave_0 removed [ 2149.981989][T29406] Set syz1 is full, maxelem 65536 reached [ 2150.012033][T29484] netlink: 'syz.5.6219': attribute type 4 has an invalid length. [ 2150.344939][ T5838] Bluetooth: hci1: command tx timeout [ 2150.653631][T29351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2150.664931][T29351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2150.706795][T29351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2150.808551][T29351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2150.846762][T29351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2150.877702][T29351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2151.067094][T29351] hsr_slave_0: entered promiscuous mode [ 2151.079372][T29351] hsr_slave_1: entered promiscuous mode [ 2151.108865][T29351] debugfs: 'hsr0' already exists in 'hsr' [ 2151.114637][T29351] Cannot create hsr debugfs directory [ 2151.803558][T29496] loop5: detected capacity change from 0 to 512 [ 2151.853593][T29496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2151.944276][T29496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2151.967735][T29496] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2151.987536][T29504] loop3: detected capacity change from 0 to 512 [ 2152.004804][T29496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2152.037371][T29504] EXT4-fs (loop3): 1 truncate cleaned up [ 2152.049754][T29504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2152.131978][T29507] fuse: Unknown parameter '0x0000000000000003' [ 2152.149911][T18727] IPVS: stop unused estimator thread 0... [ 2152.370402][T29512] loop5: detected capacity change from 0 to 1024 [ 2152.387792][T29512] EXT4-fs: inline encryption not supported [ 2152.459182][T29512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2152.857084][T29512] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.6230: Allocating blocks 385-513 which overlap fs metadata [ 2152.956848][T29511] EXT4-fs (loop5): pa ffff88807df230e8: logic 16, phys. 129, len 24 [ 2152.964953][T29511] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2153.075528][T28961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2153.604725][T29511] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2153.620476][T29511] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2153.620476][T29511] [ 2153.633319][T29511] EXT4-fs (loop5): Total free blocks count 0 [ 2153.641373][T29511] EXT4-fs (loop5): Free/Dirty block details [ 2153.650952][T29511] EXT4-fs (loop5): free_blocks=128 [ 2153.656107][T29511] EXT4-fs (loop5): dirty_blocks=0 [ 2153.661684][T29511] EXT4-fs (loop5): Block reservation details [ 2153.683762][T29511] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 2153.947175][T29351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2153.985156][T29351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2154.061507][T29351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2154.105074][T29351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2154.438081][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2154.438099][ T30] audit: type=1326 audit(1764175786.887:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2154.503099][T29351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2154.559232][ T30] audit: type=1326 audit(1764175786.917:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2154.596581][T29351] 8021q: adding VLAN 0 to HW filter on device team0 [ 2154.661514][T29539] loop5: detected capacity change from 0 to 8192 [ 2154.707665][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.714906][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2154.723691][ T30] audit: type=1326 audit(1764175786.917:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2154.755591][T29542] fuse: Unknown parameter '0x0000000000000003' [ 2154.799792][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.807020][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2154.827494][ T30] audit: type=1326 audit(1764175786.917:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2154.904696][ T30] audit: type=1326 audit(1764175786.917:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2155.000308][ T30] audit: type=1326 audit(1764175786.917:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2155.090083][ T30] audit: type=1326 audit(1764175786.917:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2155.123213][T29550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2155.129769][T29550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2155.141766][ T30] audit: type=1326 audit(1764175786.927:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2155.165849][T29550] vhci_hcd vhci_hcd.0: Device attached [ 2155.184111][T29552] vhci_hcd: connection closed [ 2155.184432][T18727] vhci_hcd vhci_hcd.3: stop threads [ 2155.200962][T18727] vhci_hcd vhci_hcd.3: release socket [ 2155.206374][T18727] vhci_hcd vhci_hcd.3: disconnect device [ 2155.208457][T29556] loop5: detected capacity change from 0 to 512 [ 2155.225533][ T30] audit: type=1326 audit(1764175786.927:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2155.263693][ T30] audit: type=1326 audit(1764175786.927:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29538 comm="syz.3.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2155.268418][T29556] EXT4-fs: Ignoring removed oldalloc option [ 2155.400846][T29556] EXT4-fs (loop5): 1 truncate cleaned up [ 2155.419757][T29556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2155.630950][T23146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2155.686174][T29351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2155.815702][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6248'. [ 2155.930968][T29351] veth0_vlan: entered promiscuous mode [ 2155.980878][T29351] veth1_vlan: entered promiscuous mode [ 2156.040492][T29575] loop5: detected capacity change from 0 to 1024 [ 2156.111427][T29575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2156.126328][T29351] veth0_macvtap: entered promiscuous mode [ 2156.142651][T29351] veth1_macvtap: entered promiscuous mode [ 2156.174304][T29351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2156.209824][T29351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2156.237976][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.247644][T29588] fuse: Unknown parameter 'fd0x0000000000000003' [ 2156.254556][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.274270][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.316490][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.559111][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.580804][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2156.741097][T18425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.781436][T18425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2156.799693][T29598] loop3: detected capacity change from 0 to 2048 [ 2156.854450][T29605] loop4: detected capacity change from 0 to 64 [ 2156.872380][T29598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 2156.884779][T23146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2156.895061][T23315] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 2156.946496][T23315] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2156.971317][T29598] EXT4-fs: Ignoring removed orlov option [ 2156.985087][T29598] EXT4-fs (loop3): stripe (18) is not aligned with cluster size (16), stripe is disabled [ 2157.020067][T29598] EXT4-fs (loop3): can't enable nombcache during remount [ 2157.089743][T28961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 2157.335194][T29623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6269'. [ 2157.351529][T29623] IPVS: Error connecting to the multicast addr [ 2157.650017][T29638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6275'. [ 2157.923382][T29649] loop5: detected capacity change from 0 to 512 [ 2157.942685][T29651] loop9: detected capacity change from 0 to 7 [ 2157.955861][T29649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2157.965720][T29651] buffer_io_error: 18 callbacks suppressed [ 2157.965738][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2157.983450][T29649] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2158.002431][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.016162][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.041928][T29649] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 2158.054105][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.075551][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.121893][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.163767][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.181364][T23146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2158.210853][T29651] ldm_validate_partition_table(): Disk read failed. [ 2158.230309][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.268073][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.287276][T29651] Buffer I/O error on dev loop9, logical block 0, async page read [ 2158.297813][T29651] Dev loop9: unable to read RDB block 0 [ 2158.306204][T29651] loop9: unable to read partition table [ 2158.340791][T29651] loop9: partition table beyond EOD, truncated [ 2158.366442][T29651] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2158.366442][T29651] ) failed (rc=-5) [ 2158.618434][T29674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6290'. [ 2158.668356][T29666] loop5: detected capacity change from 0 to 8192 [ 2158.790113][T29679] loop4: detected capacity change from 0 to 1024 [ 2158.820869][T29679] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 2158.861280][T29682] loop3: detected capacity change from 0 to 1024 [ 2158.868546][T29682] EXT4-fs: Ignoring removed bh option [ 2158.874072][T29682] EXT4-fs: inline encryption not supported [ 2158.889232][T29682] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2158.915883][T29682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 2158.934088][T29682] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.6295: lblock 2 mapped to illegal pblock 2 (length 1) [ 2159.005761][T29679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2159.050866][T29682] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.6295: lblock 0 mapped to illegal pblock 48 (length 1) [ 2159.111255][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2159.141772][T29682] EXT4-fs error (device loop3): ext4_acquire_dquot:6948: comm syz.3.6295: Failed to acquire dquot type 0 [ 2159.229289][T29682] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6316: Corrupt filesystem [ 2159.255207][T29695] loop9: detected capacity change from 0 to 7 [ 2159.267190][T29682] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.6295: mark_inode_dirty error [ 2159.285503][T29695] ldm_validate_partition_table(): Disk read failed. [ 2159.287020][T29682] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 2159.313167][T29695] Dev loop9: unable to read RDB block 0 [ 2159.329800][T29695] loop9: unable to read partition table [ 2159.346821][T29682] EXT4-fs (loop3): 1 orphan inode deleted [ 2159.355650][T29682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2159.366526][T29695] loop9: partition table beyond EOD, truncated [ 2159.388084][ T3518] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 2159.412747][T29695] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2159.412747][T29695] ) failed (rc=-5) [ 2159.470702][ T3518] __quota_error: 49 callbacks suppressed [ 2159.470721][ T3518] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 2159.535643][ T3518] EXT4-fs error (device loop3): ext4_release_dquot:6984: comm kworker/u8:12: Failed to release dquot type 0 [ 2159.556811][T29682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2159.612515][T29682] EXT4-fs error (device loop3): __ext4_get_inode_loc:4836: comm syz.3.6295: Invalid inode table block 1 in block_group 0 [ 2159.627912][T29682] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6316: Corrupt filesystem [ 2159.640394][T29682] EXT4-fs error (device loop3): ext4_quota_off:7232: inode #3: comm syz.3.6295: mark_inode_dirty error [ 2159.732974][T29707] loop2: detected capacity change from 0 to 128 [ 2159.739675][T29707] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 2159.817465][T29709] loop4: detected capacity change from 0 to 512 [ 2159.830305][T29709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2159.855629][T29709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2159.879049][T29709] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2159.900274][T29709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2160.227264][T15005] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2160.303517][T29729] loop9: detected capacity change from 0 to 7 [ 2160.304523][T29729] ldm_validate_partition_table(): Disk read failed. [ 2160.304865][T29729] Dev loop9: unable to read RDB block 0 [ 2160.305111][T29729] loop9: unable to read partition table [ 2160.332620][T29729] loop9: partition table beyond EOD, truncated [ 2160.332646][T29729] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2160.332646][T29729] ) failed (rc=-5) [ 2160.351548][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.351623][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.380467][T15005] usb 6-1: Using ep0 maxpacket: 16 [ 2160.413246][T15005] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.413313][T15005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2160.413344][T15005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2160.413368][T15005] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2160.413393][T15005] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2160.419128][T15005] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2160.419160][T15005] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2160.419183][T15005] usb 6-1: Manufacturer: syz [ 2160.421881][T15005] usb 6-1: config 0 descriptor?? [ 2160.424330][T29727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2160.435398][T29727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2160.839234][T29715] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2160.889474][T29715] EXT4-fs error (device loop5): ext4_iget_extra_inode:5079: inode #12: comm syz.5.6308: corrupted in-inode xattr: invalid ea_ino [ 2161.733207][T29351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2161.885522][T29715] EXT4-fs (loop5): Remounting filesystem read-only [ 2161.915396][T29715] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2162.077581][T29750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6323'. [ 2162.108048][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6323'. [ 2162.212484][T29751] set_capacity_and_notify: 2 callbacks suppressed [ 2162.212503][T29751] loop4: detected capacity change from 0 to 512 [ 2162.300431][T29751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2162.354092][T29755] loop2: detected capacity change from 0 to 1024 [ 2162.360803][T29751] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2162.400424][T29755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2162.450631][T29755] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2162.515133][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2162.533450][T29755] EXT4-fs error (device loop2): ext4_map_blocks:819: inode #15: comm syz.2.6318: lblock 0 mapped to illegal pblock 0 (length 1) [ 2162.559497][T29755] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 2162.572178][ T30] audit: type=1800 audit(1764175794.967:4559): pid=29755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6318" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2162.606463][T29755] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2162.606463][T29755] [ 2162.841148][T29351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2162.968366][T29770] loop9: detected capacity change from 0 to 7 [ 2162.975324][T29770] buffer_io_error: 32 callbacks suppressed [ 2162.975342][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.975483][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.975607][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.975725][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.975860][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.975990][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.976107][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.976175][T29770] ldm_validate_partition_table(): Disk read failed. [ 2162.976245][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.976343][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.976468][T29770] Buffer I/O error on dev loop9, logical block 0, async page read [ 2162.976768][T29770] Dev loop9: unable to read RDB block 0 [ 2162.977087][T29770] loop9: unable to read partition table [ 2162.977321][T29770] loop9: partition table beyond EOD, truncated [ 2162.977342][T29770] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2162.977342][T29770] ) failed (rc=-5) [ 2163.083365][T23146] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 2163.130675][T15005] rc_core: IR keymap rc-hauppauge not found [ 2163.130694][T15005] Registered IR keymap rc-empty [ 2163.130831][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.147075][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.149232][T29775] loop5: detected capacity change from 0 to 512 [ 2163.153752][T29775] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 2163.167830][T15005] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2163.170082][T15005] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input111 [ 2163.192142][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.207669][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.226879][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.246921][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.276178][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.294503][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.308803][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.332928][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.358725][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.376842][T15005] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.398947][T15005] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2163.398974][T15005] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2163.414746][T15005] usb 6-1: USB disconnect, device number 43 [ 2163.556185][T29794] loop5: detected capacity change from 0 to 128 [ 2163.571572][T29795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6335'. [ 2163.621091][ T30] audit: type=1326 audit(1764175796.047:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2163.621140][ T30] audit: type=1326 audit(1764175796.047:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2163.672160][ T30] audit: type=1326 audit(1764175796.047:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2163.700617][ T30] audit: type=1326 audit(1764175796.117:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc12438f783 code=0x7ffc0000 [ 2163.700667][ T30] audit: type=1326 audit(1764175796.117:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc12438f783 code=0x7ffc0000 [ 2163.700710][ T30] audit: type=1326 audit(1764175796.117:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2163.700748][ T30] audit: type=1326 audit(1764175796.117:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2163.742272][ T30] audit: type=1326 audit(1764175796.187:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29792 comm="syz.5.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2163.889139][T29794] netlink: 'syz.5.6334': attribute type 6 has an invalid length. [ 2164.057431][T29810] autofs4:pid:29810:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 2164.204250][T29818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6345'. [ 2164.276281][T29823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6347'. [ 2164.355922][T29825] loop4: detected capacity change from 0 to 256 [ 2164.413695][T29825] vfat: Unknown parameter '' [ 2164.440482][T29827] loop3: detected capacity change from 0 to 1024 [ 2164.470840][T29827] EXT4-fs: inline encryption not supported [ 2164.534086][T29827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2164.601156][T29827] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.6348: Allocating blocks 385-513 which overlap fs metadata [ 2164.623293][T29840] loop5: detected capacity change from 0 to 1024 [ 2164.634256][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 2164.634271][ T30] audit: type=1326 audit(1764175797.077:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.677009][ T30] audit: type=1326 audit(1764175797.077:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.701303][ T30] audit: type=1326 audit(1764175797.077:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.704191][T29841] EXT4-fs (loop3): pa ffff888055a851d0: logic 16, phys. 129, len 24 [ 2164.732070][T29841] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2164.742098][ T30] audit: type=1326 audit(1764175797.077:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.742147][ T30] audit: type=1326 audit(1764175797.077:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.742198][ T30] audit: type=1326 audit(1764175797.077:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.742257][ T30] audit: type=1326 audit(1764175797.077:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.742301][ T30] audit: type=1326 audit(1764175797.077:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.742346][ T30] audit: type=1326 audit(1764175797.077:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.742395][ T30] audit: type=1326 audit(1764175797.077:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.1.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d3d8f749 code=0x7ffc0000 [ 2164.911771][T29840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2164.973445][T29841] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2165.007532][T29841] EXT4-fs (loop3): This should not happen!! Data will be lost [ 2165.007532][T29841] [ 2165.019498][T29841] EXT4-fs (loop3): Total free blocks count 0 [ 2165.025602][T29841] EXT4-fs (loop3): Free/Dirty block details [ 2165.032553][T29841] EXT4-fs (loop3): free_blocks=128 [ 2165.038042][T29841] EXT4-fs (loop3): dirty_blocks=0 [ 2165.043356][T29841] EXT4-fs (loop3): Block reservation details [ 2165.049479][T29841] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 2165.180854][T29852] syzkaller0: entered promiscuous mode [ 2165.194242][T29852] syzkaller0: entered allmulticast mode [ 2165.305648][T23146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2166.079177][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6377'. [ 2166.106191][T29892] bridge_slave_1: left allmulticast mode [ 2166.119487][T29892] bridge_slave_1: left promiscuous mode [ 2166.142845][T29892] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.189515][T29892] bridge_slave_0: left allmulticast mode [ 2166.196477][T29892] bridge_slave_0: left promiscuous mode [ 2166.202652][T29892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2168.036135][T29924] loop3: detected capacity change from 0 to 256 [ 2168.096397][T29924] FAT-fs (loop3): Directory bread(block 64) failed [ 2168.096432][T29924] FAT-fs (loop3): Directory bread(block 65) failed [ 2168.096511][T29924] FAT-fs (loop3): Directory bread(block 66) failed [ 2168.096535][T29924] FAT-fs (loop3): Directory bread(block 67) failed [ 2168.097282][T29924] FAT-fs (loop3): Directory bread(block 68) failed [ 2168.097312][T29924] FAT-fs (loop3): Directory bread(block 69) failed [ 2168.097394][T29924] FAT-fs (loop3): Directory bread(block 70) failed [ 2168.097418][T29924] FAT-fs (loop3): Directory bread(block 71) failed [ 2168.097492][T29924] FAT-fs (loop3): Directory bread(block 72) failed [ 2168.097515][T29924] FAT-fs (loop3): Directory bread(block 73) failed [ 2168.631203][T29931] netlink: 'syz.2.6394': attribute type 10 has an invalid length. [ 2168.645738][T29931] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2168.764189][T29931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2170.485926][T29955] loop2: detected capacity change from 0 to 256 [ 2170.562832][T29955] FAT-fs (loop2): Directory bread(block 64) failed [ 2170.591008][T29955] FAT-fs (loop2): Directory bread(block 65) failed [ 2170.611291][T29955] FAT-fs (loop2): Directory bread(block 66) failed [ 2170.637611][T29955] FAT-fs (loop2): Directory bread(block 67) failed [ 2170.646800][T29955] FAT-fs (loop2): Directory bread(block 68) failed [ 2170.662001][T29955] FAT-fs (loop2): Directory bread(block 69) failed [ 2170.686909][T29955] FAT-fs (loop2): Directory bread(block 70) failed [ 2170.697807][T29957] ip6gre1: entered allmulticast mode [ 2170.713904][T29955] FAT-fs (loop2): Directory bread(block 71) failed [ 2170.722348][T29955] FAT-fs (loop2): Directory bread(block 72) failed [ 2170.740406][T29955] FAT-fs (loop2): Directory bread(block 73) failed [ 2170.895852][T29960] netlink: 'syz.4.6407': attribute type 10 has an invalid length. [ 2170.953691][T29960] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2171.092693][T29961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2171.233130][T29966] loop3: detected capacity change from 0 to 512 [ 2171.297673][T29966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2171.336854][T29966] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2171.357953][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2171.357969][ T30] audit: type=1326 audit(1764175803.807:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29970 comm="syz.4.6409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x0 [ 2171.419297][ T30] audit: type=1326 audit(1764175803.867:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29970 comm="syz.4.6409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f610e58f749 code=0x0 [ 2171.511449][T29975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6410'. [ 2171.732488][T28961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2171.741637][T29979] bridge0: port 3(vlan2) entered blocking state [ 2171.786942][T29979] bridge0: port 3(vlan2) entered disabled state [ 2171.797430][T29979] vlan2: entered allmulticast mode [ 2171.802596][T29979] bridge0: entered allmulticast mode [ 2171.841203][T29979] vlan2: left allmulticast mode [ 2171.846104][T29979] bridge0: left allmulticast mode [ 2172.226943][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6415'. [ 2172.379752][T29993] loop3: detected capacity change from 0 to 512 [ 2172.670140][T29993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2172.740184][T29993] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2172.877208][T29993] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 2173.012639][T28961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2173.772660][T29898] Set syz1 is full, maxelem 65536 reached [ 2173.791803][T30003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6421'. [ 2174.098602][T30011] bridge0: port 3(syz_tun) entered blocking state [ 2174.106444][T30011] bridge0: port 3(syz_tun) entered disabled state [ 2174.122044][T30011] syz_tun: entered allmulticast mode [ 2174.146572][T30011] syz_tun: entered promiscuous mode [ 2174.155563][T30011] bridge0: port 3(syz_tun) entered blocking state [ 2174.162400][T30011] bridge0: port 3(syz_tun) entered forwarding state [ 2175.977413][T29068] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2176.159597][T29068] usb 6-1: Using ep0 maxpacket: 16 [ 2176.172516][T29068] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.210802][T29068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2176.242805][T29068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2176.253078][T29068] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2176.285218][T29068] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2176.315175][T29068] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2176.333584][T29068] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2176.357479][T29068] usb 6-1: Manufacturer: syz [ 2176.378565][T29068] usb 6-1: config 0 descriptor?? [ 2176.617285][T30021] loop5: detected capacity change from 0 to 512 [ 2176.663527][T30021] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2177.397877][T30021] EXT4-fs error (device loop5): ext4_iget_extra_inode:5079: inode #12: comm syz.5.6429: corrupted in-inode xattr: invalid ea_ino [ 2177.499791][T30021] EXT4-fs (loop5): Remounting filesystem read-only [ 2177.519067][T30021] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2177.579036][T30042] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2177.600125][T30042] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2177.612605][T30042] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2177.867383][T30063] loop3: detected capacity change from 0 to 512 [ 2177.891516][T30063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2177.942826][T30063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2177.956228][T30063] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2178.149412][T30068] loop2: detected capacity change from 0 to 1024 [ 2178.177761][T30068] EXT4-fs: inline encryption not supported [ 2178.213537][T30068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2178.286754][T30068] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6445: Allocating blocks 385-513 which overlap fs metadata [ 2178.336391][T30068] EXT4-fs (loop2): pa ffff888055b2f1d0: logic 16, phys. 129, len 24 [ 2178.345008][T30068] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2178.418650][T30068] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2178.432327][ T30] audit: type=1326 audit(1764175810.887:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2178.450098][T30068] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2178.450098][T30068] [ 2178.480917][T30068] EXT4-fs (loop2): Total free blocks count 0 [ 2178.489929][T30068] EXT4-fs (loop2): Free/Dirty block details [ 2178.495991][T30068] EXT4-fs (loop2): free_blocks=128 [ 2178.508932][ T30] audit: type=1326 audit(1764175810.887:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2178.510087][T30068] EXT4-fs (loop2): dirty_blocks=0 [ 2178.640815][T30068] EXT4-fs (loop2): Block reservation details [ 2179.376453][T30068] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 2179.448932][T23146] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 2179.494523][ T30] audit: type=1326 audit(1764175810.927:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2179.517369][ T30] audit: type=1326 audit(1764175810.927:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.202886][ T30] audit: type=1326 audit(1764175810.927:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.245789][ T30] audit: type=1326 audit(1764175810.927:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.276216][ T30] audit: type=1326 audit(1764175810.927:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.305048][ T30] audit: type=1326 audit(1764175810.927:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.329065][ T30] audit: type=1326 audit(1764175810.927:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.352519][ T30] audit: type=1326 audit(1764175810.927:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.4.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2180.390210][T28961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2180.513357][T29068] rc_core: IR keymap rc-hauppauge not found [ 2180.545442][T29068] Registered IR keymap rc-empty [ 2180.575218][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.605701][T30102] loop5: detected capacity change from 0 to 512 [ 2180.636995][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.647686][T30102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2180.677937][T29068] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2180.704647][T30102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2180.728906][T29068] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input112 [ 2180.774107][T30102] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2180.795618][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.814097][T30102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2180.871209][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.879413][T30110] loop3: detected capacity change from 0 to 8192 [ 2180.910482][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.950518][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.988797][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.006930][T29744] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2181.039453][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.068580][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.106823][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.146805][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.166836][T29068] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.177799][T29744] usb 5-1: Using ep0 maxpacket: 16 [ 2181.185974][T29744] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.201038][T29068] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2181.210976][T29744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2181.222844][T29068] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2181.237032][T29744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2181.278919][T29068] usb 6-1: USB disconnect, device number 44 [ 2181.293467][T29744] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2181.339027][T29744] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2181.356055][T29744] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2181.412573][T29744] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2181.423400][T29744] usb 5-1: Manufacturer: syz [ 2181.443987][T30139] loop2: detected capacity change from 0 to 4096 [ 2181.445331][T29744] usb 5-1: config 0 descriptor?? [ 2181.528826][T30139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2181.735267][T30145] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6471'. [ 2181.902355][T30114] loop4: detected capacity change from 0 to 512 [ 2181.976713][T29744] rc_core: IR keymap rc-hauppauge not found [ 2181.977732][T30114] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2181.982677][T29744] Registered IR keymap rc-empty [ 2182.024584][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.064998][T30114] EXT4-fs error (device loop4): ext4_iget_extra_inode:5079: inode #12: comm syz.4.6461: corrupted in-inode xattr: invalid ea_ino [ 2182.076923][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.107213][T30114] EXT4-fs (loop4): Remounting filesystem read-only [ 2182.156414][T30114] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2182.160313][T30153] loop5: detected capacity change from 0 to 512 [ 2182.180416][T30153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2182.189584][T29744] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2182.235113][T29744] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input113 [ 2182.273135][T30153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2182.290647][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.308701][T30153] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2182.323994][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.335756][T30153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2182.359087][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.386769][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.407079][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.431990][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.468617][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.487462][T30145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2182.497669][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.527011][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.535134][T30145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.547042][T29744] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2182.561690][T30145] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 2182.578566][T30145] bond0 (unregistering): Released all slaves [ 2182.588465][T29744] mceusb 5-1:0.0: Registered   with mce emulator interface version 1 [ 2182.599109][T29744] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2182.619289][T29744] usb 5-1: USB disconnect, device number 45 [ 2182.761943][T28563] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 2182.870895][T29351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2183.012731][T30169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6482'. [ 2183.961869][T30162] infiniband syz!: set active [ 2183.966947][T30162] infiniband syz!: added team_slave_0 [ 2183.976347][T30162] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 2183.980494][T30162] infiniband syz!: Couldn't open port 1 [ 2184.019317][T30162] RDS/IB: syz!: added [ 2184.024215][T30162] smc: adding ib device syz! with port count 1 [ 2184.030797][T30162] smc: ib device syz! port 1 has no pnetid [ 2184.145371][T30182] loop2: detected capacity change from 0 to 1024 [ 2184.153405][T30182] EXT4-fs: inline encryption not supported [ 2184.199023][T30182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2184.236358][T30182] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6484: Allocating blocks 385-513 which overlap fs metadata [ 2184.307613][T30182] EXT4-fs (loop2): pa ffff88806590d658: logic 16, phys. 129, len 24 [ 2184.315660][T30182] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2184.359438][T30182] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2184.392621][T30182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2184.392621][T30182] [ 2184.424296][T30182] EXT4-fs (loop2): Total free blocks count 0 [ 2184.446757][T30182] EXT4-fs (loop2): Free/Dirty block details [ 2184.468633][T30182] EXT4-fs (loop2): free_blocks=128 [ 2184.483767][T30182] EXT4-fs (loop2): dirty_blocks=0 [ 2184.508134][T30182] EXT4-fs (loop2): Block reservation details [ 2184.527890][T30182] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 2185.298782][T30196] netlink: 'syz.2.6488': attribute type 12 has an invalid length. [ 2186.235886][T30206] netlink: 'syz.2.6492': attribute type 10 has an invalid length. [ 2186.326779][T23992] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2186.467668][T30208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2186.516941][T23992] usb 2-1: Using ep0 maxpacket: 16 [ 2186.538197][T23992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2186.591666][T23992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2186.636668][T23992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2186.676757][T23992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2186.718388][T23992] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2186.759150][T23992] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2186.788509][T23992] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2186.818916][T23992] usb 2-1: Manufacturer: syz [ 2186.851001][T23992] usb 2-1: config 0 descriptor?? [ 2187.045436][T30213] loop2: detected capacity change from 0 to 8192 [ 2187.186717][T23992] rc_core: IR keymap rc-hauppauge not found [ 2187.192697][T23992] Registered IR keymap rc-empty [ 2187.215850][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.256906][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.322715][T23992] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2187.380422][T23992] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input114 [ 2187.431728][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.466730][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.526854][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.546971][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.580416][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.606923][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.626781][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.646854][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.666872][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.696964][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2187.730840][T23992] mceusb 2-1:0.0: Registered   with mce emulator interface version 1 [ 2187.730857][T23992] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2187.754135][T23992] usb 2-1: USB disconnect, device number 77 [ 2189.813508][T30258] loop3: detected capacity change from 0 to 512 [ 2189.889093][T30258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2189.932125][T30258] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2189.946819][T23992] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2190.055366][T30265] program syz.2.6512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2190.146864][T23992] usb 2-1: Using ep0 maxpacket: 16 [ 2190.190196][T23992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2190.222617][T23992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2190.255491][T28961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2190.289289][T23992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2190.322034][T23992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2190.366684][T23992] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2190.447965][T23992] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2190.495545][T23992] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2190.536859][T23992] usb 2-1: Manufacturer: syz [ 2190.545528][T23992] usb 2-1: config 0 descriptor?? [ 2191.094566][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2191.094586][ T30] audit: type=1326 audit(1764175823.537:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2191.107172][T23992] rc_core: IR keymap rc-hauppauge not found [ 2191.602916][T23992] Registered IR keymap rc-empty [ 2191.667769][ T30] audit: type=1326 audit(1764175823.537:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2191.693408][ T30] audit: type=1326 audit(1764175823.737:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2191.724756][ T30] audit: type=1326 audit(1764175823.737:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2191.754778][ T30] audit: type=1326 audit(1764175823.737:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2191.792924][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2191.847176][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2191.886594][T23992] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2191.899479][ T30] audit: type=1326 audit(1764175823.737:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2191.965933][T23992] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input115 [ 2191.995212][ T30] audit: type=1326 audit(1764175823.747:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2192.034338][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.059058][T30286] loop3: detected capacity change from 0 to 256 [ 2192.068989][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.084363][ T30] audit: type=1326 audit(1764175823.747:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2192.111482][T30286] FAT-fs (loop3): bogus number of FAT sectors [ 2192.126726][T30286] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2192.132193][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.154566][ T30] audit: type=1326 audit(1764175823.747:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2192.187290][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.206934][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.221972][ T30] audit: type=1326 audit(1764175823.747:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30281 comm="syz.4.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2192.247191][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.275346][T30295] loop4: detected capacity change from 0 to 8192 [ 2192.304287][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.347162][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.379061][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.407207][T23992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2192.505362][T23992] mceusb 2-1:0.0: Registered   with mce emulator interface version 1 [ 2192.529837][T23992] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2192.563831][T23992] usb 2-1: USB disconnect, device number 78 [ 2192.735923][T30313] netlink: 'syz.3.6531': attribute type 10 has an invalid length. [ 2192.773839][T30313] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2192.897479][T30313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2193.159731][T30318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6532'. [ 2193.354861][T30320] loop3: detected capacity change from 0 to 512 [ 2193.378847][T30320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2193.468497][T30320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2193.512943][T30320] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2193.580949][T30320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2194.166208][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6544'. [ 2195.090309][T30355] netlink: 'syz.3.6545': attribute type 10 has an invalid length. [ 2195.141009][T30355] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2195.497750][T30361] loop4: detected capacity change from 0 to 8192 [ 2195.829461][T30379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6555'. [ 2196.075569][T30389] loop2: detected capacity change from 0 to 2048 [ 2196.119260][T30389] loop2: p1 < > p4 [ 2196.128125][T30389] loop2: p4 size 8388608 extends beyond EOD, truncated [ 2196.494388][T30399] loop2: detected capacity change from 0 to 8192 [ 2196.720281][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 2196.720299][ T30] audit: type=1326 audit(1764175829.167:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30402 comm="syz.4.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2196.721847][ T30] audit: type=1326 audit(1764175829.167:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30402 comm="syz.4.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2196.722084][ T30] audit: type=1326 audit(1764175829.167:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30402 comm="syz.4.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2196.856932][T30407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6568'. [ 2196.905972][T30413] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 2197.303147][T30427] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 2197.311795][T30427] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 2197.325167][T30427] tipc: Started in network mode [ 2197.330222][T30427] tipc: Node identity 080211000001, cluster identity 4711 [ 2197.349655][T30427] tipc: Enabled bearer , priority 0 [ 2197.448140][T30431] unsupported nla_type 52263 [ 2197.515307][T30436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6579'. [ 2197.693328][T30442] loop5: detected capacity change from 0 to 256 [ 2197.725564][T30445] program syz.1.6584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2197.736105][T30442] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2197.753033][T30442] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2197.766323][T30442] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2197.781377][T30442] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2197.787306][ T30] audit: type=1800 audit(1764175830.227:4804): pid=30442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6583" name="file1" dev="loop5" ino=1048744 res=0 errno=0 [ 2198.133209][T30463] tipc: Enabling of bearer rejected, failed to enable media [ 2198.467109][T29068] tipc: Node number set to 134418688 [ 2198.817114][T30479] program syz.2.6597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2198.842913][T30481] loop4: detected capacity change from 0 to 512 [ 2198.861538][T30481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2198.949109][T30481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2198.968760][T30481] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2199.530365][T30500] loop5: detected capacity change from 0 to 512 [ 2199.564354][T30500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2199.611523][T30500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2199.646304][T30500] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2199.676599][T30500] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2200.560741][T30525] loop2: detected capacity change from 0 to 512 [ 2200.589083][T30525] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2200.737393][T30528] syzkaller0: entered promiscuous mode [ 2200.740397][T30529] loop5: detected capacity change from 0 to 1024 [ 2200.756813][T30528] syzkaller0: entered allmulticast mode [ 2200.760696][T30529] EXT4-fs: inline encryption not supported [ 2200.788479][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2200.854222][T30529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2200.873296][T30529] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.6616: Allocating blocks 385-513 which overlap fs metadata [ 2200.914641][T30529] EXT4-fs (loop5): pa ffff88806590d910: logic 16, phys. 129, len 24 [ 2200.923484][T30529] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2200.939641][T30529] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2200.952771][T30529] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2200.952771][T30529] [ 2200.962955][T30529] EXT4-fs (loop5): Total free blocks count 0 [ 2200.969083][T30529] EXT4-fs (loop5): Free/Dirty block details [ 2200.975129][T30529] EXT4-fs (loop5): free_blocks=128 [ 2200.980722][T30529] EXT4-fs (loop5): dirty_blocks=0 [ 2200.985861][T30529] EXT4-fs (loop5): Block reservation details [ 2200.992004][T30529] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 2201.220257][T30545] syz.5.6621 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2201.391847][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6626'. [ 2202.873175][ T30] audit: type=1326 audit(1764175835.317:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30588 comm="syz.5.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2202.979399][ T30] audit: type=1326 audit(1764175835.347:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30588 comm="syz.5.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2203.056396][ T30] audit: type=1326 audit(1764175835.347:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30588 comm="syz.5.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2203.136887][ T30] audit: type=1326 audit(1764175835.347:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30588 comm="syz.5.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2203.198785][T30596] netlink: 'syz.5.6645': attribute type 10 has an invalid length. [ 2203.341781][T30597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2204.562077][T30618] serio: Serial port ptm0 [ 2204.711886][ T30] audit: type=1107 audit(1764175837.157:4809): pid=30623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2204.925625][T30626] loop4: detected capacity change from 0 to 8192 [ 2205.094160][T30631] netlink: 'syz.5.6660': attribute type 10 has an invalid length. [ 2205.165282][T30631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2205.864364][ T30] audit: type=1326 audit(1764175838.307:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30653 comm="syz.4.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2205.891214][ T30] audit: type=1326 audit(1764175838.337:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30653 comm="syz.4.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2205.916116][ T30] audit: type=1326 audit(1764175838.337:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30653 comm="syz.4.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2205.948750][ T30] audit: type=1326 audit(1764175838.337:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30653 comm="syz.4.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2205.976315][ T30] audit: type=1326 audit(1764175838.337:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30653 comm="syz.4.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2207.040804][T30662] netlink: 'syz.5.6674': attribute type 10 has an invalid length. [ 2207.072511][T30662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2207.471448][T30673] syzkaller1: entered promiscuous mode [ 2207.485783][T30673] syzkaller1: entered allmulticast mode [ 2208.261314][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2208.261331][ T30] audit: type=1326 audit(1764175840.707:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.297237][ T30] audit: type=1326 audit(1764175840.747:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.406776][ T30] audit: type=1326 audit(1764175840.747:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.526745][ T30] audit: type=1326 audit(1764175840.807:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.583977][ T30] audit: type=1326 audit(1764175840.807:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.614386][ T30] audit: type=1326 audit(1764175840.807:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.727089][T30696] netlink: 'syz.5.6688': attribute type 10 has an invalid length. [ 2208.746703][ T30] audit: type=1326 audit(1764175840.807:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2208.746749][ T30] audit: type=1326 audit(1764175840.807:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x0 [ 2208.746790][ T30] audit: type=1326 audit(1764175840.857:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30681 comm="syz.2.6684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f4fd578f749 code=0x0 [ 2208.827061][T30696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2209.055135][T30708] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2209.282201][T30711] loop5: detected capacity change from 0 to 2048 [ 2209.339451][T30711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2209.339560][T30711] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2209.606101][T30716] syzkaller1: entered promiscuous mode [ 2209.629354][T30716] syzkaller1: entered allmulticast mode [ 2209.909588][T30721] loop4: detected capacity change from 0 to 1024 [ 2209.938009][T30721] EXT4-fs: inline encryption not supported [ 2209.991811][T30721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2210.058272][T30721] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6696: Allocating blocks 385-513 which overlap fs metadata [ 2210.202127][T30731] EXT4-fs (loop4): pa ffff888055b2f3a0: logic 16, phys. 129, len 24 [ 2210.210530][T30731] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2210.241846][T14149] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 2210.340238][T30731] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2210.365275][T14149] EXT4-fs (loop5): Remounting filesystem read-only [ 2210.372010][T30731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2210.372010][T30731] [ 2210.381914][T30731] EXT4-fs (loop4): Total free blocks count 0 [ 2210.388037][T30731] EXT4-fs (loop4): Free/Dirty block details [ 2210.394088][T30731] EXT4-fs (loop4): free_blocks=128 [ 2210.399611][T30731] EXT4-fs (loop4): dirty_blocks=0 [ 2210.404805][T30731] EXT4-fs (loop4): Block reservation details [ 2210.411075][T30731] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 2210.424001][ T3518] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2210.743983][T23146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2211.378355][T30757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6710'. [ 2211.468653][ T30] audit: type=1326 audit(1764175843.917:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30758 comm="syz.3.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2211.621513][T30766] loop2: detected capacity change from 0 to 256 [ 2212.626489][T30782] netlink: 'syz.5.6720': attribute type 10 has an invalid length. [ 2212.729121][T30782] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2212.837038][T30785] tipc: Started in network mode [ 2212.842163][T30785] tipc: Node identity feb2717c389, cluster identity 4711 [ 2212.852519][T30785] tipc: Enabled bearer , priority 0 [ 2212.865775][T30787] syzkaller0: entered promiscuous mode [ 2212.873321][T30787] syzkaller0: entered allmulticast mode [ 2212.892737][T30792] syzkaller1: entered promiscuous mode [ 2212.898487][T30792] syzkaller1: entered allmulticast mode [ 2212.964162][T30785] tipc: Resetting bearer [ 2212.972645][T30783] tipc: Resetting bearer [ 2213.012998][T30783] tipc: Disabling bearer [ 2213.251671][T30800] loop4: detected capacity change from 0 to 512 [ 2213.268243][T30800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2213.352404][T30806] loop5: detected capacity change from 0 to 256 [ 2213.369169][T30800] EXT4-fs (loop4): 1 truncate cleaned up [ 2213.376545][T30800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2213.522855][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6729'. [ 2213.540985][T30808] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2213.744363][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2213.979620][T30822] netlink: 'syz.3.6735': attribute type 13 has an invalid length. [ 2213.996482][T30822] netlink: 'syz.3.6735': attribute type 17 has an invalid length. [ 2214.048600][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2214.048616][ T30] audit: type=1326 audit(1764175846.497:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.122148][ T30] audit: type=1326 audit(1764175846.527:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.187287][ T30] audit: type=1326 audit(1764175846.527:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.253125][ T30] audit: type=1326 audit(1764175846.527:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.291937][ T30] audit: type=1326 audit(1764175846.527:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.343607][ T30] audit: type=1326 audit(1764175846.527:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.371074][ T30] audit: type=1326 audit(1764175846.527:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.398988][ T30] audit: type=1326 audit(1764175846.527:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.432222][ T30] audit: type=1326 audit(1764175846.527:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.466346][ T30] audit: type=1326 audit(1764175846.527:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30826 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd578f749 code=0x7ffc0000 [ 2214.884141][T30839] loop5: detected capacity change from 0 to 256 [ 2214.894899][T30822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2214.960896][T30839] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2214.994551][T30839] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2215.005069][T30839] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 2215.074414][T30828] syzkaller1: entered promiscuous mode [ 2215.109096][T30828] syzkaller1: entered allmulticast mode [ 2215.357436][T30855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6746'. [ 2215.696729][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6747'. [ 2217.076921][T30886] syzkaller1: entered promiscuous mode [ 2217.082433][T30886] syzkaller1: entered allmulticast mode [ 2217.465368][T30905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6766'. [ 2217.853890][T30923] syzkaller1: entered promiscuous mode [ 2217.881411][T30923] syzkaller1: entered allmulticast mode [ 2217.962025][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2217.984555][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2217.999552][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2218.736711][T26258] Bluetooth: hci4: command 0x0406 tx timeout [ 2219.226823][T30928] infiniband syz2: set active [ 2219.231703][T18335] ip6_vti0 speed is unknown, defaulting to 1000 [ 2219.240268][T30928] infiniband syz2: added ip6_vti0 [ 2219.251730][T30928] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 2219.257407][T30928] infiniband syz2: Couldn't open port 1 [ 2220.253711][T30928] RDS/IB: syz2: added [ 2220.263819][T30928] smc: adding ib device syz2 with port count 1 [ 2220.446779][T30928] smc: ib device syz2 port 1 has no pnetid [ 2220.453021][T15148] ip6_vti0 speed is unknown, defaulting to 1000 [ 2220.477901][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2220.506437][T30942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6783'. [ 2220.617551][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 2220.617569][ T30] audit: type=1326 audit(1764175853.067:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2220.698755][ T30] audit: type=1326 audit(1764175853.097:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2220.758312][ T30] audit: type=1326 audit(1764175853.097:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2220.823258][ T30] audit: type=1326 audit(1764175853.097:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2220.897329][ T30] audit: type=1326 audit(1764175853.107:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2220.963542][ T30] audit: type=1326 audit(1764175853.117:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2221.000022][T30954] tipc: Enabled bearer , priority 10 [ 2221.020712][T30954] tipc: Enabled bearer , priority 0 [ 2221.036824][ T30] audit: type=1326 audit(1764175853.117:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2221.078763][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2221.090400][ T30] audit: type=1326 audit(1764175853.117:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2221.123092][ T30] audit: type=1326 audit(1764175853.117:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2221.206114][T30959] syzkaller1: entered promiscuous mode [ 2221.216336][T30959] syzkaller1: entered allmulticast mode [ 2221.230440][ T30] audit: type=1326 audit(1764175853.117:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30947 comm="syz.4.6786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610e58f749 code=0x7ffc0000 [ 2222.028675][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.044847][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.118954][T29068] tipc: Node number set to 3324146044 [ 2222.324276][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2222.555291][T30973] loop4: detected capacity change from 0 to 512 [ 2222.591865][T30973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2222.671660][T30973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2222.685832][T30973] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2222.989757][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2223.310601][T30994] syzkaller1: entered promiscuous mode [ 2223.321359][T30994] syzkaller1: entered allmulticast mode [ 2223.479939][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2223.555381][T30944] ip6_vti0 speed is unknown, defaulting to 1000 [ 2223.887423][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2223.997609][T31014] netlink: 'syz.2.6812': attribute type 13 has an invalid length. [ 2224.005464][T31014] netlink: 'syz.2.6812': attribute type 17 has an invalid length. [ 2224.230559][T31014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2224.281495][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2224.452816][T31022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6816'. [ 2224.462765][T31022] x_tables: ip_tables: udp match: only valid for protocol 17 [ 2224.554501][T31024] loop4: detected capacity change from 0 to 512 [ 2224.563845][T31024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2224.597851][T31024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2224.615612][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2224.627166][T31024] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2225.054266][T31036] netlink: 'syz.2.6820': attribute type 6 has an invalid length. [ 2225.138658][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2225.494646][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2225.574390][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2225.607838][T31043] loop4: detected capacity change from 0 to 512 [ 2225.623071][T31043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2225.652127][T31043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2225.653595][T31043] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2225.744326][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2225.855595][T31050] loop4: detected capacity change from 0 to 1024 [ 2225.864232][T31050] EXT4-fs: inline encryption not supported [ 2225.889750][T31050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2225.926505][T31050] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6826: Allocating blocks 385-513 which overlap fs metadata [ 2225.999006][T31050] EXT4-fs (loop4): pa ffff88806590d000: logic 16, phys. 129, len 24 [ 2226.007112][T31050] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 2226.041609][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2226.046041][T31050] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 2226.079322][T31050] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2226.079322][T31050] [ 2226.092559][T31050] EXT4-fs (loop4): Total free blocks count 0 [ 2226.098883][T31050] EXT4-fs (loop4): Free/Dirty block details [ 2226.105079][T31050] EXT4-fs (loop4): free_blocks=128 [ 2226.110434][T31050] EXT4-fs (loop4): dirty_blocks=0 [ 2226.115633][T31050] EXT4-fs (loop4): Block reservation details [ 2226.121843][T31050] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 2226.305010][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2226.623922][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 2226.679812][T31071] loop4: detected capacity change from 0 to 512 [ 2226.722133][T31071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2226.736061][T31071] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2226.763921][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2226.763938][ T30] audit: type=1800 audit(1764175859.207:4970): pid=31071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6832" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2226.851165][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2226.951524][T31076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6834'. [ 2227.038524][ T30] audit: type=1326 audit(1764175859.487:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.132833][ T30] audit: type=1326 audit(1764175859.507:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.220388][ T30] audit: type=1326 audit(1764175859.507:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.250647][ T30] audit: type=1326 audit(1764175859.507:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.324648][ T30] audit: type=1326 audit(1764175859.527:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.350965][ T30] audit: type=1326 audit(1764175859.527:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.377543][T31088] netlink: 'syz.2.6839': attribute type 10 has an invalid length. [ 2227.392358][ T30] audit: type=1326 audit(1764175859.527:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.428226][T31088] team0: Failed to send options change via netlink (err -105) [ 2227.445804][T31089] netlink: 'syz.2.6839': attribute type 10 has an invalid length. [ 2227.460269][T31088] team0: Port device dummy0 added [ 2227.475264][T31089] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2227.529793][ T30] audit: type=1326 audit(1764175859.527:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.571895][T31089] team0: Failed to send options change via netlink (err -105) [ 2227.579526][ T30] audit: type=1326 audit(1764175859.527:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31077 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdef8f749 code=0x7ffc0000 [ 2227.597916][T31089] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2228.299225][T31089] team0: Port device dummy0 removed [ 2228.815468][T31112] loop4: detected capacity change from 0 to 8192 [ 2228.938779][T31115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6848'. [ 2229.451488][T31129] bridge: RTM_NEWNEIGH with invalid ether address [ 2230.750077][T31167] netlink: 'syz.4.6869': attribute type 13 has an invalid length. [ 2230.758119][T31167] netlink: 'syz.4.6869': attribute type 17 has an invalid length. [ 2231.984913][T31184] binfmt_misc: register: failed to install interpreter file ./file2 [ 2232.181362][T31167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2232.245880][T31193] syzkaller0: entered promiscuous mode [ 2232.251589][T31193] syzkaller0: entered allmulticast mode [ 2232.358026][T31196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6878'. [ 2232.381356][T31196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6878'. [ 2233.337377][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 2233.337397][ T30] audit: type=1326 audit(1764175865.697:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2233.804595][ T30] audit: type=1326 audit(1764175865.707:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.100423][T26258] Bluetooth: hci2: command 0x0406 tx timeout [ 2234.183151][ T30] audit: type=1326 audit(1764175865.727:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.225982][ T30] audit: type=1326 audit(1764175865.727:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.266875][ T30] audit: type=1326 audit(1764175865.727:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.359155][ T30] audit: type=1326 audit(1764175865.727:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.444097][ T30] audit: type=1326 audit(1764175865.727:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.541662][ T30] audit: type=1326 audit(1764175865.727:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.613529][ T30] audit: type=1326 audit(1764175865.727:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.672328][ T30] audit: type=1326 audit(1764175865.727:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31220 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12438f749 code=0x7ffc0000 [ 2234.820569][T31233] loop4: detected capacity change from 0 to 512 [ 2234.848893][T31233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2234.891406][T31233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2234.939690][T31233] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2235.733881][T28563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2239.216893][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 2264.820514][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 2283.221425][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.233102][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2304.844957][T31261] netlink: 'syz.5.6895': attribute type 10 has an invalid length. [ 2304.893459][T31264] loop7: detected capacity change from 0 to 7 [ 2304.915533][ C1] blk_print_req_error: 138 callbacks suppressed [ 2304.915557][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2304.931017][ C1] buffer_io_error: 4 callbacks suppressed [ 2304.931033][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.949209][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2304.958413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2305.001633][T31261] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2305.009625][T31268] [ 2305.011974][T31268] ====================================================== [ 2305.018991][T31268] WARNING: possible circular locking dependency detected [ 2305.026028][T31268] syzkaller #0 Not tainted [ 2305.030443][T31268] ------------------------------------------------------ [ 2305.037465][T31268] syz.1.6896/31268 is trying to acquire lock: [ 2305.043530][T31268] ffff88801cab0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 2305.053941][T31268] [ 2305.053941][T31268] but task is already holding lock: [ 2305.061295][T31268] ffff888141be62c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 2305.071127][T31268] [ 2305.071127][T31268] which lock already depends on the new lock. [ 2305.071127][T31268] [ 2305.081517][T31268] [ 2305.081517][T31268] the existing dependency chain (in reverse order) is: [ 2305.090532][T31268] [ 2305.090532][T31268] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 2305.099144][T31268] blk_alloc_queue+0x538/0x620 [ 2305.104520][T31268] __blk_mq_alloc_disk+0x15c/0x340 [ 2305.110176][T31268] loop_add+0x411/0xad0 [ 2305.114890][T31268] loop_init+0xd9/0x170 [ 2305.119564][T31268] do_one_initcall+0x1fb/0x820 [ 2305.124839][T31268] do_initcall_level+0x104/0x190 [ 2305.130360][T31268] do_initcalls+0x59/0xa0 [ 2305.135203][T31268] kernel_init_freeable+0x334/0x4b0 [ 2305.140911][T31268] kernel_init+0x1d/0x1d0 [ 2305.145751][T31268] ret_from_fork+0x599/0xb30 [ 2305.150854][T31268] ret_from_fork_asm+0x1a/0x30 [ 2305.156132][T31268] [ 2305.156132][T31268] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2305.163334][T31268] fs_reclaim_acquire+0x72/0x100 [ 2305.168799][T31268] kmem_cache_alloc_noprof+0x45/0x710 [ 2305.174695][T31268] __kernfs_iattrs+0xd9/0x320 [ 2305.179901][T31268] kernfs_iop_setattr+0xea/0x3f0 [ 2305.185357][T31268] notify_change+0xc1a/0xf40 [ 2305.190573][T31268] do_truncate+0x1a4/0x220 [ 2305.195546][T31268] path_openat+0x357c/0x3d90 [ 2305.200657][T31268] do_filp_open+0x1fa/0x410 [ 2305.205672][T31268] do_sys_openat2+0x121/0x200 [ 2305.210859][T31268] __x64_sys_openat+0x138/0x170 [ 2305.216227][T31268] do_syscall_64+0xfa/0xf80 [ 2305.221246][T31268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.227648][T31268] [ 2305.227648][T31268] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 2305.236175][T31268] __lock_acquire+0x15a6/0x2cf0 [ 2305.241544][T31268] lock_acquire+0x117/0x340 [ 2305.246558][T31268] down_read+0x47/0x2e0 [ 2305.251227][T31268] kernfs_iop_getattr+0x9e/0x450 [ 2305.256683][T31268] vfs_getattr_nosec+0x2e1/0x430 [ 2305.262146][T31268] loop_assign_backing_file+0x222/0x400 [ 2305.268210][T31268] lo_ioctl+0x167f/0x1c50 [ 2305.273048][T31268] blkdev_ioctl+0x60e/0x710 [ 2305.278144][T31268] __se_sys_ioctl+0xfc/0x170 [ 2305.283244][T31268] do_syscall_64+0xfa/0xf80 [ 2305.288269][T31268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.294673][T31268] [ 2305.294673][T31268] other info that might help us debug this: [ 2305.294673][T31268] [ 2305.304891][T31268] Chain exists of: [ 2305.304891][T31268] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 2305.304891][T31268] [ 2305.319316][T31268] Possible unsafe locking scenario: [ 2305.319316][T31268] [ 2305.326753][T31268] CPU0 CPU1 [ 2305.332114][T31268] ---- ---- [ 2305.337464][T31268] lock(&q->q_usage_counter(io)#24); [ 2305.342831][T31268] lock(fs_reclaim); [ 2305.349324][T31268] lock(&q->q_usage_counter(io)#24); [ 2305.357212][T31268] rlock(&root->kernfs_iattr_rwsem); [ 2305.362662][T31268] [ 2305.362662][T31268] *** DEADLOCK *** [ 2305.362662][T31268] [ 2305.370789][T31268] 3 locks held by syz.1.6896/31268: [ 2305.375967][T31268] #0: ffff888024c77448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 2305.385013][T31268] #1: ffff888141be62c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 2305.395193][T31268] #2: ffff888141be6300 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 2305.405547][T31268] [ 2305.405547][T31268] stack backtrace: [ 2305.411423][T31268] CPU: 0 UID: 0 PID: 31268 Comm: syz.1.6896 Not tainted syzkaller #0 PREEMPT(full) [ 2305.411444][T31268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2305.411456][T31268] Call Trace: [ 2305.411462][T31268] [ 2305.411470][T31268] dump_stack_lvl+0x189/0x250 [ 2305.411499][T31268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2305.411523][T31268] ? __pfx__printk+0x10/0x10 [ 2305.411543][T31268] ? print_lock_name+0xde/0x100 [ 2305.411562][T31268] print_circular_bug+0x2e2/0x300 [ 2305.411590][T31268] check_noncircular+0x12e/0x150 [ 2305.411617][T31268] __lock_acquire+0x15a6/0x2cf0 [ 2305.411648][T31268] ? kernfs_iop_getattr+0x9e/0x450 [ 2305.411669][T31268] lock_acquire+0x117/0x340 [ 2305.411689][T31268] ? kernfs_iop_getattr+0x9e/0x450 [ 2305.411715][T31268] down_read+0x47/0x2e0 [ 2305.411738][T31268] ? kernfs_iop_getattr+0x9e/0x450 [ 2305.411760][T31268] kernfs_iop_getattr+0x9e/0x450 [ 2305.411783][T31268] vfs_getattr_nosec+0x2e1/0x430 [ 2305.411809][T31268] loop_assign_backing_file+0x222/0x400 [ 2305.411828][T31268] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 2305.411845][T31268] ? schedule+0x91/0x360 [ 2305.411875][T31268] ? __blk_freeze_queue_start+0x263/0x380 [ 2305.411977][T31268] lo_ioctl+0x167f/0x1c50 [ 2305.411994][T31268] ? __pfx_lo_ioctl+0x10/0x10 [ 2305.412013][T31268] ? stack_trace_save+0x9c/0xe0 [ 2305.412036][T31268] ? __lock_acquire+0x6b6/0x2cf0 [ 2305.412060][T31268] ? __lock_acquire+0x6b6/0x2cf0 [ 2305.412083][T31268] ? __lock_acquire+0x6b6/0x2cf0 [ 2305.412105][T31268] ? __lock_acquire+0x6b6/0x2cf0 [ 2305.412128][T31268] ? __lock_acquire+0x6b6/0x2cf0 [ 2305.412149][T31268] ? __lock_acquire+0x6b6/0x2cf0 [ 2305.412183][T31268] ? is_bpf_text_address+0x26/0x2b0 [ 2305.412206][T31268] ? is_bpf_text_address+0x292/0x2b0 [ 2305.412225][T31268] ? is_bpf_text_address+0x26/0x2b0 [ 2305.412245][T31268] ? kernel_text_address+0xa5/0xe0 [ 2305.412265][T31268] ? __kernel_text_address+0xd/0x40 [ 2305.412282][T31268] ? unwind_get_return_address+0x4d/0x90 [ 2305.412316][T31268] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2305.412336][T31268] ? arch_stack_walk+0xfc/0x150 [ 2305.412364][T31268] ? stack_trace_save+0x9c/0xe0 [ 2305.412383][T31268] ? stack_depot_save_flags+0x40/0x850 [ 2305.412455][T31268] ? format_decode+0x90/0xe10 [ 2305.412503][T31268] ? kasan_save_track+0x4f/0x80 [ 2305.412523][T31268] ? kasan_save_track+0x3e/0x80 [ 2305.412542][T31268] ? kasan_save_free_info+0x46/0x50 [ 2305.412559][T31268] ? __kasan_slab_free+0x5c/0x80 [ 2305.412579][T31268] ? kfree+0x1c0/0x660 [ 2305.412596][T31268] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 2305.412643][T31268] ? security_file_ioctl+0xcb/0x2d0 [ 2305.412709][T31268] ? __se_sys_ioctl+0x47/0x170 [ 2305.412727][T31268] ? do_syscall_64+0xfa/0xf80 [ 2305.412748][T31268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.412772][T31268] ? __asan_memset+0x22/0x50 [ 2305.412799][T31268] ? blk_get_meta_cap+0x18c/0x750 [ 2305.412907][T31268] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 2305.412927][T31268] ? kasan_quarantine_put+0xdd/0x220 [ 2305.412947][T31268] ? lockdep_hardirqs_on+0x98/0x140 [ 2305.412968][T31268] ? blkdev_common_ioctl+0x100c/0x2570 [ 2305.412991][T31268] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2305.413007][T31268] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2305.413029][T31268] ? do_vfs_ioctl+0xbe8/0x1430 [ 2305.413047][T31268] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2305.413063][T31268] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2305.413094][T31268] ? __pfx_lo_ioctl+0x10/0x10 [ 2305.413109][T31268] blkdev_ioctl+0x60e/0x710 [ 2305.413132][T31268] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2305.413152][T31268] ? __fget_files+0x3a0/0x420 [ 2305.413166][T31268] ? __fget_files+0x2a/0x420 [ 2305.413181][T31268] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2305.413204][T31268] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2305.413225][T31268] __se_sys_ioctl+0xfc/0x170 [ 2305.413244][T31268] do_syscall_64+0xfa/0xf80 [ 2305.413266][T31268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.413282][T31268] ? clear_bhb_loop+0x60/0xb0 [ 2305.413300][T31268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.413316][T31268] RIP: 0033:0x7fc8d3d8f749 [ 2305.413332][T31268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2305.413348][T31268] RSP: 002b:00007fc8d4bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2305.413366][T31268] RAX: ffffffffffffffda RBX: 00007fc8d3fe6090 RCX: 00007fc8d3d8f749 [ 2305.413378][T31268] RDX: 000000000000000a RSI: 0000000000004c06 RDI: 0000000000000008 [ 2305.413389][T31268] RBP: 00007fc8d3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2305.413399][T31268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2305.413410][T31268] R13: 00007fc8d3fe6128 R14: 00007fc8d3fe6090 R15: 00007ffd1b867818 [ 2305.413429][T31268] [ 2305.888776][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2305.897984][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2305.932395][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2305.941599][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2305.953217][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2305.962385][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2305.970401][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2305.979567][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2305.989422][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2305.998585][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2306.006417][T31264] ldm_validate_partition_table(): Disk read failed. [ 2306.014477][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2306.023644][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2306.031913][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2306.041070][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2306.049175][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2306.058317][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2306.066396][T31264] Dev loop7: unable to read RDB block 0 [ 2306.072563][T31264] loop7: unable to read partition table [ 2306.078433][T31264] loop7: partition table beyond EOD, truncated [ 2306.084775][T31264] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2306.106889][T31268] ldm_validate_partition_table(): Disk read failed. [ 2306.114021][T31268] Dev loop7: unable to read RDB block 0 [ 2306.120242][T31268] loop7: unable to read partition table [ 2306.125999][T31268] loop7: partition table beyond EOD, truncated [ 2306.132202][T31268] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5)