last executing test programs: 3.413864244s ago: executing program 4 (id=2973): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0xc08, 0x3, 0x458, 0x330, 0x5002004a, 0xb, 0x330, 0xea13, 0x3c0, 0x3c8, 0x3c8, 0x3c0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {0x0, 0x7}, {0x0, 0x0, 0x5e}, {}, {}, {0xffff}, {}, {}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {0x0, 0x0, 0x0, 0x4}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {}, {0x0, 0x0, 0x40}, {0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {0x80, 0x0, 0xfd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x71c6, 0x0, 0x9661, '\x00', 'syz1\x00', {0xa73}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.334570266s ago: executing program 0 (id=2998): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r2, &(0x7f00000001c0)=""/182, 0xb6) 1.314969688s ago: executing program 0 (id=3000): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='\x00!', 0x62}], 0x1, 0xee, 0x4200008) 1.222942277s ago: executing program 0 (id=3003): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) getrlimit(0xe, &(0x7f0000001140)) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) kexec_load(0x3, 0x0, 0x0, 0x320000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000003}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x15, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000001100)='syzkaller\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000000180)='AP@\x02\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x5) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001040)={r3, r6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) 1.169324382s ago: executing program 4 (id=2976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1.115405027s ago: executing program 4 (id=3007): socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x105022, 0x772, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.024270185s ago: executing program 4 (id=3010): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 872.695519ms ago: executing program 4 (id=3012): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 557.207659ms ago: executing program 2 (id=3019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x2d07, &(0x7f00000007c0)={0x0, 0x20ab, 0x10000, 0x1, 0x59c}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80001}, 0x0, 0x18}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009549926ae689f04fad1ff77626b967f6d5ad2aea608e5380d72da8b24471fb3d957db917714dbb585b967d370d4aae35237ed7c643a202fef4ea5944301990c7fdc290e84510e6ad7536e4a41f2df12227f7f209"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) capget(&(0x7f00000001c0)={0x19980330}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) 540.84673ms ago: executing program 1 (id=3020): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3d, 0x0, &(0x7f0000000500)="182c8690c4b7e8c47dcbcb3744844273ea71ba20d20a141cfa42cfc1fdb4faa31cd5e6e33f1b3f907e20b81be1b2596d569962e64e9fbaec7c39cff667", 0x5, 0x0, 0x7}, 0x50) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x4b6a, &(0x7f0000000340)={0x200f, 0x0, 0x0, 0xfeff, 0x3, "72710080ab003f00"}) 515.025752ms ago: executing program 3 (id=3021): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x0, 0x1, 0x4}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/235, 0x1a, 0xeb, 0x1, 0x6, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x98, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0xffffbffffffffffc}, 0x18) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000880)="00336fc66f16082ec439f170bba3e940d167b80e5988ac8bf8086b1845e3594412575e35bbd998487d0d666f6a452ca58dee03ecc9f67e7985bdacf757ed95eed2a96bf414648a974c64d33f") socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 464.328427ms ago: executing program 1 (id=3022): bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) 396.317753ms ago: executing program 3 (id=3023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100802, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000fc0)=ANY=[], 0xe) 388.883534ms ago: executing program 1 (id=3024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4, 0x30, r2}, 0x10) 284.254294ms ago: executing program 1 (id=3025): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0, 0x20}) timerfd_create(0x4, 0x800) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001ac141444000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000a00000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000010000000000000002000000fcffffff000000002abd700004350000020000002000000000000000480003006465666c61746500"/191], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc084) open(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0x22, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa4305409e00000064000003029078000000007f0000018300b10a010101ac1e01010a010100ac14142b0113019078ffffffffc536f13f743fd19d305c61114f90a5f8111142754afa9777a380808aecc997ee5323268bcbf7b43550755a25fd76c0"], 0x0) 265.564315ms ago: executing program 1 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x8, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4) 245.691708ms ago: executing program 3 (id=3027): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='\x00!', 0x62}], 0x1, 0xee, 0x4200008) 233.937168ms ago: executing program 0 (id=3028): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0xc08, 0x3, 0x458, 0x330, 0x5002004a, 0xb, 0x330, 0xea13, 0x3c0, 0x3c8, 0x3c8, 0x3c0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {0x0, 0x7}, {0x0, 0x0, 0x5e}, {}, {}, {0xffff}, {}, {}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {0x0, 0x0, 0x0, 0x4}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {}, {0x0, 0x0, 0x40}, {0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {0x80, 0x0, 0xfd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x71c6, 0x0, 0x9661, '\x00', 'syz1\x00', {0xa73}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 197.300732ms ago: executing program 2 (id=3029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 186.261363ms ago: executing program 0 (id=3030): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, 0x0, 0x0) 153.615466ms ago: executing program 2 (id=3031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 137.525077ms ago: executing program 0 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) splice(r10, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r9, &(0x7f0000000fc0)=ANY=[], 0xe) 137.207497ms ago: executing program 3 (id=3033): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x0, 0x1, 0x4}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/235, 0x1a, 0xeb, 0x1, 0x6, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x98, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0xffffbffffffffffc}, 0x18) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000880)="00336fc66f16082ec439f170bba3e940d167b80e5988ac8bf8086b1845e3594412575e35bbd998487d0d666f6a452ca58dee03ecc9f67e7985bdacf757ed95eed2a96bf414648a974c64d33f") socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, 0x0) 91.510782ms ago: executing program 2 (id=3034): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000940)=ANY=[], 0x18) 60.404494ms ago: executing program 3 (id=3035): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000940)=ANY=[], 0x18) 60.194865ms ago: executing program 1 (id=3036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000fc0)=ANY=[], 0xe) 60.058245ms ago: executing program 2 (id=3037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4, 0x30, r2}, 0x10) 55.643695ms ago: executing program 3 (id=3038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) getrlimit(0xe, &(0x7f0000001140)) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) kexec_load(0x3, 0x0, 0x0, 0x320000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000003}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x15, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000001100)='syzkaller\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000000180)='AP@\x02\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x5) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001040)={r3, r6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) 423.17µs ago: executing program 2 (id=3039): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r3, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}]}}]}, 0x38}}, 0x800) 0s ago: executing program 4 (id=3040): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x2d07, &(0x7f00000007c0)={0x0, 0x20ab, 0x10000, 0x1, 0x59c}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80001}, 0x0, 0x18}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009549926ae689f04fad1ff77626b967f6d5ad2aea608e5380d72da8b24471fb3d957db917714dbb585b967d370d4aae35237ed7c643a202fef4ea5944301990c7fdc290e84510e6ad7536e4a41f2df12227f7f209"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) capget(&(0x7f00000001c0)={0x19980330}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) kernel console output (not intermixed with test programs): b1d2005 code=0x7ffc0000 [ 147.541885][ T9168] syzkaller0: entered allmulticast mode [ 147.731567][ T9172] syzkaller0: entered promiscuous mode [ 147.737089][ T9172] syzkaller0: entered allmulticast mode [ 147.754581][ T9182] loop1: detected capacity change from 0 to 512 [ 147.764255][ T9182] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.776238][ T9182] EXT4-fs (loop1): 1 orphan inode deleted [ 147.776446][ T9184] 9pnet_fd: Insufficient options for proto=fd [ 147.782084][ T9182] EXT4-fs (loop1): 1 truncate cleaned up [ 147.801160][ T9182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.909378][ T9179] loop4: detected capacity change from 0 to 512 [ 147.916417][ T9179] EXT4-fs: Ignoring removed nobh option [ 147.935899][ T9194] loop2: detected capacity change from 0 to 1024 [ 147.939452][ T9179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.955541][ T9194] EXT4-fs: Ignoring removed bh option [ 147.969766][ T9179] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.977996][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.990535][ T9194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.011742][ T9179] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.2152: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 148.034796][ T9179] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.2152: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 148.090553][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.121890][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.155943][ T9204] syzkaller0: entered promiscuous mode [ 148.161571][ T9204] syzkaller0: entered allmulticast mode [ 148.173491][ T9211] syz_tun: entered allmulticast mode [ 148.181909][ T9211] pimreg: entered allmulticast mode [ 148.188192][ T9210] syz_tun: left allmulticast mode [ 148.239315][ T9218] netlink: 'syz.0.2165': attribute type 27 has an invalid length. [ 148.285728][ T9222] 9pnet_fd: Insufficient options for proto=fd [ 148.311505][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.325064][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.335545][ T9218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.389378][ T9220] syzkaller0: entered promiscuous mode [ 148.395071][ T9220] syzkaller0: entered allmulticast mode [ 148.586387][ T9243] __nla_validate_parse: 4 callbacks suppressed [ 148.586403][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2176'. [ 148.616463][ T9241] syzkaller0: entered promiscuous mode [ 148.622078][ T9241] syzkaller0: entered allmulticast mode [ 148.629445][ T9243] IPVS: Error connecting to the multicast addr [ 148.813203][ T9251] syzkaller0: entered promiscuous mode [ 148.818766][ T9251] syzkaller0: entered allmulticast mode [ 149.260253][ T9270] syzkaller0: entered promiscuous mode [ 149.265946][ T9270] syzkaller0: entered allmulticast mode [ 149.449218][ T9279] syzkaller0: entered promiscuous mode [ 149.454772][ T9279] syzkaller0: entered allmulticast mode [ 149.496261][ T9281] syzkaller0: entered promiscuous mode [ 149.501785][ T9281] syzkaller0: entered allmulticast mode [ 149.531766][ T9283] loop3: detected capacity change from 0 to 512 [ 149.540480][ T9283] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.546913][ T9283] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 149.568398][ T9283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 149.577915][ T9286] syzkaller0: entered promiscuous mode [ 149.584885][ T9283] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2191: attempt to clear invalid blocks 2 len 1 [ 149.588390][ T9286] syzkaller0: entered allmulticast mode [ 149.608774][ T9283] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2191: invalid indirect mapped block 1819239214 (level 0) [ 149.627121][ T9283] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2191: invalid indirect mapped block 1819239214 (level 1) [ 149.641907][ T9283] EXT4-fs (loop3): 1 truncate cleaned up [ 149.648253][ T9283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.719977][ T9283] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.2191: Abort forced by user [ 149.730459][ T9283] EXT4-fs (loop3): Remounting filesystem read-only [ 149.737110][ T9283] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 149.761862][ T9297] syzkaller0: entered promiscuous mode [ 149.767380][ T9297] syzkaller0: entered allmulticast mode [ 149.852761][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.875191][ T9308] loop0: detected capacity change from 0 to 1024 [ 149.921588][ T9308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.950115][ T9314] syzkaller0: entered promiscuous mode [ 149.955652][ T9314] syzkaller0: entered allmulticast mode [ 149.962522][ T9311] lo speed is unknown, defaulting to 1000 [ 150.065354][ T9312] syzkaller0: entered promiscuous mode [ 150.071107][ T9312] syzkaller0: entered allmulticast mode [ 150.160277][ T9334] lo speed is unknown, defaulting to 1000 [ 150.243629][ T9343] loop1: detected capacity change from 0 to 512 [ 150.259397][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.281914][ T9343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.288493][ T9345] syzkaller0: entered promiscuous mode [ 150.297391][ T9345] syzkaller0: entered allmulticast mode [ 150.332055][ T9343] EXT4-fs (loop1): 1 orphan inode deleted [ 150.337847][ T9343] EXT4-fs (loop1): 1 truncate cleaned up [ 150.383168][ T9343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.421227][ T9354] lo speed is unknown, defaulting to 1000 [ 150.480003][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.533328][ T9364] syzkaller0: entered promiscuous mode [ 150.538837][ T9364] syzkaller0: entered allmulticast mode [ 150.673296][ T9371] syzkaller0: entered promiscuous mode [ 150.678797][ T9371] syzkaller0: entered allmulticast mode [ 150.717926][ T9380] netlink: 'syz.3.2225': attribute type 27 has an invalid length. [ 150.788791][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.824181][ T9380] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.842953][ T9380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.874791][ T9391] netlink: 660 bytes leftover after parsing attributes in process `syz.2.2230'. [ 151.000582][ T9400] syzkaller0: entered promiscuous mode [ 151.006272][ T9400] syzkaller0: entered allmulticast mode [ 151.030649][ T9406] loop2: detected capacity change from 0 to 1024 [ 151.038587][ T9406] EXT4-fs: Ignoring removed nobh option [ 151.044211][ T9406] EXT4-fs: Ignoring removed bh option [ 151.063229][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.094165][ T9407] 9pnet_fd: Insufficient options for proto=fd [ 151.147806][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 151.168388][ T9416] syzkaller0: entered promiscuous mode [ 151.173964][ T9416] syzkaller0: entered allmulticast mode [ 151.183472][ T9405] EXT4-fs (loop2): pa ffff888107a89310: logic 1, phys. 129, len 4 [ 151.191471][ T9405] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 151.198174][ T9419] team1: entered promiscuous mode [ 151.206468][ T9419] team1: entered allmulticast mode [ 151.211828][ T9419] 8021q: adding VLAN 0 to HW filter on device team1 [ 151.227662][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.266764][ T9428] loop2: detected capacity change from 0 to 164 [ 151.294900][ T9430] netlink: 328 bytes leftover after parsing attributes in process `syz.0.2244'. [ 151.329806][ T9431] lo speed is unknown, defaulting to 1000 [ 151.361074][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 151.382692][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 151.391959][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 151.406314][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 151.521830][ T9446] syzkaller0: entered promiscuous mode [ 151.527344][ T9446] syzkaller0: entered allmulticast mode [ 151.544840][ T9448] syzkaller0: entered promiscuous mode [ 151.550351][ T9448] syzkaller0: entered allmulticast mode [ 151.615951][ T9451] loop0: detected capacity change from 0 to 512 [ 151.624211][ T9451] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.630570][ T9451] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 151.646969][ T9451] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 151.661728][ T9451] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2252: attempt to clear invalid blocks 2 len 1 [ 151.674797][ T9451] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2252: invalid indirect mapped block 1819239214 (level 0) [ 151.688933][ T9451] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2252: invalid indirect mapped block 1819239214 (level 1) [ 151.703604][ T9451] EXT4-fs (loop0): 1 truncate cleaned up [ 151.709709][ T9451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.726535][ T9454] loop2: detected capacity change from 0 to 512 [ 151.735180][ T9454] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.741608][ T9454] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 151.760904][ T9454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 151.776597][ T9454] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2253: attempt to clear invalid blocks 2 len 1 [ 151.795259][ T9454] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2253: invalid indirect mapped block 1819239214 (level 0) [ 151.809898][ T9454] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2253: invalid indirect mapped block 1819239214 (level 1) [ 151.824848][ T9454] EXT4-fs (loop2): 1 truncate cleaned up [ 151.831822][ T9454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.939894][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.985039][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.999900][ T9461] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2255'. [ 152.065347][ T9467] loop2: detected capacity change from 0 to 512 [ 152.080618][ T9467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.103974][ T9467] EXT4-fs (loop2): 1 orphan inode deleted [ 152.109785][ T9467] EXT4-fs (loop2): 1 truncate cleaned up [ 152.116418][ T9467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.151058][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.225350][ T9476] syzkaller0: entered promiscuous mode [ 152.230996][ T9476] syzkaller0: entered allmulticast mode [ 152.296585][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 152.296600][ T29] audit: type=1326 audit(1767398000.998:17991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.326580][ T29] audit: type=1326 audit(1767398001.018:17992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.350175][ T29] audit: type=1326 audit(1767398001.018:17993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.373852][ T29] audit: type=1326 audit(1767398001.018:17994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.374254][ T9481] loop2: detected capacity change from 0 to 512 [ 152.397332][ T29] audit: type=1326 audit(1767398001.018:17995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.397370][ T29] audit: type=1326 audit(1767398001.018:17996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.435532][ T9481] EXT4-fs: Ignoring removed nobh option [ 152.450638][ T29] audit: type=1326 audit(1767398001.018:17997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.479601][ T29] audit: type=1326 audit(1767398001.018:17998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.503100][ T29] audit: type=1326 audit(1767398001.018:17999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.505168][ T9481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.526579][ T29] audit: type=1326 audit(1767398001.018:18000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 152.562658][ T9481] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.577747][ T9481] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2261: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 152.598892][ T9481] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2261: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 152.652250][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.731865][ T9496] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2268'. [ 152.862697][ T9509] lo speed is unknown, defaulting to 1000 [ 153.016190][ T9514] syzkaller0: entered promiscuous mode [ 153.021833][ T9514] syzkaller0: entered allmulticast mode [ 153.303802][ T9521] loop1: detected capacity change from 0 to 512 [ 153.312711][ T9521] EXT4-fs: Ignoring removed nobh option [ 153.333787][ T9521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.346576][ T9521] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.346757][ T9542] loop4: detected capacity change from 0 to 512 [ 153.360009][ T9521] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.2276: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 153.384351][ T9542] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.390884][ T9542] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 153.395473][ T9521] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.2276: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 153.399239][ T9542] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 153.432646][ T9542] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2283: attempt to clear invalid blocks 2 len 1 [ 153.445824][ T9542] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2283: invalid indirect mapped block 1819239214 (level 0) [ 153.460014][ T9542] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2283: invalid indirect mapped block 1819239214 (level 1) [ 153.474822][ T9542] EXT4-fs (loop4): 1 truncate cleaned up [ 153.490962][ T9542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.504790][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.563271][ T9548] syzkaller0: entered promiscuous mode [ 153.568733][ T9548] syzkaller0: entered allmulticast mode [ 153.695455][ T9553] lo speed is unknown, defaulting to 1000 [ 153.738012][ T9557] syzkaller0: entered promiscuous mode [ 153.743520][ T9557] syzkaller0: entered allmulticast mode [ 153.782669][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 153.797534][ T9560] team1: entered promiscuous mode [ 153.802786][ T9560] team1: entered allmulticast mode [ 153.808034][ T9560] 8021q: adding VLAN 0 to HW filter on device team1 [ 154.102609][ T9579] lo speed is unknown, defaulting to 1000 [ 154.254432][ T9590] lo speed is unknown, defaulting to 1000 [ 154.310997][ T9593] syzkaller0: entered promiscuous mode [ 154.316477][ T9593] syzkaller0: entered allmulticast mode [ 154.330463][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.623298][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9608 comm=syz.4.2307 [ 154.795741][ T9620] lo speed is unknown, defaulting to 1000 [ 154.967350][ T9635] loop3: detected capacity change from 0 to 512 [ 154.978970][ T9635] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.985422][ T9635] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 154.997322][ T9635] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 155.012253][ T9635] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2318: attempt to clear invalid blocks 2 len 1 [ 155.025467][ T9635] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2318: invalid indirect mapped block 1819239214 (level 0) [ 155.034709][ T9637] syzkaller0: entered promiscuous mode [ 155.044894][ T9637] syzkaller0: entered allmulticast mode [ 155.053652][ T9635] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2318: invalid indirect mapped block 1819239214 (level 1) [ 155.067966][ T9635] EXT4-fs (loop3): 1 truncate cleaned up [ 155.074452][ T9635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.197120][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 155.238130][ T9646] team2: entered promiscuous mode [ 155.243317][ T9646] team2: entered allmulticast mode [ 155.264463][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.264726][ T9646] 8021q: adding VLAN 0 to HW filter on device team2 [ 155.371982][ T9655] lo speed is unknown, defaulting to 1000 [ 155.468049][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 155.520427][ T9667] syzkaller0: entered promiscuous mode [ 155.525942][ T9667] syzkaller0: entered allmulticast mode [ 155.538773][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 155.548566][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 155.568162][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 155.581411][ T9665] lo speed is unknown, defaulting to 1000 [ 155.627777][ T9680] loop0: detected capacity change from 0 to 512 [ 155.662318][ T9680] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.668706][ T9680] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 155.722492][ T9680] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 155.741316][ T9680] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2337: attempt to clear invalid blocks 2 len 1 [ 155.757868][ T9680] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2337: invalid indirect mapped block 1819239214 (level 0) [ 155.774517][ T9680] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2337: invalid indirect mapped block 1819239214 (level 1) [ 155.812313][ T9680] EXT4-fs (loop0): 1 truncate cleaned up [ 155.818596][ T9680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.962249][ C0] vcan0: j1939_tp_rxtimer: 0xffff888100a27400: rx timeout, send abort [ 156.009596][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.039379][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 156.053689][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 156.063535][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 156.072812][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 156.128741][ T9708] loop0: detected capacity change from 0 to 512 [ 156.139402][ T9708] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2348: inode has both inline data and extents flags [ 156.158669][ T9708] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2348: couldn't read orphan inode 15 (err -117) [ 156.171696][ T9708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.207945][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.367103][ T9721] loop3: detected capacity change from 0 to 512 [ 156.385319][ T9721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 156.391794][ T9721] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 156.435442][ T9721] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 156.462275][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad73000: rx timeout, send abort [ 156.470494][ C0] vcan0: j1939_tp_rxtimer: 0xffff888100a27400: abort rx timeout. Force session deactivation [ 156.523076][ T9721] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2353: attempt to clear invalid blocks 2 len 1 [ 156.554768][ T9721] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2353: invalid indirect mapped block 1819239214 (level 0) [ 156.611369][ T9721] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2353: invalid indirect mapped block 1819239214 (level 1) [ 156.626520][ T9731] loop2: detected capacity change from 0 to 512 [ 156.636216][ T9731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.642691][ T9731] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 156.681130][ T9721] EXT4-fs (loop3): 1 truncate cleaned up [ 156.687386][ T9721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.708451][ T9731] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 156.727018][ T9731] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2356: attempt to clear invalid blocks 2 len 1 [ 156.740421][ T9731] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2356: invalid indirect mapped block 1819239214 (level 0) [ 156.743083][ T9740] syzkaller0: entered promiscuous mode [ 156.759942][ T9740] syzkaller0: entered allmulticast mode [ 156.766295][ T9731] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2356: invalid indirect mapped block 1819239214 (level 1) [ 156.780679][ T9731] EXT4-fs (loop2): 1 truncate cleaned up [ 156.786973][ T9731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.841566][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.883165][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.899803][ T9744] bridge: RTM_NEWNEIGH with invalid ether address [ 156.953474][ T9748] syzkaller0: entered promiscuous mode [ 156.959041][ T9748] syzkaller0: entered allmulticast mode [ 156.970499][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad73000: abort rx timeout. Force session deactivation [ 157.009402][ T9749] lo speed is unknown, defaulting to 1000 [ 157.237604][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad73400: rx timeout, send abort [ 157.393236][ T29] kauditd_printk_skb: 836 callbacks suppressed [ 157.393253][ T29] audit: type=1326 audit(1767398006.098:18837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.429664][ T9755] loop3: detected capacity change from 0 to 512 [ 157.436488][ T9755] EXT4-fs: Ignoring removed nobh option [ 157.447655][ T29] audit: type=1326 audit(1767398006.128:18838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.471309][ T29] audit: type=1326 audit(1767398006.128:18839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.494861][ T29] audit: type=1326 audit(1767398006.128:18840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.518353][ T29] audit: type=1326 audit(1767398006.128:18841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.541840][ T29] audit: type=1326 audit(1767398006.128:18842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.565326][ T29] audit: type=1326 audit(1767398006.128:18843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.573768][ T9755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.588827][ T29] audit: type=1326 audit(1767398006.128:18844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.624755][ T29] audit: type=1326 audit(1767398006.128:18845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.631771][ T9755] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.648249][ T29] audit: type=1326 audit(1767398006.128:18846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 157.737611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad73c00: rx timeout, send abort [ 157.745892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad73400: abort rx timeout. Force session deactivation [ 157.793178][ T9776] syzkaller0: entered promiscuous mode [ 157.798738][ T9776] syzkaller0: entered allmulticast mode [ 157.812999][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.895852][ T9786] syzkaller0: entered promiscuous mode [ 157.901423][ T9786] syzkaller0: entered allmulticast mode [ 158.245877][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad73c00: abort rx timeout. Force session deactivation [ 158.462189][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba37800: rx timeout, send abort [ 158.917645][ T9821] syzkaller0: entered promiscuous mode [ 158.923327][ T9821] syzkaller0: entered allmulticast mode [ 158.962181][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba37200: rx timeout, send abort [ 158.970433][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba37800: abort rx timeout. Force session deactivation [ 159.002712][ T9828] loop4: detected capacity change from 0 to 512 [ 159.011202][ T9828] EXT4-fs (loop4): orphan cleanup on readonly fs [ 159.017564][ T9828] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 159.026500][ T9828] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 159.042965][ T9828] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2392: attempt to clear invalid blocks 2 len 1 [ 159.056262][ T9828] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2392: invalid indirect mapped block 1819239214 (level 0) [ 159.081822][ T9828] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2392: invalid indirect mapped block 1819239214 (level 1) [ 159.097712][ T9828] EXT4-fs (loop4): 1 truncate cleaned up [ 159.103994][ T9828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.213127][ T9845] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.2392: Abort forced by user [ 159.231876][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 159.238501][ T9845] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.382411][ T9861] loop2: detected capacity change from 0 to 512 [ 159.394696][ T9863] syzkaller0: entered promiscuous mode [ 159.400276][ T9863] syzkaller0: entered allmulticast mode [ 159.410309][ T9861] EXT4-fs (loop2): orphan cleanup on readonly fs [ 159.416748][ T9861] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 159.427795][ T9861] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 159.442643][ T9861] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2405: attempt to clear invalid blocks 2 len 1 [ 159.455981][ T9861] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2405: invalid indirect mapped block 1819239214 (level 0) [ 159.470405][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba37200: abort rx timeout. Force session deactivation [ 159.480994][ T9861] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2405: invalid indirect mapped block 1819239214 (level 1) [ 159.502522][ T9861] EXT4-fs (loop2): 1 truncate cleaned up [ 159.511455][ T9861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.549876][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad5fc00: rx timeout, send abort [ 159.566760][ T9861] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.2405: Abort forced by user [ 159.577117][ T9861] EXT4-fs (loop2): Remounting filesystem read-only [ 159.583669][ T9861] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.692025][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.738820][ T9868] syzkaller0: entered promiscuous mode [ 159.744591][ T9868] syzkaller0: entered allmulticast mode [ 159.910629][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.049901][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad5ea00: rx timeout, send abort [ 160.058149][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad5fc00: abort rx timeout. Force session deactivation [ 160.375144][ T9897] loop3: detected capacity change from 0 to 512 [ 160.384261][ T9897] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.390587][ T9897] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 160.408442][ T9897] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 160.423671][ T9897] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2420: attempt to clear invalid blocks 2 len 1 [ 160.436843][ T9897] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2420: invalid indirect mapped block 1819239214 (level 0) [ 160.451091][ T9897] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2420: invalid indirect mapped block 1819239214 (level 1) [ 160.465410][ T9897] EXT4-fs (loop3): 1 truncate cleaned up [ 160.471988][ T9897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.518588][ T9902] syzkaller0: entered promiscuous mode [ 160.524053][ T9902] syzkaller0: entered allmulticast mode [ 160.558075][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad5ea00: abort rx timeout. Force session deactivation [ 160.607232][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.951529][ T9923] lo speed is unknown, defaulting to 1000 [ 161.013826][ T9932] syzkaller0: entered promiscuous mode [ 161.019329][ T9932] syzkaller0: entered allmulticast mode [ 161.195384][ T9946] lo speed is unknown, defaulting to 1000 [ 161.427155][ T9967] syzkaller0: entered promiscuous mode [ 161.432750][ T9967] syzkaller0: entered allmulticast mode [ 161.636282][ T9981] loop2: detected capacity change from 0 to 512 [ 161.647046][ T9981] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.653441][ T9981] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 161.668296][ T9981] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 161.682897][ T9981] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2457: attempt to clear invalid blocks 2 len 1 [ 161.699282][ T9981] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2457: invalid indirect mapped block 1819239214 (level 0) [ 161.720920][ T9981] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2457: invalid indirect mapped block 1819239214 (level 1) [ 161.740519][ T9981] EXT4-fs (loop2): 1 truncate cleaned up [ 161.746584][ T9981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.786544][ T9993] loop4: detected capacity change from 0 to 512 [ 161.793381][ T9993] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.805563][ T9993] EXT4-fs (loop4): 1 orphan inode deleted [ 161.811386][ T9993] EXT4-fs (loop4): 1 truncate cleaned up [ 161.818592][ T9993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.852079][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.885713][ T9999] lo speed is unknown, defaulting to 1000 [ 161.910624][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.938019][T10004] loop1: detected capacity change from 0 to 512 [ 161.975735][T10004] EXT4-fs (loop1): orphan cleanup on readonly fs [ 161.982158][T10004] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 162.008320][T10004] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 162.023290][T10004] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2467: attempt to clear invalid blocks 2 len 1 [ 162.036208][T10006] lo speed is unknown, defaulting to 1000 [ 162.036865][T10004] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2467: invalid indirect mapped block 1819239214 (level 0) [ 162.056600][T10004] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2467: invalid indirect mapped block 1819239214 (level 1) [ 162.071209][T10004] EXT4-fs (loop1): 1 truncate cleaned up [ 162.078500][T10004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.227821][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.326426][T10029] loop0: detected capacity change from 0 to 512 [ 162.338534][T10029] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.344998][T10029] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 162.353205][T10029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 162.368014][T10029] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2476: attempt to clear invalid blocks 2 len 1 [ 162.381740][T10029] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2476: invalid indirect mapped block 1819239214 (level 0) [ 162.396018][T10029] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2476: invalid indirect mapped block 1819239214 (level 1) [ 162.410320][T10029] EXT4-fs (loop0): 1 truncate cleaned up [ 162.416383][T10029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.434397][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 162.434412][ T29] audit: type=1326 audit(1767398011.138:20154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.473296][ T29] audit: type=1326 audit(1767398011.148:20155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.476923][T10033] syzkaller0: entered promiscuous mode [ 162.496948][ T29] audit: type=1326 audit(1767398011.148:20156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.502412][T10033] syzkaller0: entered allmulticast mode [ 162.531562][ T29] audit: type=1326 audit(1767398011.148:20157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.555134][ T29] audit: type=1326 audit(1767398011.148:20158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.578684][ T29] audit: type=1326 audit(1767398011.148:20159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.602241][ T29] audit: type=1326 audit(1767398011.148:20160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.625885][ T29] audit: type=1326 audit(1767398011.148:20161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.649410][ T29] audit: type=1326 audit(1767398011.148:20162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.672978][ T29] audit: type=1326 audit(1767398011.148:20163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 162.758516][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.915704][T10049] loop2: detected capacity change from 0 to 1024 [ 162.933702][T10049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.190543][T10062] loop3: detected capacity change from 0 to 512 [ 163.202882][T10063] syzkaller0: entered promiscuous mode [ 163.208456][T10063] syzkaller0: entered allmulticast mode [ 163.222539][T10062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.228984][T10062] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 163.237543][T10062] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.257999][T10062] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2489: attempt to clear invalid blocks 2 len 1 [ 163.272074][T10062] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2489: invalid indirect mapped block 1819239214 (level 0) [ 163.286731][T10062] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2489: invalid indirect mapped block 1819239214 (level 1) [ 163.301255][T10062] EXT4-fs (loop3): 1 truncate cleaned up [ 163.324086][T10070] lo speed is unknown, defaulting to 1000 [ 163.470068][T10083] loop3: detected capacity change from 0 to 164 [ 163.498471][T10083] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 163.550365][T10087] loop3: detected capacity change from 0 to 512 [ 163.564371][T10087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.580062][T10087] EXT4-fs (loop3): 1 orphan inode deleted [ 163.585866][T10087] EXT4-fs (loop3): 1 truncate cleaned up [ 163.637380][T10090] lo speed is unknown, defaulting to 1000 [ 163.743810][T10098] syzkaller0: entered promiscuous mode [ 163.749375][T10098] syzkaller0: entered allmulticast mode [ 163.857796][T10108] loop1: detected capacity change from 0 to 512 [ 163.865846][T10108] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.872447][T10108] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 163.887593][T10108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.915183][T10108] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2506: attempt to clear invalid blocks 2 len 1 [ 163.928454][T10108] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2506: invalid indirect mapped block 1819239214 (level 0) [ 163.979844][T10108] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2506: invalid indirect mapped block 1819239214 (level 1) [ 164.005413][T10108] EXT4-fs (loop1): 1 truncate cleaned up [ 164.082364][T10118] syzkaller0: entered promiscuous mode [ 164.087867][T10118] syzkaller0: entered allmulticast mode [ 164.189764][T10124] lo speed is unknown, defaulting to 1000 [ 164.300366][T10131] syzkaller0: entered promiscuous mode [ 164.305901][T10131] syzkaller0: entered allmulticast mode [ 164.342739][T10142] loop3: detected capacity change from 0 to 164 [ 164.358933][T10142] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 164.438619][T10147] syzkaller0: entered promiscuous mode [ 164.444109][T10147] syzkaller0: entered allmulticast mode [ 164.479507][T10150] syzkaller0: entered promiscuous mode [ 164.485089][T10150] syzkaller0: entered allmulticast mode [ 164.515419][T10152] lo speed is unknown, defaulting to 1000 [ 164.988884][T10168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.000440][T10168] EXT4-fs (loop4): 1 orphan inode deleted [ 165.006278][T10168] EXT4-fs (loop4): 1 truncate cleaned up [ 165.033458][T10172] syzkaller0: entered promiscuous mode [ 165.039000][T10172] syzkaller0: entered allmulticast mode [ 165.178754][T10174] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.185174][T10174] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 165.193711][T10174] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 165.208341][T10174] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2531: attempt to clear invalid blocks 2 len 1 [ 165.221551][T10174] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2531: invalid indirect mapped block 1819239214 (level 0) [ 165.235636][T10174] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2531: invalid indirect mapped block 1819239214 (level 1) [ 165.249964][T10174] EXT4-fs (loop4): 1 truncate cleaned up [ 165.273143][T10174] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.2531: Abort forced by user [ 165.283479][T10174] EXT4-fs (loop4): Remounting filesystem read-only [ 165.289999][T10174] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 165.465376][T10187] syzkaller0: entered promiscuous mode [ 165.470970][T10187] syzkaller0: entered allmulticast mode [ 165.597322][T10204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.613394][T10204] EXT4-fs (loop4): 1 orphan inode deleted [ 165.619159][T10204] EXT4-fs (loop4): 1 truncate cleaned up [ 165.620455][T10205] syzkaller0: entered promiscuous mode [ 165.630536][T10205] syzkaller0: entered allmulticast mode [ 165.722680][T10210] __nla_validate_parse: 9 callbacks suppressed [ 165.722695][T10210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2544'. [ 165.738254][T10212] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.744740][T10212] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 165.745601][T10210] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 165.761765][T10212] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 165.776383][T10212] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2545: attempt to clear invalid blocks 2 len 1 [ 165.789692][T10212] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2545: invalid indirect mapped block 1819239214 (level 0) [ 165.804369][T10212] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2545: invalid indirect mapped block 1819239214 (level 1) [ 165.818990][T10212] EXT4-fs (loop3): 1 truncate cleaned up [ 165.845940][T10212] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.2545: Abort forced by user [ 165.862720][T10212] EXT4-fs (loop3): Remounting filesystem read-only [ 165.869253][T10212] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 165.882385][T10215] syzkaller0: entered promiscuous mode [ 165.887884][T10215] syzkaller0: entered allmulticast mode [ 166.028912][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 166.038448][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 166.047572][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 166.057311][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 166.177883][T10233] lo speed is unknown, defaulting to 1000 [ 166.204515][T10234] lo speed is unknown, defaulting to 1000 [ 166.269801][T10237] syzkaller0: entered promiscuous mode [ 166.275363][T10237] syzkaller0: entered allmulticast mode [ 166.375674][ T1019] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.471403][T10253] syzkaller0: entered promiscuous mode [ 166.476907][T10253] syzkaller0: entered allmulticast mode [ 166.494354][T10255] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.500785][T10255] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 166.512623][T10255] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 166.527270][T10255] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2561: attempt to clear invalid blocks 2 len 1 [ 166.544472][T10255] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2561: invalid indirect mapped block 1819239214 (level 0) [ 166.558796][T10255] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2561: invalid indirect mapped block 1819239214 (level 1) [ 166.588931][T10255] EXT4-fs (loop3): 1 truncate cleaned up [ 166.645099][T10258] set_capacity_and_notify: 10 callbacks suppressed [ 166.645172][T10258] loop0: detected capacity change from 0 to 164 [ 166.693249][T10262] syzkaller0: entered promiscuous mode [ 166.698796][T10262] syzkaller0: entered allmulticast mode [ 166.804714][T10272] syzkaller0: entered promiscuous mode [ 166.810216][T10272] syzkaller0: entered allmulticast mode [ 166.829907][T10274] syzkaller0: entered promiscuous mode [ 166.835482][T10274] syzkaller0: entered allmulticast mode [ 166.938766][T10283] syzkaller0: entered promiscuous mode [ 166.944324][T10283] syzkaller0: entered allmulticast mode [ 166.966174][T10282] loop2: detected capacity change from 0 to 1024 [ 167.000389][T10288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10288 comm=syz.4.2574 [ 167.052211][T10291] loop0: detected capacity change from 0 to 164 [ 167.098126][T10294] loop0: detected capacity change from 0 to 512 [ 167.114936][T10294] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.121397][T10294] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 167.141869][T10294] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 167.157783][T10294] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2577: attempt to clear invalid blocks 2 len 1 [ 167.171250][T10294] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2577: invalid indirect mapped block 1819239214 (level 0) [ 167.185500][T10294] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2577: invalid indirect mapped block 1819239214 (level 1) [ 167.199986][T10294] EXT4-fs (loop0): 1 truncate cleaned up [ 167.273240][T10302] lo speed is unknown, defaulting to 1000 [ 167.391787][T10310] IPVS: sed: FWM 3 0x00000003 - no destination available [ 167.412628][T10312] syzkaller0: entered promiscuous mode [ 167.418148][T10312] syzkaller0: entered allmulticast mode [ 167.478106][T10317] syzkaller0: entered promiscuous mode [ 167.483622][T10317] syzkaller0: entered allmulticast mode [ 167.585120][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10321 comm=syz.2.2586 [ 167.615198][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 167.615211][ T29] audit: type=1326 audit(1767398016.318:20571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.645558][ T29] audit: type=1326 audit(1767398016.318:20572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.645753][T10323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.669120][ T29] audit: type=1326 audit(1767398016.318:20573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.700032][ T29] audit: type=1326 audit(1767398016.318:20574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.723666][ T29] audit: type=1326 audit(1767398016.318:20575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.747264][ T29] audit: type=1326 audit(1767398016.328:20576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.770914][ T29] audit: type=1326 audit(1767398016.328:20577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.794491][ T29] audit: type=1326 audit(1767398016.328:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.818077][ T29] audit: type=1326 audit(1767398016.328:20579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.894425][ T29] audit: type=1326 audit(1767398016.598:20580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7b19f749 code=0x7ffc0000 [ 167.998036][T10332] loop3: detected capacity change from 0 to 512 [ 168.011080][T10332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.017513][T10332] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 168.058741][T10332] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.073396][T10332] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2591: attempt to clear invalid blocks 2 len 1 [ 168.086674][T10332] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2591: invalid indirect mapped block 1819239214 (level 0) [ 168.101193][T10332] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2591: invalid indirect mapped block 1819239214 (level 1) [ 168.115701][T10332] EXT4-fs (loop3): 1 truncate cleaned up [ 168.148543][T10343] loop2: detected capacity change from 0 to 1024 [ 168.165258][T10345] syzkaller0: entered promiscuous mode [ 168.170836][T10345] syzkaller0: entered allmulticast mode [ 168.254309][T10354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10354 comm=syz.3.2598 [ 168.298421][T10359] loop0: detected capacity change from 0 to 164 [ 168.342664][T10363] lo speed is unknown, defaulting to 1000 [ 168.410757][T10370] loop0: detected capacity change from 0 to 512 [ 168.421525][T10370] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.427887][T10370] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 168.433788][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 168.436161][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.443617][T10370] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.463720][T10370] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2605: attempt to clear invalid blocks 2 len 1 [ 168.477097][T10370] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2605: invalid indirect mapped block 1819239214 (level 0) [ 168.491203][T10370] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2605: invalid indirect mapped block 1819239214 (level 1) [ 168.505577][T10370] EXT4-fs (loop0): 1 truncate cleaned up [ 168.622411][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 168.632036][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 168.641496][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 168.650552][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 168.738407][T10382] loop0: detected capacity change from 0 to 512 [ 168.750296][T10382] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.756682][T10382] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 168.765148][T10382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.779576][T10382] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2610: attempt to clear invalid blocks 2 len 1 [ 168.792563][T10382] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2610: invalid indirect mapped block 1819239214 (level 0) [ 168.806653][T10382] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2610: invalid indirect mapped block 1819239214 (level 1) [ 168.821007][T10382] EXT4-fs (loop0): 1 truncate cleaned up [ 168.958159][T10385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10385 comm=syz.0.2611 [ 169.004525][T10388] syzkaller0: entered promiscuous mode [ 169.010025][T10388] syzkaller0: entered allmulticast mode [ 169.048773][T10391] loop1: detected capacity change from 0 to 512 [ 169.056748][T10391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.072328][T10391] EXT4-fs (loop1): 1 orphan inode deleted [ 169.078072][T10391] EXT4-fs (loop1): 1 truncate cleaned up [ 169.170271][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 169.242737][T10410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10410 comm=syz.3.2622 [ 169.356622][T10416] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.363070][T10416] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 169.433433][T10416] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 169.460012][T10420] syzkaller0: entered promiscuous mode [ 169.465527][T10420] syzkaller0: entered allmulticast mode [ 169.471858][T10416] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2623: attempt to clear invalid blocks 2 len 1 [ 169.487616][T10416] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2623: invalid indirect mapped block 1819239214 (level 0) [ 169.505823][T10416] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2623: invalid indirect mapped block 1819239214 (level 1) [ 169.520682][T10416] EXT4-fs (loop3): 1 truncate cleaned up [ 169.643733][T10428] syzkaller0: entered promiscuous mode [ 169.649241][T10428] syzkaller0: entered allmulticast mode [ 169.684253][T10432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.696333][T10432] EXT4-fs (loop4): 1 orphan inode deleted [ 169.702162][T10432] EXT4-fs (loop4): 1 truncate cleaned up [ 169.767062][T10440] syzkaller0: entered promiscuous mode [ 169.772565][T10440] syzkaller0: entered allmulticast mode [ 169.807317][T10445] netlink: 'syz.4.2634': attribute type 13 has an invalid length. [ 169.815184][T10445] netlink: 'syz.4.2634': attribute type 27 has an invalid length. [ 169.854535][T10450] syzkaller0: entered promiscuous mode [ 169.859995][T10450] syzkaller0: entered allmulticast mode [ 169.986911][T10468] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.993316][T10468] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 170.002034][T10468] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 170.017007][T10468] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2641: attempt to clear invalid blocks 2 len 1 [ 170.023325][T10467] syzkaller0: entered promiscuous mode [ 170.035474][T10467] syzkaller0: entered allmulticast mode [ 170.035543][T10468] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2641: invalid indirect mapped block 1819239214 (level 0) [ 170.055219][T10468] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2641: invalid indirect mapped block 1819239214 (level 1) [ 170.069647][T10468] EXT4-fs (loop3): 1 truncate cleaned up [ 170.168961][T10474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.180733][T10474] EXT4-fs (loop4): 1 orphan inode deleted [ 170.186492][T10474] EXT4-fs (loop4): 1 truncate cleaned up [ 170.251928][T10481] syzkaller0: entered promiscuous mode [ 170.257430][T10481] syzkaller0: entered allmulticast mode [ 170.311361][T10487] EXT4-fs (loop1): orphan cleanup on readonly fs [ 170.317806][T10487] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 170.334280][T10487] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 170.341512][T10490] syzkaller0: entered promiscuous mode [ 170.352679][T10487] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2649: attempt to clear invalid blocks 2 len 1 [ 170.354194][T10490] syzkaller0: entered allmulticast mode [ 170.373692][T10487] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2649: invalid indirect mapped block 1819239214 (level 0) [ 170.395231][T10487] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2649: invalid indirect mapped block 1819239214 (level 1) [ 170.412560][T10487] EXT4-fs (loop1): 1 truncate cleaned up [ 170.445425][T10487] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.2649: Abort forced by user [ 170.455638][T10487] EXT4-fs (loop1): Remounting filesystem read-only [ 170.462175][T10487] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.509163][T10499] syzkaller0: entered promiscuous mode [ 170.514681][T10499] syzkaller0: entered allmulticast mode [ 170.683081][T10513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.689493][T10513] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 170.697972][T10513] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 170.712544][T10513] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2660: attempt to clear invalid blocks 2 len 1 [ 170.725816][T10513] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2660: invalid indirect mapped block 1819239214 (level 0) [ 170.740107][T10513] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2660: invalid indirect mapped block 1819239214 (level 1) [ 170.754478][T10513] EXT4-fs (loop4): 1 truncate cleaned up [ 170.939944][T10519] xfrm1: entered promiscuous mode [ 170.963540][T10522] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.076631][T10527] syzkaller0: entered promiscuous mode [ 171.082227][T10527] syzkaller0: entered allmulticast mode [ 171.191887][T10531] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.203915][T10531] EXT4-fs (loop2): 1 orphan inode deleted [ 171.209680][T10531] EXT4-fs (loop2): 1 truncate cleaned up [ 171.296968][T10536] lo speed is unknown, defaulting to 1000 [ 171.342460][T10539] __nla_validate_parse: 13 callbacks suppressed [ 171.342476][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 171.358453][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 171.375557][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 171.384926][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 171.416571][T10542] syzkaller0: entered promiscuous mode [ 171.422133][T10542] syzkaller0: entered allmulticast mode [ 171.448635][T10544] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.455074][T10544] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 171.463953][T10544] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 171.481149][T10544] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2671: attempt to clear invalid blocks 2 len 1 [ 171.494357][T10544] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2671: invalid indirect mapped block 1819239214 (level 0) [ 171.508752][T10544] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2671: invalid indirect mapped block 1819239214 (level 1) [ 171.524921][T10544] EXT4-fs (loop0): 1 truncate cleaned up [ 171.652163][T10554] syzkaller0: entered promiscuous mode [ 171.657674][T10554] syzkaller0: entered allmulticast mode [ 171.708930][T10558] set_capacity_and_notify: 10 callbacks suppressed [ 171.708944][T10558] loop1: detected capacity change from 0 to 512 [ 171.726264][T10558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.732714][T10558] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 171.740969][T10558] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 171.755595][T10558] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2677: attempt to clear invalid blocks 2 len 1 [ 171.768683][T10558] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2677: invalid indirect mapped block 1819239214 (level 0) [ 171.782912][T10558] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2677: invalid indirect mapped block 1819239214 (level 1) [ 171.797396][T10561] loop0: detected capacity change from 0 to 164 [ 171.803939][T10558] EXT4-fs (loop1): 1 truncate cleaned up [ 171.833429][ T1019] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.853267][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 171.865230][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 171.874630][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 171.883849][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 171.893443][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 171.934172][T10569] syzkaller0: entered promiscuous mode [ 171.939680][T10569] syzkaller0: entered allmulticast mode [ 172.131331][T10579] loop4: detected capacity change from 0 to 512 [ 172.139195][T10579] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.145729][T10579] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 172.158813][T10579] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 172.173736][T10579] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2686: attempt to clear invalid blocks 2 len 1 [ 172.187280][T10579] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2686: invalid indirect mapped block 1819239214 (level 0) [ 172.201836][T10579] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2686: invalid indirect mapped block 1819239214 (level 1) [ 172.216548][T10579] EXT4-fs (loop4): 1 truncate cleaned up [ 172.329374][T10590] loop3: detected capacity change from 0 to 512 [ 172.336514][T10590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.348525][T10590] EXT4-fs (loop3): 1 orphan inode deleted [ 172.354350][T10590] EXT4-fs (loop3): 1 truncate cleaned up [ 172.378040][T10584] SELinux: failed to load policy [ 172.387083][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 172.424891][T10595] loop4: detected capacity change from 0 to 512 [ 172.443425][T10595] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.449809][T10595] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 172.478648][T10595] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 172.493825][T10595] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2693: attempt to clear invalid blocks 2 len 1 [ 172.507299][T10595] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2693: invalid indirect mapped block 1819239214 (level 0) [ 172.521884][T10595] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2693: invalid indirect mapped block 1819239214 (level 1) [ 172.536412][T10595] EXT4-fs (loop4): 1 truncate cleaned up [ 172.544431][T10595] EXT4-fs mount: 61 callbacks suppressed [ 172.544458][T10595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.593524][T10603] syzkaller0: entered promiscuous mode [ 172.599097][T10603] syzkaller0: entered allmulticast mode [ 172.605191][T10595] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.2693: Abort forced by user [ 172.616346][T10595] EXT4-fs (loop4): Remounting filesystem read-only [ 172.623030][T10595] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 172.631143][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 172.631221][ T29] audit: type=1326 audit(1767398021.338:21229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.661489][ T29] audit: type=1326 audit(1767398021.338:21230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.685120][ T29] audit: type=1326 audit(1767398021.338:21231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.708690][ T29] audit: type=1326 audit(1767398021.338:21232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.732313][ T29] audit: type=1326 audit(1767398021.338:21233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.755959][ T29] audit: type=1326 audit(1767398021.338:21234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.779531][ T29] audit: type=1326 audit(1767398021.338:21235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.803168][ T29] audit: type=1326 audit(1767398021.338:21236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.826789][ T29] audit: type=1326 audit(1767398021.338:21237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.850528][ T29] audit: type=1326 audit(1767398021.348:21238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10566 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa87cad2005 code=0x7ffc0000 [ 172.882199][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.011243][T10619] loop4: detected capacity change from 0 to 512 [ 173.022846][T10619] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.029212][T10619] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 173.052594][T10619] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 173.067422][T10619] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2703: attempt to clear invalid blocks 2 len 1 [ 173.080674][T10619] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2703: invalid indirect mapped block 1819239214 (level 0) [ 173.095042][T10619] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2703: invalid indirect mapped block 1819239214 (level 1) [ 173.109402][T10619] EXT4-fs (loop4): 1 truncate cleaned up [ 173.115611][T10619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.146992][T10614] loop2: detected capacity change from 0 to 1024 [ 173.162187][T10614] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.170015][T10614] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.181453][T10614] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 173.199728][T10614] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 173.211489][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.225945][T10614] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 173.239271][T10614] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 173.239519][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.306673][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.393617][T10629] loop3: detected capacity change from 0 to 512 [ 173.401268][T10629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.422425][T10629] EXT4-fs (loop3): 1 orphan inode deleted [ 173.428220][T10629] EXT4-fs (loop3): 1 truncate cleaned up [ 173.469556][T10629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.493853][T10637] syzkaller0: entered promiscuous mode [ 173.499364][T10637] syzkaller0: entered allmulticast mode [ 173.506070][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.544736][T10638] lo speed is unknown, defaulting to 1000 [ 173.736859][T10658] 9p: Bad value for 'wfdno' [ 173.870763][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.870871][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 174.441158][T10664] syzkaller0: entered promiscuous mode [ 174.446685][T10664] syzkaller0: entered allmulticast mode [ 174.683801][T10670] loop2: detected capacity change from 0 to 1024 [ 174.690729][T10670] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 174.929193][T10680] syzkaller0: entered promiscuous mode [ 174.934801][T10680] syzkaller0: entered allmulticast mode [ 175.076677][T10689] lo speed is unknown, defaulting to 1000 [ 175.498282][T10708] loop2: detected capacity change from 0 to 512 [ 175.509990][T10708] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.516417][T10708] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 175.525336][T10708] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 175.540222][T10708] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2734: attempt to clear invalid blocks 2 len 1 [ 175.553541][T10708] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2734: invalid indirect mapped block 1819239214 (level 0) [ 175.581974][T10708] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2734: invalid indirect mapped block 1819239214 (level 1) [ 175.596599][T10708] EXT4-fs (loop2): 1 truncate cleaned up [ 175.597511][T10711] syzkaller0: entered promiscuous mode [ 175.603013][T10708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.607774][T10711] syzkaller0: entered allmulticast mode [ 175.764597][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.765358][T10716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10716 comm=syz.4.2737 [ 175.863487][T10720] syzkaller0: entered promiscuous mode [ 175.868982][T10720] syzkaller0: entered allmulticast mode [ 176.868523][T10740] syzkaller0: entered promiscuous mode [ 176.874032][T10740] syzkaller0: entered allmulticast mode [ 176.958015][T10744] loop3: detected capacity change from 0 to 512 [ 176.966749][T10744] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.973141][T10744] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 176.981976][T10744] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 176.996514][T10744] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2749: attempt to clear invalid blocks 2 len 1 [ 177.009786][T10744] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2749: invalid indirect mapped block 1819239214 (level 0) [ 177.023879][T10744] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2749: invalid indirect mapped block 1819239214 (level 1) [ 177.038275][T10744] EXT4-fs (loop3): 1 truncate cleaned up [ 177.044204][T10744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.059633][T10744] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.2749: Abort forced by user [ 177.069833][T10744] EXT4-fs (loop3): Remounting filesystem read-only [ 177.076461][T10744] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.108595][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.213618][T10752] lo speed is unknown, defaulting to 1000 [ 177.231741][T10754] __nla_validate_parse: 14 callbacks suppressed [ 177.231757][T10754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2753'. [ 177.693169][T10769] syzkaller0: entered promiscuous mode [ 177.698682][T10769] syzkaller0: entered allmulticast mode [ 177.869271][T10773] loop2: detected capacity change from 0 to 512 [ 177.880091][T10773] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.886537][T10773] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 177.901277][T10773] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 177.917064][T10773] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2760: attempt to clear invalid blocks 2 len 1 [ 177.943048][T10773] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2760: invalid indirect mapped block 1819239214 (level 0) [ 177.957445][T10773] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2760: invalid indirect mapped block 1819239214 (level 1) [ 177.980745][T10773] EXT4-fs (loop2): 1 truncate cleaned up [ 177.994299][T10773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.024894][T10773] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.2760: Abort forced by user [ 178.035765][T10773] EXT4-fs (loop2): Remounting filesystem read-only [ 178.042481][T10773] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 178.064173][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.178290][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 178.178307][ T29] audit: type=1326 audit(1767398026.878:21440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.211400][ T29] audit: type=1326 audit(1767398026.878:21441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.214038][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'. [ 178.235138][ T29] audit: type=1326 audit(1767398026.908:21442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.243931][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'. [ 178.267483][ T29] audit: type=1326 audit(1767398026.908:21443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.299955][ T29] audit: type=1326 audit(1767398026.908:21444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.324343][ T29] audit: type=1326 audit(1767398026.918:21445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.325806][T10782] 9p: Bad value for 'wfdno' [ 178.348042][ T29] audit: type=1326 audit(1767398026.918:21446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.376419][ T29] audit: type=1326 audit(1767398026.918:21447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.400071][ T29] audit: type=1326 audit(1767398027.028:21448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.423712][ T29] audit: type=1326 audit(1767398027.028:21449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cece5f749 code=0x7ffc0000 [ 178.500901][T10793] syzkaller0: entered promiscuous mode [ 178.506473][T10793] syzkaller0: entered allmulticast mode [ 178.533257][T10795] syzkaller0: entered promiscuous mode [ 178.538748][T10795] syzkaller0: entered allmulticast mode [ 178.652946][T10803] loop1: detected capacity change from 0 to 512 [ 178.661889][T10805] loop2: detected capacity change from 0 to 512 [ 178.676530][T10803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.683030][T10803] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 178.696994][T10805] EXT4-fs (loop2): orphan cleanup on readonly fs [ 178.703487][T10805] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 178.710105][T10803] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 178.726522][T10805] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 178.726581][T10803] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2773: attempt to clear invalid blocks 2 len 1 [ 178.740981][T10805] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2774: attempt to clear invalid blocks 2 len 1 [ 178.754843][T10803] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2773: invalid indirect mapped block 1819239214 (level 0) [ 178.780977][T10803] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2773: invalid indirect mapped block 1819239214 (level 1) [ 178.781018][T10805] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2774: invalid indirect mapped block 1819239214 (level 0) [ 178.800995][T10803] EXT4-fs (loop1): 1 truncate cleaned up [ 178.809442][T10805] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2774: invalid indirect mapped block 1819239214 (level 1) [ 178.814956][T10803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.829036][T10805] EXT4-fs (loop2): 1 truncate cleaned up [ 178.846925][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.869622][T10803] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.2773: Abort forced by user [ 178.880067][T10803] EXT4-fs (loop1): Remounting filesystem read-only [ 178.880882][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.886613][T10803] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 178.942701][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.003334][T10824] syzkaller0: entered promiscuous mode [ 179.008846][T10824] syzkaller0: entered allmulticast mode [ 179.164935][T10829] lo speed is unknown, defaulting to 1000 [ 179.265932][T10837] loop1: detected capacity change from 0 to 512 [ 179.280563][T10837] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.287014][T10837] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 179.301215][T10837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 179.329127][T10837] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2787: attempt to clear invalid blocks 2 len 1 [ 179.342347][T10837] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2787: invalid indirect mapped block 1819239214 (level 0) [ 179.356733][T10837] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2787: invalid indirect mapped block 1819239214 (level 1) [ 179.371071][T10837] EXT4-fs (loop1): 1 truncate cleaned up [ 179.377032][T10837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.399915][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.438562][T10847] syzkaller0: entered promiscuous mode [ 179.444104][T10847] syzkaller0: entered allmulticast mode [ 179.709719][T10863] lo speed is unknown, defaulting to 1000 [ 180.007042][T10874] lo speed is unknown, defaulting to 1000 [ 180.056417][T10874] chnl_net:caif_netlink_parms(): no params data found [ 180.090620][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.097678][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.104909][T10874] bridge_slave_0: entered allmulticast mode [ 180.111272][T10874] bridge_slave_0: entered promiscuous mode [ 180.117714][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.124778][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.131959][T10874] bridge_slave_1: entered allmulticast mode [ 180.138306][T10874] bridge_slave_1: entered promiscuous mode [ 180.161803][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.177853][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.201060][T10874] team0: Port device team_slave_0 added [ 180.207678][T10874] team0: Port device team_slave_1 added [ 180.224489][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.231483][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.257450][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.268558][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.275576][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.301518][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.354898][T10874] hsr_slave_0: entered promiscuous mode [ 180.363186][T10897] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2806'. [ 180.372852][T10874] hsr_slave_1: entered promiscuous mode [ 180.378973][T10874] debugfs: 'hsr0' already exists in 'hsr' [ 180.384799][T10874] Cannot create hsr debugfs directory [ 180.390674][T10897] 0ªX¹¦À: renamed from caif0 [ 180.399340][T10897] 0ªX¹¦À: entered allmulticast mode [ 180.404617][T10897] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 180.437854][T10902] lo speed is unknown, defaulting to 1000 [ 180.564625][T10914] loop4: detected capacity change from 0 to 512 [ 180.578553][T10914] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.584994][T10914] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 180.594017][T10914] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.597820][T10917] loop0: detected capacity change from 0 to 512 [ 180.609374][T10914] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2812: attempt to clear invalid blocks 2 len 1 [ 180.629192][T10914] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2812: invalid indirect mapped block 1819239214 (level 0) [ 180.643430][T10914] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2812: invalid indirect mapped block 1819239214 (level 1) [ 180.649614][T10917] EXT4-fs (loop0): orphan cleanup on readonly fs [ 180.657881][T10914] EXT4-fs (loop4): 1 truncate cleaned up [ 180.663889][T10917] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 180.670031][T10914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.678919][T10917] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.705679][T10917] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2813: attempt to clear invalid blocks 2 len 1 [ 180.718717][T10917] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2813: invalid indirect mapped block 1819239214 (level 0) [ 180.732994][T10917] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2813: invalid indirect mapped block 1819239214 (level 1) [ 180.747287][T10917] EXT4-fs (loop0): 1 truncate cleaned up [ 180.753519][T10917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.803270][T10874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.815753][T10874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.827004][T10874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.836590][T10874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.852083][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.885205][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.931751][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.946382][T10874] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.956720][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.958687][T10922] loop2: detected capacity change from 0 to 1024 [ 180.963807][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.968279][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.984458][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.985385][T10922] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.008130][T10922] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.021665][T10922] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 181.054679][T10922] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 181.066791][T10922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.099816][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 181.105022][T10922] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 181.122202][T10922] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 181.127235][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 181.152524][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.184689][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.261762][T10953] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2821'. [ 181.272200][T10874] veth0_vlan: entered promiscuous mode [ 181.282992][T10874] veth1_vlan: entered promiscuous mode [ 181.313984][T10874] veth0_macvtap: entered promiscuous mode [ 181.322723][T10874] veth1_macvtap: entered promiscuous mode [ 181.336496][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.343793][T10953] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.346315][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.358238][T10961] loop2: detected capacity change from 0 to 128 [ 181.402754][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.415393][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.425764][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.438038][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.490209][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 181.501006][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 181.510421][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 181.611729][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.611729][ T290] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 181.631736][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.631736][ T290] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 181.656357][T10981] loop3: detected capacity change from 0 to 512 [ 181.663051][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.663051][ T290] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 181.677288][T10981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.688648][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.688648][ T290] loop2: rw=1, sector=193, nr_sectors = 72 limit=128 [ 181.694819][T10979] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.704082][T10981] EXT4-fs (loop3): 1 orphan inode deleted [ 181.714408][T10981] EXT4-fs (loop3): 1 truncate cleaned up [ 181.727522][T10981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.740557][T10979] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.744464][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.744464][ T290] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 181.772848][T10979] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 181.792077][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.792077][ T290] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 181.805573][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.805573][ T290] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 181.822108][T10979] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 181.825708][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.840893][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.840893][ T290] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 181.843144][T10985] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.861893][T10985] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 181.866732][T10979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.870181][T10985] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 181.897298][T10985] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2833: attempt to clear invalid blocks 2 len 1 [ 181.899890][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.899890][ T290] loop2: rw=1, sector=337, nr_sectors = 8 limit=128 [ 181.914729][T10985] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2833: invalid indirect mapped block 1819239214 (level 0) [ 181.937829][T10985] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2833: invalid indirect mapped block 1819239214 (level 1) [ 181.948625][T10979] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 181.952258][ T290] kworker/u8:5: attempt to access beyond end of device [ 181.952258][ T290] loop2: rw=1, sector=353, nr_sectors = 8 limit=128 [ 181.978265][T10985] EXT4-fs (loop4): 1 truncate cleaned up [ 181.984550][T10985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.997395][T10979] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 182.038254][T10985] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.2833: Abort forced by user [ 182.049038][T10985] EXT4-fs (loop4): Remounting filesystem read-only [ 182.050451][T10874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.055639][T10985] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 182.101329][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.112252][ T290] bridge_slave_1: left allmulticast mode [ 182.117942][ T290] bridge_slave_1: left promiscuous mode [ 182.123875][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.168128][ T290] bridge_slave_0: left allmulticast mode [ 182.173981][ T290] bridge_slave_0: left promiscuous mode [ 182.179933][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.210250][T10998] set_capacity_and_notify: 2 callbacks suppressed [ 182.210267][T10998] loop0: detected capacity change from 0 to 512 [ 182.225019][T10998] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 182.247095][T10998] __nla_validate_parse: 1 callbacks suppressed [ 182.247113][T10998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2839'. [ 182.298994][ T290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.321369][ T290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.333838][ T290] bond0 (unregistering): Released all slaves [ 182.351449][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2837'. [ 182.386229][ T290] hsr_slave_0: left promiscuous mode [ 182.392683][ T290] hsr_slave_1: left promiscuous mode [ 182.403966][ T290] pimreg (unregistering): left allmulticast mode [ 182.470734][ T290] team0 (unregistering): Port device team_slave_1 removed [ 182.482532][ T290] team0 (unregistering): Port device team_slave_0 removed [ 182.517376][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 182.541603][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 182.695650][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 182.704586][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2856'. [ 182.730807][T11045] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 182.743171][T11045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.762639][T11045] bond2: (slave dummy0): making interface the new active one [ 182.771686][T11045] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 182.789756][T11045] bond2 (unregistering): (slave dummy0): Releasing active interface [ 182.799336][T11045] bond2 (unregistering): Released all slaves [ 182.839279][ T290] IPVS: stop unused estimator thread 0... [ 183.033235][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'. [ 183.044180][T11063] syzkaller0: entered promiscuous mode [ 183.049672][T11063] syzkaller0: entered allmulticast mode [ 183.102511][T11070] loop1: detected capacity change from 0 to 512 [ 183.110067][T11070] EXT4-fs (loop1): orphan cleanup on readonly fs [ 183.116461][T11070] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 183.125072][T11070] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 183.139679][T11070] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2867: attempt to clear invalid blocks 2 len 1 [ 183.156476][T11070] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2867: invalid indirect mapped block 1819239214 (level 0) [ 183.170834][T11070] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2867: invalid indirect mapped block 1819239214 (level 1) [ 183.185167][T11070] EXT4-fs (loop1): 1 truncate cleaned up [ 183.191246][T11070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.205305][T11070] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.2867: Abort forced by user [ 183.215546][T11070] EXT4-fs (loop1): Remounting filesystem read-only [ 183.222085][T11070] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 183.237264][T10874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.498250][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 183.498265][ T29] audit: type=1326 audit(1767398032.198:21597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.529213][ T29] audit: type=1326 audit(1767398032.198:21598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.552984][ T29] audit: type=1326 audit(1767398032.198:21599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.576575][ T29] audit: type=1326 audit(1767398032.228:21600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.600214][ T29] audit: type=1326 audit(1767398032.228:21601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.623778][ T29] audit: type=1326 audit(1767398032.228:21602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.647357][ T29] audit: type=1326 audit(1767398032.228:21603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.670928][ T29] audit: type=1326 audit(1767398032.228:21604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.673589][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 183.694553][ T29] audit: type=1326 audit(1767398032.228:21605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f63f24bf749 code=0x7ffc0000 [ 183.702059][ T29] audit: type=1326 audit(1767398032.298:21606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63f24f2005 code=0x7ffc0000 [ 183.782162][T11097] syzkaller0: entered promiscuous mode [ 183.787682][T11097] syzkaller0: entered allmulticast mode [ 183.975985][T11110] loop0: detected capacity change from 0 to 512 [ 183.983674][T11110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.004393][T11110] EXT4-fs (loop0): 1 orphan inode deleted [ 184.010232][T11110] EXT4-fs (loop0): 1 truncate cleaned up [ 184.110799][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 184.116960][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.145007][T11110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.196177][ T1019] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.224689][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.242890][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 184.330194][T11126] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 184.338927][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 184.484655][T11134] loop0: detected capacity change from 0 to 1024 [ 184.491447][T11134] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.500856][T11134] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.521910][T11134] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 184.539820][T11134] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 184.551489][T11134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.567539][T11134] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 184.580302][T11134] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 184.624563][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.800985][T11153] 0ªX¹¦À: left allmulticast mode [ 184.806379][T11153] team2: left promiscuous mode [ 184.811227][T11153] team2: left allmulticast mode [ 184.825940][T11155] syzkaller0: entered promiscuous mode [ 184.831576][T11155] syzkaller0: entered allmulticast mode [ 184.979624][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bce4a00: rx timeout, send abort [ 185.146850][T11176] lo speed is unknown, defaulting to 1000 [ 185.479643][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba6fe00: rx timeout, send abort [ 185.488062][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bce4a00: abort rx timeout. Force session deactivation [ 185.881301][T11211] syzkaller0: entered promiscuous mode [ 185.886909][T11211] syzkaller0: entered allmulticast mode [ 185.987914][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba6fe00: abort rx timeout. Force session deactivation [ 186.270813][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 186.277005][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.384516][T11231] loop1: detected capacity change from 0 to 512 [ 186.412019][T11231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.424485][T11231] EXT4-fs (loop1): 1 orphan inode deleted [ 186.430214][T11231] EXT4-fs (loop1): 1 truncate cleaned up [ 186.453473][T11231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.634698][T10874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.704471][T11254] 9p: Bad value for 'wfdno' [ 187.188419][ T1019] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.240342][T11296] loop3: detected capacity change from 0 to 1024 [ 187.250733][T11296] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.262700][T11296] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.274805][T11296] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 187.292873][T11296] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 187.305377][T11296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.324941][T11296] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 187.328407][T11301] __nla_validate_parse: 24 callbacks suppressed [ 187.328423][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2960'. [ 187.338036][T11296] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 187.385789][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'. [ 187.413629][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.458810][T11305] netlink: 'syz.0.2962': attribute type 11 has an invalid length. [ 187.470083][T11305] loop0: detected capacity change from 0 to 512 [ 187.493838][T11305] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 187.502008][T11305] EXT4-fs (loop0): orphan cleanup on readonly fs [ 187.508814][T11305] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2962: Failed to acquire dquot type 1 [ 187.520217][T11305] EXT4-fs (loop0): Remounting filesystem read-only [ 187.526958][T11305] EXT4-fs (loop0): 1 truncate cleaned up [ 187.536051][T11305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.541787][T11309] loop4: detected capacity change from 0 to 512 [ 187.548889][T11305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.619935][T11309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.679505][T11309] EXT4-fs (loop4): 1 orphan inode deleted [ 187.685404][T11309] EXT4-fs (loop4): 1 truncate cleaned up [ 187.712217][T11309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.798471][T11315] lo speed is unknown, defaulting to 1000 [ 188.107868][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.573897][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 188.573913][ T29] audit: type=1326 audit(1767398037.278:21776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.603802][ T29] audit: type=1326 audit(1767398037.278:21777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.604973][T11347] lo speed is unknown, defaulting to 1000 [ 188.627496][ T29] audit: type=1326 audit(1767398037.278:21778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.656779][ T29] audit: type=1326 audit(1767398037.278:21779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.680522][ T29] audit: type=1326 audit(1767398037.278:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.704133][ T29] audit: type=1326 audit(1767398037.278:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.704486][T11343] loop0: detected capacity change from 0 to 512 [ 188.727755][ T29] audit: type=1326 audit(1767398037.278:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.727795][ T29] audit: type=1326 audit(1767398037.278:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.727820][ T29] audit: type=1326 audit(1767398037.278:21784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.730882][ T29] audit: type=1326 audit(1767398037.368:21785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639791f749 code=0x7ffc0000 [ 188.734914][T11343] EXT4-fs: Ignoring removed nobh option [ 188.843187][T11343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.844144][T11347] chnl_net:caif_netlink_parms(): no params data found [ 188.855788][T11343] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.895525][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.902701][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.909840][T11347] bridge_slave_0: entered allmulticast mode [ 188.916337][T11347] bridge_slave_0: entered promiscuous mode [ 188.923194][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.930465][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.937749][T11347] bridge_slave_1: entered allmulticast mode [ 188.938385][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.944575][T11347] bridge_slave_1: entered promiscuous mode [ 188.987208][T11347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.998147][T11347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.020398][T11347] team0: Port device team_slave_0 added [ 189.027148][T11347] team0: Port device team_slave_1 added [ 189.049837][T11347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.056838][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.082745][T11347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.094137][T11347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.101119][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.127111][T11347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.141344][T11372] syzkaller0: entered promiscuous mode [ 189.146827][T11372] syzkaller0: entered allmulticast mode [ 189.166411][T11347] hsr_slave_0: entered promiscuous mode [ 189.172279][T11347] hsr_slave_1: entered promiscuous mode [ 189.177986][T11347] debugfs: 'hsr0' already exists in 'hsr' [ 189.183727][T11347] Cannot create hsr debugfs directory [ 189.230920][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.230994][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 189.488238][T11387] loop0: detected capacity change from 0 to 1024 [ 189.495040][T11387] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.511433][T11387] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.532683][T11387] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 189.551117][T11387] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm ÿ: couldn't read orphan inode 11 (err -117) [ 189.559283][T11347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.569646][T11387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.583998][T11387] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 189.599061][T11387] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 189.612883][T11347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.624504][T11347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.648580][T11347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.669517][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.679096][T11390] lo speed is unknown, defaulting to 1000 [ 189.775655][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 189.841517][T11400] team2: entered promiscuous mode [ 189.846595][T11400] team2: entered allmulticast mode [ 189.852530][T11400] 8021q: adding VLAN 0 to HW filter on device team2 [ 189.898058][T11347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.939072][T11347] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.965748][ T2147] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.972918][ T2147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.996385][ T2147] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.003522][ T2147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.114128][T11347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.205701][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'. [ 190.234040][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2991'. [ 190.251522][T11424] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2992'. [ 190.351764][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 190.361366][T11347] veth0_vlan: entered promiscuous mode [ 190.369781][T11347] veth1_vlan: entered promiscuous mode [ 190.388354][T11347] veth0_macvtap: entered promiscuous mode [ 190.415055][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 190.437706][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'. [ 190.438004][T11347] veth1_macvtap: entered promiscuous mode [ 190.482101][T11347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.508663][T11347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.533358][ T340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.536505][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 190.558189][ T340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.569263][ T340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.624821][ T340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.679195][T11464] loop2: detected capacity change from 0 to 512 [ 190.732743][T11464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.774670][T11473] loop3: detected capacity change from 0 to 1024 [ 190.787687][T11464] EXT4-fs (loop2): 1 orphan inode deleted [ 190.793561][T11464] EXT4-fs (loop2): 1 truncate cleaned up [ 190.810183][T11473] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.819954][T11473] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.820248][T11464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.871894][T11473] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 191.007345][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.016447][T11473] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3008: couldn't read orphan inode 11 (err -117) [ 191.047407][T11473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.066675][T11468] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ÿ: Invalid block bitmap block 0 in block_group 0 [ 191.081745][T11468] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 191.142760][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.415455][T11496] loop2: detected capacity change from 0 to 512 [ 191.426437][T11496] EXT4-fs: Ignoring removed nobh option [ 191.455808][T11496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.473604][T11496] ext4 filesystem being mounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.565666][T11516] syzkaller0: entered promiscuous mode [ 191.571192][T11516] syzkaller0: entered allmulticast mode [ 191.585657][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.787495][ T3007] ================================================================== [ 191.795617][ T3007] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 191.803625][ T3007] [ 191.805960][ T3007] write to 0xffff888136581330 of 8 bytes by task 3301 on cpu 1: [ 191.813591][ T3007] dentry_unlink_inode+0x65/0x260 [ 191.818623][ T3007] d_delete+0x164/0x180 [ 191.822795][ T3007] d_delete_notify+0x32/0x100 [ 191.827479][ T3007] vfs_unlink+0x32c/0x440 [ 191.831817][ T3007] do_unlinkat+0x1cd/0x4b0 [ 191.836248][ T3007] __x64_sys_unlink+0x2e/0x40 [ 191.840936][ T3007] x64_sys_call+0x2f48/0x3000 [ 191.845620][ T3007] do_syscall_64+0xca/0x2b0 [ 191.850133][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.856029][ T3007] [ 191.858353][ T3007] read to 0xffff888136581330 of 8 bytes by task 3007 on cpu 0: [ 191.865891][ T3007] step_into_slowpath+0x113/0x480 [ 191.870923][ T3007] path_lookupat+0x330/0x500 [ 191.875514][ T3007] filename_lookup+0x147/0x340 [ 191.880287][ T3007] do_readlinkat+0x7d/0x320 [ 191.884793][ T3007] __x64_sys_readlink+0x47/0x60 [ 191.889654][ T3007] x64_sys_call+0x2af1/0x3000 [ 191.894335][ T3007] do_syscall_64+0xca/0x2b0 [ 191.898844][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.904736][ T3007] [ 191.907056][ T3007] value changed: 0xffff88812627c650 -> 0x0000000000000000 [ 191.914159][ T3007] [ 191.916477][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 191.922623][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.931904][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.941957][ T3007] ================================================================== [ 192.140037][T11550] loop4: detected capacity change from 0 to 512 [ 192.146951][T11550] EXT4-fs: Ignoring removed nobh option [ 192.183388][T11550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.196176][T11550] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.253384][T11347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.