last executing test programs: 7.949569955s ago: executing program 0 (id=61): syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000280)=""/176, 0xb0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000740)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdee) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f0000004900), 0x4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x400) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) getgid() pidfd_send_signal(r5, 0x2, 0x0, 0x0) 7.257215676s ago: executing program 0 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.68948281s ago: executing program 0 (id=74): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 6.309704986s ago: executing program 0 (id=77): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xe6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 6.073518786s ago: executing program 0 (id=81): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 4.39503135s ago: executing program 1 (id=99): socket$inet(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 4.14958607s ago: executing program 3 (id=101): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket(0x40000000015, 0x5, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 3.996730607s ago: executing program 1 (id=102): socket$inet(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$kcm(0x29, 0x5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000e020d979", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.741690248s ago: executing program 0 (id=104): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) lseek(r1, 0xf9ff100000000000, 0x3) 3.091452016s ago: executing program 3 (id=107): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 2.970096002s ago: executing program 1 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6(0xa, 0x80800, 0x7f) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) unshare(0x22020600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 2.885565035s ago: executing program 2 (id=109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb0, 0x1, [@m_tunnel_key={0x78, 0x5, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}]}, {0xd, 0x6, "67a638128ad3f52f2e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4c800}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.749042361s ago: executing program 3 (id=110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2.565115999s ago: executing program 2 (id=111): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x1, 0x0) 2.407167586s ago: executing program 3 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_read_part_table(0x5c4, &(0x7f0000000980)="$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") 2.094164s ago: executing program 1 (id=113): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x111) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) fallocate(r2, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.012386583s ago: executing program 2 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000040)="1d", 0x1, 0x41, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.697859047s ago: executing program 3 (id=115): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001580)) 1.484888866s ago: executing program 1 (id=116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76bf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) 1.277516245s ago: executing program 3 (id=117): socket$inet(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$kcm(0x29, 0x5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000e020d979", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 704.84406ms ago: executing program 2 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40) 417.710302ms ago: executing program 2 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 261.624409ms ago: executing program 1 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000480)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nombcache}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") 0s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6(0xa, 0x80800, 0x7f) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 82.453586][ T5779] cgroup: Unknown subsys name 'net' [ 82.569090][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.257786][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.676892][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.687119][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.695409][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.703869][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.712018][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.722029][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.730381][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.738598][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.746237][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.754551][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.761967][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.763436][ T5805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.776631][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.780214][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.800560][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.809655][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.819643][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.833729][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.848767][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.858394][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.869711][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.881317][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.899629][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.907207][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.388143][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 87.577662][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 87.604640][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 87.773871][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.782717][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.790203][ T5797] bridge_slave_0: entered allmulticast mode [ 87.797569][ T5797] bridge_slave_0: entered promiscuous mode [ 87.809149][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.816696][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.824324][ T5797] bridge_slave_1: entered allmulticast mode [ 87.832113][ T5797] bridge_slave_1: entered promiscuous mode [ 87.844628][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 87.961726][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.968956][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.977255][ T5798] bridge_slave_0: entered allmulticast mode [ 87.984823][ T5798] bridge_slave_0: entered promiscuous mode [ 87.999221][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.020609][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.027771][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.035856][ T5798] bridge_slave_1: entered allmulticast mode [ 88.043869][ T5798] bridge_slave_1: entered promiscuous mode [ 88.057701][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.163111][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.170429][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.177608][ T5792] bridge_slave_0: entered allmulticast mode [ 88.186133][ T5792] bridge_slave_0: entered promiscuous mode [ 88.199113][ T5797] team0: Port device team_slave_0 added [ 88.219600][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.229042][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.236724][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.244805][ T5792] bridge_slave_1: entered allmulticast mode [ 88.251927][ T5792] bridge_slave_1: entered promiscuous mode [ 88.260878][ T5797] team0: Port device team_slave_1 added [ 88.280537][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.287785][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.295259][ T5794] bridge_slave_0: entered allmulticast mode [ 88.302775][ T5794] bridge_slave_0: entered promiscuous mode [ 88.314967][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.353339][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.382021][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.389184][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.396490][ T5794] bridge_slave_1: entered allmulticast mode [ 88.404037][ T5794] bridge_slave_1: entered promiscuous mode [ 88.437854][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.483731][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.492789][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.519862][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.545144][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.552500][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.578933][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.593545][ T5798] team0: Port device team_slave_0 added [ 88.603198][ T5798] team0: Port device team_slave_1 added [ 88.624883][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.646654][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.674249][ T5792] team0: Port device team_slave_0 added [ 88.710348][ T5792] team0: Port device team_slave_1 added [ 88.716786][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.723884][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.750399][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.797406][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.804936][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.831020][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.857985][ T5794] team0: Port device team_slave_0 added [ 88.868083][ T5794] team0: Port device team_slave_1 added [ 88.875765][ T5800] Bluetooth: hci1: command tx timeout [ 88.902115][ T5797] hsr_slave_0: entered promiscuous mode [ 88.908759][ T5797] hsr_slave_1: entered promiscuous mode [ 88.930089][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.937088][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.963830][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.967411][ T5800] Bluetooth: hci2: command tx timeout [ 88.978800][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.981557][ T5802] Bluetooth: hci3: command tx timeout [ 88.987368][ T5795] Bluetooth: hci0: command tx timeout [ 88.999411][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.025537][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.112913][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.120072][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.146226][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.159560][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.166571][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.192770][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.220328][ T5798] hsr_slave_0: entered promiscuous mode [ 89.227646][ T5798] hsr_slave_1: entered promiscuous mode [ 89.234025][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.242101][ T5798] Cannot create hsr debugfs directory [ 89.253046][ T5792] hsr_slave_0: entered promiscuous mode [ 89.259594][ T5792] hsr_slave_1: entered promiscuous mode [ 89.265894][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.273620][ T5792] Cannot create hsr debugfs directory [ 89.376075][ T5794] hsr_slave_0: entered promiscuous mode [ 89.383532][ T5794] hsr_slave_1: entered promiscuous mode [ 89.391197][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.398819][ T5794] Cannot create hsr debugfs directory [ 89.793765][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.811818][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.822814][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.835857][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.906194][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.927120][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.936982][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.952684][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.053559][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.070988][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.081567][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.093722][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.198585][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.218351][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.229773][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.243179][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.274986][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.346157][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.371795][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.394026][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.401474][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.426143][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.433374][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.496580][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.516211][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.523580][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.550371][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.557644][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.588654][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.700109][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.728613][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.772420][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.779661][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.818113][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.825377][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.861335][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.887160][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.894498][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.950472][ T5795] Bluetooth: hci1: command tx timeout [ 90.968831][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.976069][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.030331][ T5795] Bluetooth: hci0: command tx timeout [ 91.035833][ T5795] Bluetooth: hci2: command tx timeout [ 91.036107][ T5800] Bluetooth: hci3: command tx timeout [ 91.155125][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.252038][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.335308][ T5798] veth0_vlan: entered promiscuous mode [ 91.386643][ T5798] veth1_vlan: entered promiscuous mode [ 91.529003][ T5794] veth0_vlan: entered promiscuous mode [ 91.554432][ T5798] veth0_macvtap: entered promiscuous mode [ 91.578465][ T5798] veth1_macvtap: entered promiscuous mode [ 91.595729][ T5794] veth1_vlan: entered promiscuous mode [ 91.625430][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.652383][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.688340][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.702523][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.714897][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.724398][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.733533][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.743175][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.806423][ T5794] veth0_macvtap: entered promiscuous mode [ 91.818904][ T5794] veth1_macvtap: entered promiscuous mode [ 91.882217][ T5792] veth0_vlan: entered promiscuous mode [ 91.934745][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.945574][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.958532][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.978911][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.994114][ T5797] veth0_vlan: entered promiscuous mode [ 91.999549][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.031268][ T5792] veth1_vlan: entered promiscuous mode [ 92.038643][ T5797] veth1_vlan: entered promiscuous mode [ 92.056277][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.067133][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.082903][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.112377][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121649][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.131385][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.140210][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.165413][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.173460][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.226273][ T5792] veth0_macvtap: entered promiscuous mode [ 92.240861][ T5797] veth0_macvtap: entered promiscuous mode [ 92.295845][ T5797] veth1_macvtap: entered promiscuous mode [ 92.313322][ T2131] cfg80211: failed to load regulatory.db [ 92.346172][ T5792] veth1_macvtap: entered promiscuous mode [ 92.405634][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.424577][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.436213][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.447741][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.463086][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.485280][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.498386][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.508262][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.519006][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.529856][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.541449][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.552156][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.562885][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.575297][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.586912][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.598302][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.608954][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.619729][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.631940][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.653913][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.665938][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.677115][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.690268][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.701805][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.712798][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.724865][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.757851][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.767290][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776534][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785426][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.812642][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.821852][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831002][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.839845][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.933479][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.961556][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.005655][ T5888] syz.3.5[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.038995][ T5800] Bluetooth: hci1: command tx timeout [ 93.095078][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.110319][ T5800] Bluetooth: hci2: command tx timeout [ 93.115808][ T5800] Bluetooth: hci0: command tx timeout [ 93.121843][ T5802] Bluetooth: hci3: command tx timeout [ 93.131834][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.163204][ T5888] loop3: detected capacity change from 0 to 2048 [ 93.167672][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.177797][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.264561][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.306276][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.333012][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.426703][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.460629][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.568449][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.660919][ T5899] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 93.868957][ T27] audit: type=1326 audit(1764025395.856:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 93.964352][ T27] audit: type=1326 audit(1764025395.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 94.012974][ T27] audit: type=1326 audit(1764025395.876:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 94.060458][ T27] audit: type=1326 audit(1764025395.876:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 94.255823][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 94.276235][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 95.109714][ T5795] Bluetooth: hci1: command tx timeout [ 95.191712][ T5802] Bluetooth: hci2: command tx timeout [ 95.197479][ T5800] Bluetooth: hci3: command tx timeout [ 95.204002][ T5795] Bluetooth: hci0: command tx timeout [ 95.421236][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 95.461187][ T27] audit: type=1326 audit(1764025397.426:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 95.514754][ T5930] netlink: 16284 bytes leftover after parsing attributes in process `syz.1.13'. [ 95.564802][ T27] audit: type=1326 audit(1764025397.426:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 95.636308][ T27] audit: type=1326 audit(1764025397.426:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 95.677069][ T27] audit: type=1326 audit(1764025397.426:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 95.730786][ T27] audit: type=1326 audit(1764025397.426:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 95.758058][ T27] audit: type=1326 audit(1764025397.426:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 95.778820][ T5937] loop3: detected capacity change from 0 to 512 [ 95.863588][ T5937] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.16: bg 0: block 248: padding at end of block bitmap is not set [ 95.914453][ T5937] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.16: Failed to acquire dquot type 1 [ 95.982351][ T5937] EXT4-fs (loop3): 1 truncate cleaned up [ 96.016626][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.032873][ T5937] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.053292][ T5937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.227493][ T5937] syz.3.16 (5937) used greatest stack depth: 20136 bytes left [ 96.706215][ T5951] loop3: detected capacity change from 0 to 512 [ 96.721379][ T5951] ======================================================= [ 96.721379][ T5951] WARNING: The mand mount option has been deprecated and [ 96.721379][ T5951] and is ignored by this kernel. Remove the mand [ 96.721379][ T5951] option from the mount to silence this warning. [ 96.721379][ T5951] ======================================================= [ 96.962922][ T5951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.075012][ T5951] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.18: invalid block [ 97.101146][ T5951] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.18: invalid indirect mapped block 4294967295 (level 1) [ 97.126723][ T5951] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.18: invalid indirect mapped block 4294967295 (level 1) [ 97.147383][ T5951] EXT4-fs (loop3): 2 truncates cleaned up [ 97.161306][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.473140][ T5956] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 97.592047][ T5953] loop1: detected capacity change from 0 to 512 [ 97.746398][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.879944][ T5953] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.075608][ T5953] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.1.20: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 98.231537][ T5891] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 98.272253][ T5953] EXT4-fs error (device loop1): ext4_get_first_dir_block:3595: inode #12: comm syz.1.20: directory missing '.' [ 98.389285][ C1] sched: RT throttling activated [ 98.577413][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.711545][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.870905][ T27] kauditd_printk_skb: 187 callbacks suppressed [ 98.870920][ T27] audit: type=1326 audit(1764025400.866:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b378f749 code=0x7ffc0000 [ 98.963087][ T27] audit: type=1326 audit(1764025400.866:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b378f749 code=0x7ffc0000 [ 98.995069][ T27] audit: type=1326 audit(1764025400.866:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43b378f749 code=0x7ffc0000 [ 99.054341][ T27] audit: type=1326 audit(1764025400.866:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43b378f749 code=0x7ffc0000 [ 99.120134][ T5980] Zero length message leads to an empty skb [ 99.505921][ T5993] loop2: detected capacity change from 0 to 256 [ 99.629718][ T5995] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 100.646554][ T5996] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 100.666797][ T6001] loop3: detected capacity change from 0 to 128 [ 101.113633][ T6005] syz.1.34[6005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.113794][ T6005] syz.1.34[6005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.208919][ T6005] loop1: detected capacity change from 0 to 1024 [ 101.244903][ T6005] EXT4-fs: Ignoring removed bh option [ 101.261583][ T6005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.340373][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.502138][ T6005] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.34: Allocating blocks 385-513 which overlap fs metadata [ 101.543783][ T6005] EXT4-fs (loop1): pa ffff8880782a6828: logic 16, phys. 129, len 24 [ 101.552704][ T6005] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 101.669110][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.023335][ T6019] loop1: detected capacity change from 0 to 1024 [ 102.040806][ T6019] EXT4-fs: Ignoring removed oldalloc option [ 102.096501][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.181408][ T6019] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.276561][ T6019] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.37: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.329439][ T6019] EXT4-fs (loop1): Remounting filesystem read-only [ 102.438766][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.565671][ T6028] loop0: detected capacity change from 0 to 128 [ 102.655617][ T6031] loop2: detected capacity change from 0 to 512 [ 102.700421][ T6032] netlink: 7 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.746030][ T6032] netlink: 7 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.813480][ T6031] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.43: bg 0: block 248: padding at end of block bitmap is not set [ 102.850724][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 102.902916][ T6036] loop1: detected capacity change from 0 to 128 [ 102.920436][ T6036] FAT-fs (loop1): Unrecognized mount option "00000000000000000000" or missing value [ 102.922044][ T6031] Quota error (device loop2): write_blk: dquota write failed [ 102.977556][ T6031] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 102.986402][ T6028] syz.0.42: attempt to access beyond end of device [ 102.986402][ T6028] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 102.999605][ T6031] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.43: Failed to acquire dquot type 1 [ 103.051268][ T6031] EXT4-fs (loop2): 1 truncate cleaned up [ 103.058339][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.083225][ T6031] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.096685][ T6031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.375505][ T6039] loop0: detected capacity change from 0 to 764 [ 103.387187][ T6041] loop2: detected capacity change from 0 to 128 [ 103.895915][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 104.081799][ T6049] team0: Port device team_slave_1 removed [ 104.377785][ T6060] loop1: detected capacity change from 0 to 2048 [ 104.489005][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.543329][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.760679][ T27] audit: type=1326 audit(1764025406.756:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 104.840176][ T27] audit: type=1326 audit(1764025406.756:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 104.921051][ T27] audit: type=1326 audit(1764025406.756:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.009359][ T27] audit: type=1326 audit(1764025406.786:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.094030][ T27] audit: type=1326 audit(1764025406.786:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.129094][ T6076] loop0: detected capacity change from 0 to 1024 [ 105.146850][ T6076] ext4: Unknown parameter 'uid<00000000000000000000' [ 105.154089][ T27] audit: type=1326 audit(1764025406.786:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.156477][ T6080] loop2: detected capacity change from 0 to 1024 [ 105.219156][ T27] audit: type=1326 audit(1764025406.786:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.247805][ T6080] EXT4-fs: Ignoring removed orlov option [ 105.299609][ T27] audit: type=1326 audit(1764025406.786:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.352246][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.379726][ T27] audit: type=1326 audit(1764025406.806:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.406320][ T27] audit: type=1326 audit(1764025406.806:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9698f749 code=0x7ffc0000 [ 105.570244][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.906741][ T6096] loop1: detected capacity change from 0 to 512 [ 105.988912][ T6096] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.69: bg 0: block 248: padding at end of block bitmap is not set [ 106.024408][ T6096] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.69: Failed to acquire dquot type 1 [ 106.051998][ T6096] EXT4-fs (loop1): 1 truncate cleaned up [ 106.092425][ T6096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.166034][ T6096] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.197055][ T6096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.540719][ T6096] syz.1.69 (6096) used greatest stack depth: 20048 bytes left [ 106.570610][ T6111] process 'gtp' launched './file0' with NULL argv: empty string added [ 107.448427][ T6142] loop3: detected capacity change from 0 to 512 [ 107.456844][ T6142] EXT4-fs: Ignoring removed bh option [ 107.493564][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.511253][ T6142] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.706820][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 107.735023][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.814138][ T6150] team0: Port device team_slave_1 removed [ 108.308812][ T6163] loop3: detected capacity change from 0 to 128 [ 108.390218][ T6163] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.451720][ T6163] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.487683][ T6171] loop1: detected capacity change from 0 to 512 [ 108.639216][ T6171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.663494][ T5798] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.687202][ T6171] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.735187][ T6171] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.1.99: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 108.776338][ T6171] EXT4-fs error (device loop1): ext4_get_first_dir_block:3595: inode #12: comm syz.1.99: directory missing '.' [ 108.815350][ T6177] loop3: detected capacity change from 0 to 256 [ 108.843286][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.879178][ T5795] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.009789][ T6184] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 109.017263][ T6184] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 109.092600][ T6184] loop1: detected capacity change from 0 to 512 [ 109.149890][ T6191] loop0: detected capacity change from 0 to 1024 [ 109.157532][ T6191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.197091][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.197761][ T6184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.222527][ T6184] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.251196][ T6184] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.1.102: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 109.326724][ T6184] EXT4-fs error (device loop1): ext4_get_first_dir_block:3595: inode #12: comm syz.1.102: directory missing '.' [ 109.446890][ T6200] loop2: detected capacity change from 0 to 128 [ 109.558956][ T6200] syz.2.105: attempt to access beyond end of device [ 109.558956][ T6200] loop2: rw=2049, sector=145, nr_sectors = 872 limit=128 [ 109.864748][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.031080][ T6207] syz.2.109[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.031229][ T6207] syz.2.109[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.175542][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 110.175559][ T27] audit: type=1326 audit(1764025412.166:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.371612][ T27] audit: type=1326 audit(1764025412.216:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.394050][ T27] audit: type=1326 audit(1764025412.226:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.433254][ T27] audit: type=1326 audit(1764025412.226:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.479591][ T27] audit: type=1326 audit(1764025412.226:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.530189][ T27] audit: type=1326 audit(1764025412.226:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.566175][ T27] audit: type=1326 audit(1764025412.226:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.692596][ T6220] loop3: detected capacity change from 0 to 2048 [ 110.699238][ T27] audit: type=1326 audit(1764025412.226:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.789385][ T27] audit: type=1326 audit(1764025412.226:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.847047][ T6222] loop1: detected capacity change from 0 to 512 [ 110.851666][ T6220] Alternate GPT is invalid, using primary GPT. [ 110.869958][ T6220] loop3: p1 p2 p3 [ 110.873855][ T6220] loop3: partition table partially beyond EOD, truncated [ 110.885242][ T6222] EXT4-fs: Ignoring removed bh option [ 110.889418][ T27] audit: type=1326 audit(1764025412.226:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef7f8f749 code=0x7ffc0000 [ 110.973102][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.015170][ T5161] Alternate GPT is invalid, using primary GPT. [ 111.025630][ T6222] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.035262][ T5161] loop3: p1 p2 p3 [ 111.044700][ T6226] loop2: detected capacity change from 0 to 128 [ 111.059361][ T5161] loop3: partition table partially beyond EOD, truncated [ 111.162855][ T5798] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 111.170386][ T5793] I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.211652][ T5793] I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.223078][ T6227] syz.2.114: attempt to access beyond end of device [ 111.223078][ T6227] loop2: rw=2049, sector=145, nr_sectors = 584 limit=128 [ 111.264983][ T5810] I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.275162][ T5793] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 111.299509][ T5793] I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.308899][ T5793] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 111.325446][ T5810] I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.354408][ T5806] I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.364319][ T5810] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 111.377175][ T5793] I/O error, dev loop3, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.397406][ T5810] I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.407277][ T5806] I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.414975][ T6191] syz.0.104: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 111.416783][ T5793] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 111.450237][ T5810] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 111.458353][ T5806] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 111.467425][ T6191] ,cpuset=syz0,mems_allowed=0-1 [ 111.470498][ T5793] I/O error, dev loop3, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.483576][ T5793] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 111.491925][ T5793] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 111.500258][ T5793] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 111.509070][ T5793] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 111.511480][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.539392][ T6191] CPU: 1 PID: 6191 Comm: syz.0.104 Not tainted syzkaller #0 [ 111.546776][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.556901][ T6191] Call Trace: [ 111.560233][ T6191] [ 111.563214][ T6191] dump_stack_lvl+0x16c/0x230 [ 111.567971][ T6191] ? show_regs_print_info+0x20/0x20 [ 111.573222][ T6191] ? load_image+0x3b0/0x3b0 [ 111.577786][ T6191] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.584229][ T6191] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 111.590808][ T6191] warn_alloc+0x210/0x300 [ 111.595202][ T6191] ? zone_watermark_ok_safe+0x230/0x230 [ 111.600785][ T6191] ? _raw_spin_unlock+0x28/0x40 [ 111.605667][ T6191] __vmalloc_node_range+0x662/0x1320 [ 111.611000][ T6191] ? free_vm_area+0x50/0x50 [ 111.615530][ T6191] ? _raw_spin_unlock+0x28/0x40 [ 111.620403][ T6191] ? __kasan_kmalloc+0x8f/0xa0 [ 111.625196][ T6191] __vmalloc_node_range+0x568/0x1320 [ 111.630507][ T6191] ? hash_netiface_create+0x361/0xff0 [ 111.635916][ T6191] ? __asan_memset+0x22/0x40 [ 111.640559][ T6191] ? free_vm_area+0x50/0x50 [ 111.645090][ T6191] ? kvmalloc_node+0x70/0x180 [ 111.649790][ T6191] ? rcu_is_watching+0x15/0xb0 [ 111.654581][ T6191] ? kvmalloc_node+0x70/0x180 [ 111.659371][ T6191] ? trace_kmalloc+0x1f/0xa0 [ 111.663993][ T6191] kvmalloc_node+0x13f/0x180 [ 111.668609][ T6191] ? hash_netiface_create+0x361/0xff0 [ 111.674009][ T6191] hash_netiface_create+0x361/0xff0 [ 111.679236][ T6191] ? __lock_acquire+0x7c80/0x7c80 [ 111.684295][ T6191] ? __nla_parse+0x40/0x50 [ 111.688742][ T6191] ? hash_netport6_gc+0x570/0x570 [ 111.693796][ T6191] ip_set_create+0xa87/0x18e0 [ 111.698505][ T6191] ? ip_set_create+0x4b2/0x18e0 [ 111.703744][ T6191] ? ip_set_protocol+0x5d0/0x5d0 [ 111.708710][ T6191] ? trace_contention_end+0x39/0xe0 [ 111.713970][ T6191] nfnetlink_rcv_msg+0xb49/0x1130 [ 111.719025][ T6191] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.725117][ T6191] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 111.730358][ T6191] ? nfnetlink_unbind+0x160/0x160 [ 111.735437][ T6191] ? __dev_queue_xmit+0x1a64/0x35a0 [ 111.740709][ T6191] ? __netlink_deliver_tap+0x5ab/0x830 [ 111.746207][ T6191] ? netlink_deliver_tap+0x19c/0x1b0 [ 111.751520][ T6191] ? netlink_unicast+0x72c/0x8d0 [ 111.756484][ T6191] ? netlink_sendmsg+0x8c1/0xbe0 [ 111.761446][ T6191] ? ____sys_sendmsg+0x5bf/0x950 [ 111.766414][ T6191] ? ___sys_sendmsg+0x220/0x290 [ 111.771289][ T6191] ? __se_sys_sendmsg+0x1a5/0x270 [ 111.776342][ T6191] ? do_syscall_64+0x55/0xb0 [ 111.780977][ T6191] netlink_rcv_skb+0x216/0x480 [ 111.785775][ T6191] ? nfnetlink_unbind+0x160/0x160 [ 111.790829][ T6191] ? netlink_ack+0x1110/0x1110 [ 111.795625][ T6191] ? apparmor_capable+0x137/0x1a0 [ 111.800668][ T6191] ? bpf_lsm_capable+0x9/0x10 [ 111.805376][ T6191] ? security_capable+0x89/0xb0 [ 111.810259][ T6191] nfnetlink_rcv+0x274/0x2180 [ 111.814970][ T6191] ? __local_bh_enable_ip+0x12e/0x1c0 [ 111.820363][ T6191] ? lockdep_hardirqs_on+0x98/0x150 [ 111.825578][ T6191] ? __local_bh_enable_ip+0x12e/0x1c0 [ 111.830973][ T6191] ? _local_bh_enable+0xa0/0xa0 [ 111.835852][ T6191] ? __dev_queue_xmit+0x245/0x35a0 [ 111.840996][ T6191] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 111.846585][ T6191] ? __dev_queue_xmit+0x245/0x35a0 [ 111.851734][ T6191] ? ref_tracker_free+0x634/0x7d0 [ 111.856781][ T6191] ? __copy_skb_header+0xa7/0x550 [ 111.861838][ T6191] ? refcount_inc+0x70/0x70 [ 111.866361][ T6191] ? __skb_clone+0x63/0x790 [ 111.870907][ T6191] ? __skb_clone+0x480/0x790 [ 111.875540][ T6191] ? __netlink_deliver_tap+0x7e8/0x830 [ 111.881029][ T6191] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.886259][ T6191] ? __lock_acquire+0x7c80/0x7c80 [ 111.891312][ T6191] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.896540][ T6191] netlink_unicast+0x751/0x8d0 [ 111.901343][ T6191] netlink_sendmsg+0x8c1/0xbe0 [ 111.906154][ T6191] ? netlink_getsockopt+0x580/0x580 [ 111.911388][ T6191] ? aa_sock_msg_perm+0x94/0x150 [ 111.916356][ T6191] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 111.921668][ T6191] ? security_socket_sendmsg+0x80/0xa0 [ 111.927156][ T6191] ? netlink_getsockopt+0x580/0x580 [ 111.932413][ T6191] ____sys_sendmsg+0x5bf/0x950 [ 111.937219][ T6191] ? __asan_memset+0x22/0x40 [ 111.941840][ T6191] ? __sys_sendmsg_sock+0x30/0x30 [ 111.946898][ T6191] ? __import_iovec+0x5f2/0x860 [ 111.951796][ T6191] ? import_iovec+0x73/0xa0 [ 111.956335][ T6191] ___sys_sendmsg+0x220/0x290 [ 111.961044][ T6191] ? __sys_sendmsg+0x270/0x270 [ 111.965875][ T6191] __se_sys_sendmsg+0x1a5/0x270 [ 111.970789][ T6191] ? __x64_sys_sendmsg+0x80/0x80 [ 111.975773][ T6191] ? lockdep_hardirqs_on+0x98/0x150 [ 111.981012][ T6191] do_syscall_64+0x55/0xb0 [ 111.985455][ T6191] ? clear_bhb_loop+0x40/0x90 [ 111.990155][ T6191] ? clear_bhb_loop+0x40/0x90 [ 111.994856][ T6191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.000768][ T6191] RIP: 0033:0x7fcb9698f749 [ 112.005219][ T6191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.024934][ T6191] RSP: 002b:00007fcb977ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.033371][ T6191] RAX: ffffffffffffffda RBX: 00007fcb96be5fa0 RCX: 00007fcb9698f749 [ 112.041459][ T6191] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 112.049458][ T6191] RBP: 00007fcb96a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.057455][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.065471][ T6191] R13: 00007fcb96be6038 R14: 00007fcb96be5fa0 R15: 00007ffc65a245c8 [ 112.073516][ T6191] [ 112.128955][ T6191] Mem-Info: [ 112.135335][ T6191] active_anon:5713 inactive_anon:0 isolated_anon:0 [ 112.135335][ T6191] active_file:1192 inactive_file:39936 isolated_file:0 [ 112.135335][ T6191] unevictable:768 dirty:143 writeback:23 [ 112.135335][ T6191] slab_reclaimable:10022 slab_unreclaimable:91432 [ 112.135335][ T6191] mapped:24249 shmem:1569 pagetables:510 [ 112.135335][ T6191] sec_pagetables:0 bounce:0 [ 112.135335][ T6191] kernel_misc_reclaimable:0 [ 112.135335][ T6191] free:1327442 free_pcp:14258 free_cma:0 [ 112.203365][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 112.212165][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.281768][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.309589][ T6191] Node 0 active_anon:22780kB inactive_anon:0kB active_file:4768kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97048kB dirty:580kB writeback:0kB shmem:4436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11392kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no [ 112.343986][ T6233] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 112.377300][ T6236] loop3: detected capacity change from 0 to 512 [ 112.418698][ T6233] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 112.442265][ T6191] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.551545][ T6191] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.612391][ T6236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.637328][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 112.639750][ T6236] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.657178][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.670089][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.673622][ T6247] loop1: detected capacity change from 0 to 512 [ 112.681579][ T6191] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 112.692309][ T6191] Node 0 DMA32 free:1390084kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23212kB inactive_anon:0kB active_file:4768kB inactive_file:158080kB unevictable:1536kB writepending:564kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:39056kB local_pcp:18912kB free_cma:0kB [ 112.738185][ T6191] lowmem_reserve[]: 0 0 1 1 1 [ 112.747568][ T6233] EXT4-fs error (device loop3): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.3.117: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 112.799648][ T6191] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 112.827828][ T6191] lowmem_reserve[]: 0 0 0 0 0 [ 112.832794][ T6191] Node 1 Normal free:3901740kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19040kB local_pcp:6848kB free_cma:0kB [ 112.868563][ T6247] ------------[ cut here ]------------ [ 112.870222][ T6233] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #12: comm syz.3.117: directory missing '.' [ 112.874833][ T6247] EA inode 11 i_nlink=2 [ 112.895747][ T6247] WARNING: CPU: 1 PID: 6247 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 112.910627][ T6247] Modules linked in: [ 112.914590][ T6247] CPU: 1 PID: 6247 Comm: syz.1.120 Not tainted syzkaller #0 [ 112.922054][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.932233][ T6247] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 112.938890][ T6247] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 112.948697][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 112.958630][ T6247] RSP: 0018:ffffc9000bbc71c0 EFLAGS: 00010246 [ 112.958663][ T6247] RAX: 08fc9fa4c0ab7200 RBX: 0000000000000002 RCX: 0000000000080000 [ 112.958680][ T6247] RDX: ffffc9000d17a000 RSI: 000000000005384f RDI: 0000000000053850 [ 112.958697][ T6247] RBP: ffffc9000bbc72b8 R08: ffffc9000bbc6dc7 R09: 1ffff92001778db8 [ 112.958715][ T6247] R10: dffffc0000000000 R11: fffff52001778db9 R12: dffffc0000000000 [ 112.958733][ T6247] R13: ffff88805d12b6a8 R14: ffff88805d12b4b0 R15: ffff88805d12b500 [ 112.958750][ T6247] FS: 00007f43b45a66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 112.958770][ T6247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.958795][ T6247] CR2: 000020000000090c CR3: 0000000051713000 CR4: 00000000003506e0 [ 112.987060][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.990973][ T6247] Call Trace: [ 112.999027][ T6191] lowmem_reserve[]: [ 113.007025][ T6247] [ 113.033949][ T6191] 0 [ 113.038888][ T6247] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 113.067283][ T6247] ? ext4_xattr_inode_iget+0x3df/0x600 [ 113.072892][ T6247] ext4_xattr_set_entry+0xcda/0x1e90 [ 113.074290][ T6191] 0 [ 113.078250][ T6247] ext4_xattr_ibody_set+0x254/0x6a0 [ 113.081436][ T6191] 0 [ 113.086077][ T6247] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 113.086157][ T6247] __ext4_expand_extra_isize+0x306/0x400 [ 113.095218][ T6191] 0 [ 113.100362][ T6247] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 113.100417][ T6247] ext4_evict_inode+0x7ed/0xea0 [ 113.109944][ T6191] 0 [ 113.113727][ T6247] ? _raw_spin_unlock+0x28/0x40 [ 113.116215][ T6191] Node 0 [ 113.120995][ T6247] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 113.121035][ T6247] ? do_raw_spin_unlock+0x121/0x230 [ 113.121067][ T6247] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 113.129601][ T6191] DMA: [ 113.130202][ T6247] evict+0x486/0x870 [ 113.136635][ T6191] 0*4kB [ 113.141135][ T6247] ? __lock_acquire+0x7c80/0x7c80 [ 113.141174][ T6247] ? proc_nr_inodes+0x230/0x230 [ 113.141202][ T6247] ? do_raw_spin_unlock+0x121/0x230 [ 113.150621][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.150863][ T6247] ? _raw_spin_unlock+0x28/0x40 [ 113.179522][ T6191] 0*8kB [ 113.180771][ T6247] ? iput+0x70a/0x920 [ 113.180811][ T6247] ext4_orphan_cleanup+0xbd4/0x1400 [ 113.190420][ T6191] 0*16kB [ 113.192953][ T6247] ? ext4_orphan_del+0xba0/0xba0 [ 113.201048][ T6247] ? ext4_register_li_request+0x183/0x940 [ 113.206925][ T6247] ? errseq_check_and_advance+0x66/0x120 [ 113.212717][ T6247] ext4_fill_super+0x5de4/0x66c0 [ 113.213323][ T6191] 0*32kB [ 113.217719][ T6247] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 113.217755][ T6247] ? __might_sleep+0xe0/0xe0 [ 113.231751][ T6247] ? read_lock_is_recursive+0x20/0x20 [ 113.237187][ T6247] ? snprintf+0xdb/0x120 [ 113.241561][ T6247] ? vscnprintf+0x80/0x80 [ 113.245957][ T6247] ? down_write+0x162/0x1f0 [ 113.248838][ T6191] 0*64kB [ 113.250589][ T6247] ? down_read_killable+0x340/0x340 [ 113.258800][ T6247] ? setup_bdev_super+0x56b/0x660 [ 113.261863][ T6191] 0*128kB [ 113.263929][ T6247] get_tree_bdev+0x3e4/0x510 [ 113.267522][ T6191] 0*256kB [ 113.271636][ T6247] ? vfs_parse_fs_string+0x160/0x160 [ 113.271672][ T6247] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 113.271701][ T6247] ? setup_bdev_super+0x660/0x660 [ 113.271724][ T6247] ? apparmor_capable+0x137/0x1a0 [ 113.271751][ T6247] ? bpf_lsm_capable+0x9/0x10 [ 113.271782][ T6247] ? security_capable+0x89/0xb0 [ 113.271814][ T6247] vfs_get_tree+0x8c/0x280 [ 113.271840][ T6247] do_new_mount+0x24b/0xa40 [ 113.271874][ T6247] __se_sys_mount+0x2da/0x3c0 [ 113.271904][ T6247] ? __x64_sys_mount+0xc0/0xc0 [ 113.271930][ T6247] ? lockdep_hardirqs_on+0x98/0x150 [ 113.271953][ T6247] ? __x64_sys_mount+0x20/0xc0 [ 113.271978][ T6247] do_syscall_64+0x55/0xb0 [ 113.272006][ T6247] ? clear_bhb_loop+0x40/0x90 [ 113.272032][ T6247] ? clear_bhb_loop+0x40/0x90 [ 113.272060][ T6247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.272085][ T6247] RIP: 0033:0x7f43b3790eea [ 113.272107][ T6247] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.272126][ T6247] RSP: 002b:00007f43b45a5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.272154][ T6247] RAX: ffffffffffffffda RBX: 00007f43b45a5ef0 RCX: 00007f43b3790eea [ 113.272172][ T6247] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f43b45a5eb0 [ 113.272188][ T6247] RBP: 0000200000000180 R08: 00007f43b45a5ef0 R09: 0000000000800718 [ 113.272205][ T6247] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 113.272221][ T6247] R13: 00007f43b45a5eb0 R14: 000000000000046f R15: 0000200000000480 [ 113.272258][ T6247] [ 113.272271][ T6247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.272281][ T6247] CPU: 1 PID: 6247 Comm: syz.1.120 Not tainted syzkaller #0 [ 113.272301][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.272313][ T6247] Call Trace: [ 113.272320][ T6247] [ 113.272328][ T6247] dump_stack_lvl+0x16c/0x230 [ 113.272362][ T6247] ? show_regs_print_info+0x20/0x20 [ 113.272392][ T6247] ? load_image+0x3b0/0x3b0 [ 113.272433][ T6247] panic+0x2c0/0x710 [ 113.272462][ T6247] ? bpf_jit_dump+0xd0/0xd0 [ 113.272506][ T6247] __warn+0x2e0/0x470 [ 113.272534][ T6247] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 113.272568][ T6247] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 113.272598][ T6247] report_bug+0x2be/0x4f0 [ 113.272629][ T6247] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 113.272661][ T6247] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 113.272691][ T6247] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 113.272721][ T6247] handle_bug+0xcf/0x120 [ 113.272751][ T6247] exc_invalid_op+0x1a/0x50 [ 113.272783][ T6247] asm_exc_invalid_op+0x1a/0x20 [ 113.272804][ T6247] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 113.272835][ T6247] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 113.272852][ T6247] RSP: 0018:ffffc9000bbc71c0 EFLAGS: 00010246 [ 113.272870][ T6247] RAX: 08fc9fa4c0ab7200 RBX: 0000000000000002 RCX: 0000000000080000 [ 113.272884][ T6247] RDX: ffffc9000d17a000 RSI: 000000000005384f RDI: 0000000000053850 [ 113.272898][ T6247] RBP: ffffc9000bbc72b8 R08: ffffc9000bbc6dc7 R09: 1ffff92001778db8 [ 113.272913][ T6247] R10: dffffc0000000000 R11: fffff52001778db9 R12: dffffc0000000000 [ 113.272928][ T6247] R13: ffff88805d12b6a8 R14: ffff88805d12b4b0 R15: ffff88805d12b500 [ 113.272973][ T6247] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 113.273009][ T6247] ? ext4_xattr_inode_iget+0x3df/0x600 [ 113.273048][ T6247] ext4_xattr_set_entry+0xcda/0x1e90 [ 113.273105][ T6247] ext4_xattr_ibody_set+0x254/0x6a0 [ 113.273145][ T6247] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 113.273215][ T6247] __ext4_expand_extra_isize+0x306/0x400 [ 113.273257][ T6247] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 113.273299][ T6247] ext4_evict_inode+0x7ed/0xea0 [ 113.273324][ T6247] ? _raw_spin_unlock+0x28/0x40 [ 113.273362][ T6247] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 113.273393][ T6247] ? do_raw_spin_unlock+0x121/0x230 [ 113.273424][ T6247] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 113.273451][ T6247] evict+0x486/0x870 [ 113.273474][ T6247] ? __lock_acquire+0x7c80/0x7c80 [ 113.273503][ T6247] ? proc_nr_inodes+0x230/0x230 [ 113.273539][ T6247] ? do_raw_spin_unlock+0x121/0x230 [ 113.273576][ T6247] ? _raw_spin_unlock+0x28/0x40 [ 113.273601][ T6247] ? iput+0x70a/0x920 [ 113.273633][ T6247] ext4_orphan_cleanup+0xbd4/0x1400 [ 113.273687][ T6247] ? ext4_orphan_del+0xba0/0xba0 [ 113.273728][ T6247] ? ext4_register_li_request+0x183/0x940 [ 113.273765][ T6247] ? errseq_check_and_advance+0x66/0x120 [ 113.273798][ T6247] ext4_fill_super+0x5de4/0x66c0 [ 113.273857][ T6247] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 113.273888][ T6247] ? __might_sleep+0xe0/0xe0 [ 113.273917][ T6247] ? read_lock_is_recursive+0x20/0x20 [ 113.273940][ T6247] ? snprintf+0xdb/0x120 [ 113.273974][ T6247] ? vscnprintf+0x80/0x80 [ 113.274004][ T6247] ? down_write+0x162/0x1f0 [ 113.274026][ T6247] ? down_read_killable+0x340/0x340 [ 113.274057][ T6247] ? setup_bdev_super+0x56b/0x660 [ 113.274085][ T6247] get_tree_bdev+0x3e4/0x510 [ 113.274107][ T6247] ? vfs_parse_fs_string+0x160/0x160 [ 113.274139][ T6247] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 113.274167][ T6247] ? setup_bdev_super+0x660/0x660 [ 113.274189][ T6247] ? apparmor_capable+0x137/0x1a0 [ 113.274216][ T6247] ? bpf_lsm_capable+0x9/0x10 [ 113.274249][ T6247] ? security_capable+0x89/0xb0 [ 113.274282][ T6247] vfs_get_tree+0x8c/0x280 [ 113.274308][ T6247] do_new_mount+0x24b/0xa40 [ 113.274343][ T6247] __se_sys_mount+0x2da/0x3c0 [ 113.274373][ T6247] ? __x64_sys_mount+0xc0/0xc0 [ 113.274403][ T6247] ? lockdep_hardirqs_on+0x98/0x150 [ 113.274424][ T6247] ? __x64_sys_mount+0x20/0xc0 [ 113.274451][ T6247] do_syscall_64+0x55/0xb0 [ 113.274480][ T6247] ? clear_bhb_loop+0x40/0x90 [ 113.274507][ T6247] ? clear_bhb_loop+0x40/0x90 [ 113.274543][ T6247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.274569][ T6247] RIP: 0033:0x7f43b3790eea [ 113.274589][ T6247] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.274607][ T6247] RSP: 002b:00007f43b45a5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.274632][ T6247] RAX: ffffffffffffffda RBX: 00007f43b45a5ef0 RCX: 00007f43b3790eea [ 113.274649][ T6247] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f43b45a5eb0 [ 113.274665][ T6247] RBP: 0000200000000180 R08: 00007f43b45a5ef0 R09: 0000000000800718 [ 113.274682][ T6247] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 113.274698][ T6247] R13: 00007f43b45a5eb0 R14: 000000000000046f R15: 0000200000000480 [ 113.274735][ T6247] [ 113.276810][ T6247] Kernel Offset: disabled