last executing test programs: 37.088004114s ago: executing program 3 (id=1859): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x10}, 0x48) pipe(&(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f0000000600), 0x1, 0x590, &(0x7f0000001c00)="$eJzs3U9sFNUfAPDvzNJCS3+0/GIMcKEJB0iMC6VG0BN/bsYY/x5NaEohDQsltCZAOMDdgwcOXk28ePWCeiLRaOLBgyfw5NmEGKJgYkxqZne2rO1uu667ncJ8Psm07+1b+L7vTl7nvZ192QBKazL7kUbsjYgzScR4S9u2yBsnG897/PDG7B8Pb8wmsbz8zq9JJBHx6OGN2ebzk/z3zryyIyJ+PBXx/8rauIvXrl+YqdXmruT1w0sXLx9evHb9xfmLM+fnzs9dmp46+spL09PTx473Ldf33t73RvX91+5/tvDyX7ff2vV9EidiLG9rzaNfJmNy5TVplb2ux/odrCCVPJ92ebL1Nc/fUEQ8H+NRyUd9ZjzmPyy0c8BALVciloGSSox/KKnmPCBb/zaPYmckm+vBycYCKMv7cX40WrY13huJHfW10ehvScvKqLHenehD/CzG1YOnvs6OGND7EOu5eSsi9rQ7/0m9bxP1d3Gy/NN/5J9GxJH8d/b40R7jT66qP035n2jJ/9RQb/GLzh+Acrp7snEhX3v9S1fmP9Fm/jPW5trVi/9y/TvQh/jN+d/jNfO/J/lXOsz/3uwyxk/f3vmhU1vr/C87svjNueBmeHArYl/b/JOV/JM2+WfznjNdxvj8iwPbO7UVnf/yJxEHo33+Tcn69ycPn5uvzR1p/Gwb4+c9p+90it+S/0hR53+0Q/7rnf/ssctdxjg+eujjTm0bn//0l+Hk3XppOH/k6szS0pWpiOHk9bWPb7AQaT6n+X9k+R86sP74b5f/SLZ26DL/Rwtf/dl7/oOV5X+2x/P/UZcxvvz0m3ud2nrI361mAAAAAAAA6CCtf5YjSasr5TStVht7eJ+L0bS2sLj0wrmFDy6dbXzmYyKG0uad7vFGPcnqU/nnYZv1o6vq0xGxOyJuV0bq9ersQu1s0ckDAAAAAAAAAAAAAAAAAADAFrFz1f7/3yuN/f9ASWwrugNAYbof/98NtB/A5svHf7ffZwQ8Q8z/obyMfygv4x/Ky/iH8jL+obyMfygv4x/Ky/gHAAAAgGfS7v137ycRcfPVkfqRGc7bhgrtGTBoadEdAApTWVVfTgrqCLDp3PqH8rLGBzaa9u/o1HDXggEAAAAAAAAAAAAANsvBvfb/Q1nZ/w/ltXr/P1Ae9v9DeVnjAwPb/9/xHwIAAAAAAAAAAAAA/9ZY/UjSar4XeCzStFqN+F9ETMRQcm6+NnckInZFxL3K0PasPlV0pwEAAAAAAAAAAAAAAAAAAOAZs3jt+oWZWm3uikKXhf1boxtPZ+F0bIluKGxc2PBPh68OBgAAAAAAAAAAAAAAAACAPnuy6bfongAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcZ58///gCkXnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8nf4OAAD//5tuE7A=") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5f8a}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) memfd_create(&(0x7f0000000200)='ext4\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001e000503000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000100657468746f6f6c00"], 0x28}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f0000000500)={0x804000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300), {0x3f}, &(0x7f0000000380)=""/4, 0x4, &(0x7f00000003c0)=""/245, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r6, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}, {&(0x7f0000000000)="fe00015f33e20000003d8ad30b00fce4f169f05505568c08a7d53a7b", 0x1c}], 0x2) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 35.278596802s ago: executing program 3 (id=1863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001400000127bd7000fedbdf25020100c8", @ANYRES32=r6, @ANYBLOB="adffffffffb193b8"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000002880), 0x226c}, 0x1, 0x0, 0x0, 0xa0}, 0x81) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6014feadd3849646b2751a11dd457eee6924df8cd00"/53, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003000000696467655f736c6176655f31000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x20000010) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x80) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r10, 0x28, 0x8, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 34.301167622s ago: executing program 3 (id=1866): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000100)=0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) write$binfmt_misc(r2, 0x0, 0x4d) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'team0\x00', 0x44}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x9a, 0x80000009, 0x2, 0x1, 0x85}) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x100, 0x1}, 0x70) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) r4 = socket(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000004c0)={0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) preadv(r8, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000540)=""/118, 0x76}], 0x2, 0x19df, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r3}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0xffffff89) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 32.670309626s ago: executing program 3 (id=1870): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x2, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x37, &(0x7f0000000440)=""/55, 0x41000, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x3, 0x2, 0xd, 0x3}, {0x3, 0x3, 0xb, 0x4}, {0x0, 0x2, 0x1, 0x5}, {0x2, 0x5, 0xe, 0x2}], 0x10, 0x5}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x297881, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000004000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r4, &(0x7f0000002d80)={0x0, 0x0, 0x0}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 30.500304983s ago: executing program 3 (id=1873): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r5 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 30.154462092s ago: executing program 3 (id=1875): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x10}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f0000000600), 0x1, 0x590, &(0x7f0000001c00)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5f8a}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = memfd_create(&(0x7f0000000200)='ext4\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001e000503000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000100657468746f6f6c00"], 0x28}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f0000000500)={0x804000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300), {0x3f}, &(0x7f0000000380)=""/4, 0x4, &(0x7f00000003c0)=""/245, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000640)={r0, r1, 0x3}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r8, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}, {0x0}], 0x2) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 18.151848594s ago: executing program 1 (id=1897): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',\x00', @ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73012c6e6f626172726965722c6e6f626170653d2753a91c030000006f6d706f73652c7569643d00000000", @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x5ec, &(0x7f00000012c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r3, 0xa, 0x0, 0x0, 0x0, 0xfffffe81, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x5, 0x513, &(0x7f00000010c0)="$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") ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) rename(0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r4, 0x2088002) preadv(r4, &(0x7f0000003240)=[{&(0x7f0000000100)=""/7, 0x7}], 0x1, 0xffffe53f, 0x0) lseek(r0, 0x5, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 18.065144871s ago: executing program 0 (id=1898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b58def59473e513bcdeb8c27f21"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r7 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r7, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) 17.595584399s ago: executing program 1 (id=1900): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000400)=0x7, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d8d9ad225e138be5b163448412ba8", 0x10}], 0x1, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x34, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/182, 0xb6) recvmmsg(r3, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/127, 0x7f}], 0x1}}], 0x1, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000440), 0x12) 17.34005987s ago: executing program 2 (id=1901): socket(0x11, 0x800000003, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) getpid() prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, 0xffffffffffffffff, 0x63a8a000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x8, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x44, 0xfffffffd, 0x3}, 0x33) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001280)='\f', 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000002880)={[{@clear_cache}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") 16.430931445s ago: executing program 1 (id=1903): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b58def59473e513bcdeb8c27f21"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r5 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 14.313920938s ago: executing program 0 (id=1906): socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='h', 0x1}, {&(0x7f0000000280)="5834e0277094", 0x6}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x5, 0x8000000003c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 14.251719363s ago: executing program 2 (id=1907): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000180001000000000000000000020000000600ff00", @ANYRES32=0x0, @ANYBLOB="08001e00ac1414000c0009"], 0x70}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f00000011c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0x74, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f39b76b27330"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x28, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0x2, @device_a, 0x1, @void, 0x1c4, 0x200}}, @challenge={0x10, 0x1, 0xab}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c884}, 0x2004c099) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x31, 0x7, 0x0, 0x0, 0x0, 0x9}) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000001240)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20002, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 11.375977759s ago: executing program 2 (id=1908): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x10}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f0000000600), 0x1, 0x590, &(0x7f0000001c00)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5f8a}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = memfd_create(&(0x7f0000000200)='ext4\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001e000503000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000100657468746f6f6c00"], 0x28}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f0000000500)={0x804000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300), {0x3f}, &(0x7f0000000380)=""/4, 0x4, &(0x7f00000003c0)=""/245, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000640)={r0, r1, 0x3}) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r8, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}, {&(0x7f0000000000)="fe00015f33e20000003d8ad30b00fce4f169f05505568c08a7d53a7b", 0x1c}], 0x2) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 10.236594522s ago: executing program 0 (id=1910): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x100, 0x1058, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpgrp(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x41000}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$inet(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x800}}) socket$inet6(0xa, 0x0, 0x1) 9.940116116s ago: executing program 4 (id=1911): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mkdir(0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, &(0x7f0000002840)={0xff, 0xffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x400}, {0x80000006}]}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x722) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b030600e0ff020002004788aa96a13bb1", 0x11, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 9.375854602s ago: executing program 2 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x2, 0x0, 0x8000, 0xc42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 9.131851863s ago: executing program 0 (id=1913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b58def59473e513bcdeb8c27f21"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r7 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r7, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) 8.600173716s ago: executing program 4 (id=1914): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x100, 0x1058, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getpgrp(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 7.872429325s ago: executing program 1 (id=1915): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r5 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 7.718930888s ago: executing program 0 (id=1916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b58def59473e513bcdeb8c27f21"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r7 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r7, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) 6.375583598s ago: executing program 1 (id=1917): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r6, 0x81fd) write$P9_RREADDIR(r5, &(0x7f0000000280)={0xb}, 0xb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x1670e68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x16000}]) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 4.824107195s ago: executing program 2 (id=1918): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x202}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x20, 0x2}, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/197, &(0x7f0000000340)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 4.822909565s ago: executing program 0 (id=1927): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x10}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f0000000600), 0x1, 0x590, &(0x7f0000001c00)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5f8a}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = memfd_create(&(0x7f0000000200)='ext4\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001e000503000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000100657468746f6f6c00"], 0x28}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f0000000500)={0x804000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300), {0x3f}, &(0x7f0000000380)=""/4, 0x4, &(0x7f00000003c0)=""/245, &(0x7f00000004c0)}, 0x58) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000640)={r0, r1, 0x3}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r8, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}, {&(0x7f0000000000)="fe00015f33e20000003d8ad30b00fce4f169f05505568c08a7d53a7b", 0x1c}], 0x2) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 4.822189785s ago: executing program 1 (id=1919): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x200800, &(0x7f0000000100)) r4 = accept4$unix(r2, &(0x7f0000000380), &(0x7f0000000180)=0x6e, 0x80800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000400) fallocate(0xffffffffffffffff, 0x3e, 0x40, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/32, 0x39, 0x0, &(0x7f0000000240)=""/82, 0x52}, &(0x7f0000001480)=0x40) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a540497", 0x4e, 0x4014, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x1) splice(r1, &(0x7f0000000140)=0x5, r4, &(0x7f0000000200)=0x3, 0x4a, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 3.918790629s ago: executing program 4 (id=1920): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b58def59473e513bcdeb8c27f21"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) 3.568057328s ago: executing program 2 (id=1921): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x10}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200004, &(0x7f0000000600), 0x1, 0x590, &(0x7f0000001c00)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5f8a}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = memfd_create(&(0x7f0000000200)='ext4\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001e000503000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000100657468746f6f6c00"], 0x28}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f0000000500)={0x804000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300), {0x3f}, &(0x7f0000000380)=""/4, 0x4, &(0x7f00000003c0)=""/245, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000640)={r0, r1, 0x3}) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r8, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}, {&(0x7f0000000000)="fe00015f33e20000003d8ad30b00fce4f169f05505568c08a7d53a7b", 0x1c}], 0x2) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 2.456698779s ago: executing program 4 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x100, 0x1058, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpgrp(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x41000}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$inet(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x800}}) socket$inet6(0xa, 0x0, 0x1) 1.375890847s ago: executing program 4 (id=1923): gettid() openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x400000, 0x0, 0x0, 0x7, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYBLOB="d9e9aee9afb18270208988e87b8ee46c4e5fcb4148906b1b4cc6510d7df0cb3154fa4fe7e2ba6d0c10506d56b1b50613a52ea8787081c5f468b6143e7169d85d3198d422ba8211fecb99b77d0f9876c6e8364dc8a3072f3560ad0faed8d79f7c52870eb4b82ad228210fdbe3fb8556e17e922ab874a77720680a0d285fb45a2ba45bb4283a5e83070707102c25be0ede5d304e9bc132a5195ee22ada3e68fdc44c050b5d9744295b2dd946aa260fce3c7a33983552f2a761eba99aacde515f6e9b72cbdcfd23a767671c0b9ac69da2f85839ee4dc83b8c64e50b64ff5df7f603295422533ec4", @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x9, 0x2b4, &(0x7f00000001c0)="$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") setrlimit(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0xce942, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=1924): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b58def59473e513bcdeb8c27f21"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r6 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) flock(r6, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): 504][T13465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.160530][T13465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.232457][T13518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1113.244234][ T3642] Bluetooth: hci7: command tx timeout [ 1113.274425][T13518] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 1113.355514][T13518] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 1113.395146][T13465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.523703][T11594] EXT4-fs (loop0): unmounting filesystem. [ 1113.725146][T13532] loop0: detected capacity change from 0 to 512 [ 1113.785861][T13532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1113.824327][T13532] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 1113.993540][T13465] device hsr_slave_0 entered promiscuous mode [ 1114.013814][T13465] device hsr_slave_1 entered promiscuous mode [ 1114.065465][T13465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.080534][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.091752][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.102080][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.107176][T13465] Cannot create hsr debugfs directory [ 1114.117690][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.126647][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1114.417388][T13541] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1709: Directory hole found for htree leaf block 0 [ 1114.497132][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.800875][T10966] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1114.823778][T11594] EXT4-fs (loop0): unmounting filesystem. [ 1114.904984][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.141465][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.234331][T10966] usb 3-1: Using ep0 maxpacket: 8 [ 1115.376228][ T3648] Bluetooth: hci7: command tx timeout [ 1115.454725][T10966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1115.884764][T10966] usb 3-1: string descriptor 0 read error: -22 [ 1115.891196][T10966] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1115.954197][T10966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.055704][T10966] usb 3-1: config 0 descriptor?? [ 1116.123333][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.736509][ T3651] Bluetooth: hci5: command tx timeout [ 1116.978289][T13555] dlm: non-version read from control device 0 [ 1117.203640][T13538] netlink: 'syz.2.1711': attribute type 27 has an invalid length. [ 1117.217975][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.022704][ C1] eth0: bad gso: type: 1, size: 1408 [ 1118.206678][T13569] loop3: detected capacity change from 0 to 1024 [ 1118.234808][T13569] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1715: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1118.275408][T13569] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1715: Bad quota inode: 4, type: 1 [ 1118.300314][T13569] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1118.343949][T13465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.480429][T13569] EXT4-fs (loop3): mount failed [ 1118.844383][ T3648] Bluetooth: hci5: command tx timeout [ 1119.083069][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1119.124070][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1715'. [ 1119.536320][T13465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.563105][T13465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.601744][T13588] loop3: detected capacity change from 0 to 1024 [ 1120.641561][T13537] chnl_net:caif_netlink_parms(): no params data found [ 1120.799640][T13588] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1719: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1120.887179][T13588] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1719: Bad quota inode: 4, type: 1 [ 1120.924509][T13465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.936181][T13588] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1120.964863][ T3648] Bluetooth: hci5: command tx timeout [ 1120.995395][T13588] EXT4-fs (loop3): mount failed [ 1121.015516][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.221363][T10966] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1121.707811][T13602] loop0: detected capacity change from 0 to 512 [ 1121.756799][T10966] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1121.765261][T10966] dib0700: firmware download failed at 7 with -22 [ 1121.786832][T13602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1121.806256][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.813375][T13537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.813373][T13602] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 1121.986144][T13537] device bridge_slave_0 entered promiscuous mode [ 1122.010846][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 1122.229538][T13606] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1720: Directory hole found for htree leaf block 0 [ 1122.878813][T11594] EXT4-fs (loop0): unmounting filesystem. [ 1122.983874][T13609] loop3: detected capacity change from 0 to 1024 [ 1123.004427][ T3651] Bluetooth: hci5: command tx timeout [ 1123.017413][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.164001][T13537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.194697][T13537] device bridge_slave_1 entered promiscuous mode [ 1123.197660][T13609] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1721: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1123.219836][T13609] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1721: Bad quota inode: 4, type: 1 [ 1123.238908][T13609] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1123.255191][T13609] EXT4-fs (loop3): mount failed [ 1123.584530][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.612975][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.323857][T13624] No such timeout policy "syz0" [ 1124.461124][T13537] team0: Port device team_slave_0 added [ 1124.515447][ T26] audit: type=1800 audit(1723674607.135:476): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1723" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1124.739792][T13537] team0: Port device team_slave_1 added [ 1124.965524][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'. [ 1125.479045][T13635] loop0: detected capacity change from 0 to 128 [ 1125.504655][ T3648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1125.516681][ T3648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1125.527017][ T3648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1125.535266][ T3648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1125.543226][ T3648] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1125.550767][ T3648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1125.674049][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.695882][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.794398][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.003133][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.014165][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.160454][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.270964][T13653] sp0: Synchronizing with TNC [ 1126.281445][T13654] sp0: Found TNC [ 1126.735859][T13465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1126.808018][T13537] device hsr_slave_0 entered promiscuous mode [ 1126.816710][T13647] [U] è` [ 1126.875147][T13537] device hsr_slave_1 entered promiscuous mode [ 1126.913485][T13537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.941529][T13537] Cannot create hsr debugfs directory [ 1126.964096][T13465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1127.107805][T13465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1127.451038][T13465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1127.635051][ T11] device hsr_slave_0 left promiscuous mode [ 1127.642207][ T11] device hsr_slave_1 left promiscuous mode [ 1127.648677][ T3651] Bluetooth: hci6: command tx timeout [ 1127.665424][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.672870][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.681426][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.688997][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.696883][ T11] device bridge_slave_1 left promiscuous mode [ 1127.703133][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.712030][ T11] device bridge_slave_0 left promiscuous mode [ 1127.718658][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.833177][ T11] device veth1_macvtap left promiscuous mode [ 1127.846130][ T11] device veth0_macvtap left promiscuous mode [ 1127.880403][ T11] device veth1_vlan left promiscuous mode [ 1127.904481][ T11] device veth0_vlan left promiscuous mode [ 1128.478968][T13680] loop0: detected capacity change from 0 to 1024 [ 1128.549374][T13680] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1730: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1128.623024][T13680] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1730: Bad quota inode: 4, type: 1 [ 1128.665929][T13680] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1128.715324][T13680] EXT4-fs (loop0): mount failed [ 1129.858601][ T3651] Bluetooth: hci6: command tx timeout [ 1130.862035][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1130.980609][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1131.096266][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.199852][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.891549][ T3648] Bluetooth: hci6: command tx timeout [ 1132.236341][ T11] bond0 (unregistering): Released all slaves [ 1132.434337][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1132.807567][T13702] loop0: detected capacity change from 0 to 2048 [ 1133.327748][T13705] loop3: detected capacity change from 0 to 1024 [ 1133.499487][T13702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1133.518064][T13705] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1733: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1133.536020][ T26] audit: type=1800 audit(1723674616.155:477): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1732" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1133.642291][T13705] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1733: Bad quota inode: 4, type: 1 [ 1133.694873][T13705] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1133.717469][T11594] EXT4-fs (loop0): unmounting filesystem. [ 1133.728051][T13705] EXT4-fs (loop3): mount failed [ 1133.870906][T13713] loop0: detected capacity change from 0 to 512 [ 1133.963025][T13713] EXT4-fs (loop0): 1 orphan inode deleted [ 1133.964232][ T3648] Bluetooth: hci6: command tx timeout [ 1133.977568][T13636] chnl_net:caif_netlink_parms(): no params data found [ 1134.114325][T13713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1134.137610][T13713] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038 (0x7fffffff) [ 1135.138895][T13723] EXT4-fs (loop0): shut down requested (2) [ 1135.201319][T13465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.204270][T13723] loop0: detected capacity change from 512 to 0 [ 1135.236744][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1733'. [ 1135.481943][ C0] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1135.512862][T13728] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1135.519438][T13728] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1135.542160][T13465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.586156][T13728] vhci_hcd vhci_hcd.0: Device attached [ 1135.608139][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1135.631337][T13730] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 1135.653441][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1135.661522][ T5738] vhci_hcd: stop threads [ 1135.666679][ T5738] vhci_hcd: release socket [ 1135.671128][ T5738] vhci_hcd: disconnect device [ 1135.685052][T11594] EXT4-fs (loop0): unmounting filesystem. [ 1135.720212][ T9578] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1135.743576][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1135.753205][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1135.762702][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1135.771107][T11594] EXT4-fs (loop0): I/O error while writing superblock [ 1135.798438][ T9578] loop: Write error at byte offset 9223372036854808575, length 4096. [ 1135.814234][ C1] I/O error, dev loop0, sector 64 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1135.823837][ C1] Buffer I/O error on dev loop0, logical block 8, lost sync page write [ 1135.929480][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1135.955964][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1135.994765][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.001896][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.039140][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1136.062678][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.115138][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.122297][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.164678][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1136.277126][T13636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.324396][T13636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.336027][T13636] device bridge_slave_0 entered promiscuous mode [ 1136.355617][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.406000][T13636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.425009][T13636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.442578][T13636] device bridge_slave_1 entered promiscuous mode [ 1136.463738][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1136.473661][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1136.492400][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1136.513276][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1136.551277][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1136.591011][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1136.644920][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1136.665089][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1136.717626][T13465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.806481][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1136.824974][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1136.882135][T13636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.919681][T13751] loop3: detected capacity change from 0 to 512 [ 1136.926727][T13636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.960916][T13751] EXT4-fs: Ignoring removed orlov option [ 1137.013554][T13751] EXT4-fs (loop3): unable to read superblock [ 1137.080411][T13537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1137.139672][T13537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1137.197189][T13636] team0: Port device team_slave_0 added [ 1137.205269][T13537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1137.250596][T13636] team0: Port device team_slave_1 added [ 1137.756205][T13537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1137.847493][T13636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.868636][T13636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.942859][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1137.963001][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1137.973200][T13636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.973202][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1137.993055][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1138.002854][ T3642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1138.020725][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1138.028720][ T3642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1138.104705][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1138.125482][T13636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.132632][T13636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.257200][T13636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.381752][T13465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.847099][T13636] device hsr_slave_0 entered promiscuous mode [ 1138.894575][ T7176] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1138.939287][T13636] device hsr_slave_1 entered promiscuous mode [ 1139.063550][T13636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1139.155653][T13636] Cannot create hsr debugfs directory [ 1139.244531][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1139.265157][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1139.423843][T13465] device veth0_vlan entered promiscuous mode [ 1139.476042][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1139.495822][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1139.523566][T13465] device veth1_vlan entered promiscuous mode [ 1139.542877][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.588272][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1139.615760][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1139.645025][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1139.753951][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.897718][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.990761][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1140.005357][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1140.032568][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1140.102888][T13465] device veth0_macvtap entered promiscuous mode [ 1140.125671][ T3642] Bluetooth: hci2: command tx timeout [ 1140.167930][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.243574][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1140.273623][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1140.303339][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.310604][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.344957][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1140.365900][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1140.397412][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.404591][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.440446][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1140.464777][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1140.476430][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1140.508028][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1140.541627][T13465] device veth1_macvtap entered promiscuous mode [ 1140.667358][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.706050][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1140.736906][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1140.756177][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1140.781422][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1140.800464][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1140.814031][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1140.843201][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.870958][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.902641][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.924622][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.944184][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.965591][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.985603][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.014169][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.034186][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.054365][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.074208][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.094191][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.116053][T13465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.267720][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.492783][T13636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.569548][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1141.598678][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1141.610974][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1141.700006][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1141.807575][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1141.924462][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1142.021823][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1142.205038][ T3642] Bluetooth: hci2: command tx timeout [ 1142.299322][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.344230][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.354085][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.381722][T13804] loop3: detected capacity change from 0 to 1024 [ 1142.410151][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.424506][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.445404][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.479848][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.507632][T13804] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1742: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1142.547449][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.558324][T13804] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1742: Bad quota inode: 4, type: 1 [ 1142.564194][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.594693][T13804] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1142.613166][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.634286][T13465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.645494][T13804] EXT4-fs (loop3): mount failed [ 1142.654498][T13465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.705696][T13465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.767304][T13465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.786522][T13465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.934220][T13465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.942991][T13465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.083722][T13636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.163521][T13758] chnl_net:caif_netlink_parms(): no params data found [ 1143.203348][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1143.269567][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1143.426570][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 1143.567252][T13636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.765427][T13636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.231855][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.253696][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.278940][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.286285][ T3648] Bluetooth: hci2: command tx timeout [ 1144.304295][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.312554][T13758] device bridge_slave_0 entered promiscuous mode [ 1144.373568][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.405069][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.433843][T13758] device bridge_slave_1 entered promiscuous mode [ 1145.566809][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.648860][T12480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.692645][T12480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.738086][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.753205][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1145.938360][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.146499][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1745'. [ 1146.187039][ T4933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.234383][ T4933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.320640][T13758] team0: Port device team_slave_0 added [ 1146.358243][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1146.365843][ T3648] Bluetooth: hci2: command tx timeout [ 1146.548358][T13758] team0: Port device team_slave_1 added [ 1146.810337][T13636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1146.881454][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.925123][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.998745][T13871] loop3: detected capacity change from 0 to 512 [ 1147.094540][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.117425][T13871] ext2: Unknown parameter 'smackfsroot' [ 1147.136576][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.153796][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.190217][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.216594][T13696] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.880598][T13636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1147.968638][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 1147.998077][T13636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1148.219702][T13879] loop3: detected capacity change from 0 to 1024 [ 1148.250557][T13636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1148.315967][T13879] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1747: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1148.318122][T13758] device hsr_slave_0 entered promiscuous mode [ 1148.364744][T13758] device hsr_slave_1 entered promiscuous mode [ 1148.379825][T13758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1148.387564][T13758] Cannot create hsr debugfs directory [ 1148.454249][T13879] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1747: Bad quota inode: 4, type: 1 [ 1148.504384][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1148.513255][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1148.525398][T13879] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1148.577658][T13879] EXT4-fs (loop3): mount failed [ 1148.783177][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1148.813735][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.055355][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.065329][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.084666][T13537] device veth0_vlan entered promiscuous mode [ 1150.103259][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 1150.133561][T13537] device veth1_vlan entered promiscuous mode [ 1150.476931][ T3680] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1150.744448][ T3680] usb 2-1: Using ep0 maxpacket: 16 [ 1150.744560][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1150.784074][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1150.801705][ C1] eth0: bad gso: type: 1, size: 1408 [ 1150.864429][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.871652][T13537] device veth0_macvtap entered promiscuous mode [ 1150.888230][ T3680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1151.069348][ T3680] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1151.079353][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.091622][ T3680] usb 2-1: config 0 descriptor?? [ 1151.178766][T13537] device veth1_macvtap entered promiscuous mode [ 1151.923882][ T3680] HID 045e:07da: Invalid code 65791 type 1 [ 1151.934722][ T3680] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input25 [ 1151.951538][ T3680] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1152.091761][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1152.105163][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1152.152463][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.163484][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.184669][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.199381][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.211166][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.223221][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.233699][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.245468][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.245916][T13895] syz.1.1749[13895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.256213][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.278822][T13895] syz.1.1749[13895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.279130][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.301477][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.312398][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.323767][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.335979][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.348153][T13537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.401272][T13636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.439349][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1152.465727][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1152.493588][T13924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.502196][T13924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.566249][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.594388][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.624174][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.651079][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.671924][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.684215][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.696785][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.708122][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.719088][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.735562][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.756952][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.776833][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.794273][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.816815][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.838462][T13537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.850596][ T11] device hsr_slave_0 left promiscuous mode [ 1152.862106][ T11] device hsr_slave_1 left promiscuous mode [ 1152.869813][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.877758][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.886482][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.894062][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.902683][ T11] device bridge_slave_1 left promiscuous mode [ 1152.909469][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.919185][ T11] device bridge_slave_0 left promiscuous mode [ 1152.926618][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.941341][ T11] device hsr_slave_0 left promiscuous mode [ 1152.954877][ T11] device hsr_slave_1 left promiscuous mode [ 1152.965033][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.972608][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.985767][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.002121][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.028274][ T11] device bridge_slave_1 left promiscuous mode [ 1153.043196][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.056213][ T11] device bridge_slave_0 left promiscuous mode [ 1153.062651][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.146903][ T11] device veth1_macvtap left promiscuous mode [ 1153.153089][ T11] device veth0_macvtap left promiscuous mode [ 1153.159417][ T11] device veth1_vlan left promiscuous mode [ 1153.165458][ T11] device veth0_vlan left promiscuous mode [ 1153.173980][ T11] device veth1_macvtap left promiscuous mode [ 1153.180206][ T11] device veth0_macvtap left promiscuous mode [ 1153.186700][ T11] device veth1_vlan left promiscuous mode [ 1153.192623][ T11] device veth0_vlan left promiscuous mode [ 1153.769894][T13931] Invalid option length (1047929) for dns_resolver key [ 1154.163359][ T7176] usb 2-1: USB disconnect, device number 14 [ 1154.527007][T13933] loop3: detected capacity change from 0 to 512 [ 1156.840591][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1156.922065][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1157.027114][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.113045][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.183692][ T11] bond0 (unregistering): Released all slaves [ 1159.127782][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1159.198299][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1159.297018][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.380660][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.542174][ T11] bond0 (unregistering): Released all slaves [ 1160.814954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1160.835620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1160.871124][T13537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.882120][T13537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.894318][T13537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.903041][T13537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.915099][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 1161.086775][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1161.104944][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.127539][T13636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.181838][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1161.195639][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.221186][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.228378][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.259572][T13951] loop3: detected capacity change from 0 to 512 [ 1161.350364][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.365107][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.385742][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.387103][T13951] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1761: casefold flag without casefold feature [ 1161.394469][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.413468][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.422341][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.431535][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.441984][T13951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1761: missing EA_INODE flag [ 1161.457651][T13951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1761: error while reading EA inode 12 err=-117 [ 1161.484391][T13951] EXT4-fs (loop3): 1 orphan inode deleted [ 1161.490279][T13951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1161.502559][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.539704][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.619508][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.653875][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.683494][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.706681][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.735278][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.745923][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.757545][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.902893][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1761'. [ 1161.924778][T13951] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1161.943211][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1162.080754][ T4947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.095313][ T4947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.131316][T13758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1162.191829][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1162.209991][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1162.213397][ T4548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.225685][T13758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1162.270855][ T4548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.689982][T13758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1162.770332][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1162.811428][T13758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1163.232338][T13983] loop4: detected capacity change from 0 to 64 [ 1163.436392][T13758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.567443][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1163.853858][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1163.941178][T13636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.081675][T13758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.106351][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1164.125863][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1164.163141][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1164.227866][T13988] loop3: detected capacity change from 0 to 256 [ 1164.255264][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1164.358599][ T4548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.365769][ T4548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.394904][T13988] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1165.150441][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1165.182515][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1165.191667][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.198884][ T4548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.303318][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1165.313242][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1165.354695][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1165.382380][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1165.419563][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1165.454607][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1165.498749][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1165.579226][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1165.704988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1165.727194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1165.804711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1166.065133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1166.099168][T14014] loop3: detected capacity change from 0 to 512 [ 1166.123670][T14013] loop4: detected capacity change from 0 to 1024 [ 1166.144501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1166.199312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1166.273181][T13758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1166.291681][T14013] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1768: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1166.315477][T14013] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1768: Bad quota inode: 4, type: 1 [ 1166.338409][T14014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1166.348853][T14013] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1166.371963][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 1166.395594][T14013] EXT4-fs (loop4): mount failed [ 1166.407701][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1166.424387][T14014] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 1166.446749][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.516147][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.534692][T14006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1166.556763][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.774273][T13636] device veth0_vlan entered promiscuous mode [ 1166.881432][ T26] audit: type=1804 audit(1723674649.505:478): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1767" name="/newroot/91/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 1167.118961][T14014] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1167.131429][T14014] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1167.131429][T14014] [ 1167.141204][T14014] EXT4-fs (loop3): Total free blocks count 0 [ 1167.147321][T14014] EXT4-fs (loop3): Free/Dirty block details [ 1167.153301][T14014] EXT4-fs (loop3): free_blocks=65281 [ 1167.158723][T14014] EXT4-fs (loop3): dirty_blocks=23 [ 1167.163934][T14014] EXT4-fs (loop3): Block reservation details [ 1167.170052][T14014] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 1167.190669][T14014] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 1171.144784][T13636] device veth1_vlan entered promiscuous mode [ 1171.162216][ T26] audit: type=1804 audit(1723674649.735:479): pid=14029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1767" name="/newroot/91/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 1171.539196][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 1171.576006][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1171.734774][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1171.752379][T14035] loop4: detected capacity change from 0 to 1024 [ 1171.759820][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1171.798590][T13636] device veth0_macvtap entered promiscuous mode [ 1171.844785][T13636] device veth1_macvtap entered promiscuous mode [ 1171.887549][T11839] EXT4-fs: 7 callbacks suppressed [ 1171.887566][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1171.888711][T14035] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1770: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1171.906685][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.931153][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.944251][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.955209][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.965676][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.976297][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.987018][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.997850][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.008041][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.019506][T14035] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1770: Bad quota inode: 4, type: 1 [ 1172.031033][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.074250][T14035] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1172.099283][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.105270][T14035] EXT4-fs (loop4): mount failed [ 1172.121415][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.150188][T13636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.178227][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.195819][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.219623][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.238707][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.252159][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.269841][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.285367][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.309471][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.362144][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.626635][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.637086][T13636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.706682][T13636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.940313][T13636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.305964][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1173.325442][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1173.333657][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1173.508580][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1173.586176][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1173.625599][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1173.652539][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1173.672430][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1173.809663][T13636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.829197][T13636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.842868][T13636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.857697][T13636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.873297][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 1173.901647][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.059674][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1174.119426][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1174.221213][T14054] loop4: detected capacity change from 0 to 512 [ 1174.249937][T14054] EXT4-fs: Ignoring removed nobh option [ 1174.277539][T14054] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1174.291539][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1174.301171][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1174.311444][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1174.320163][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1174.368481][T14054] fuse: Bad value for 'fd' [ 1174.476773][T14057] loop4: detected capacity change from 0 to 1024 [ 1174.495903][T13758] device veth0_vlan entered promiscuous mode [ 1174.504720][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.519115][T14057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1174.550297][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.573224][T13758] device veth1_vlan entered promiscuous mode [ 1174.768636][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1175.476334][T13758] device veth0_macvtap entered promiscuous mode [ 1175.500768][T14065] loop3: detected capacity change from 0 to 512 [ 1175.516915][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1175.549767][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1175.826586][T13758] device veth1_macvtap entered promiscuous mode [ 1176.254597][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.265606][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1176.273394][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.307384][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.318540][T14065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1176.334315][T14065] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038 (0x7fffffff) [ 1176.338550][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.381742][T14065] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1776: Directory hole found for htree leaf block 0 [ 1176.407956][T14065] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1776: Directory hole found for htree leaf block 0 [ 1176.410770][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.431758][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.462217][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.503555][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.612073][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.634207][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.683638][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.710659][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.729748][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.743819][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.810418][T14075] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1776: Directory hole found for htree leaf block 0 [ 1176.868969][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.899414][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.200355][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.344639][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1177.356760][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1177.403154][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1177.454624][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.483080][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.508462][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.544172][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.554032][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.594152][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.604021][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.645885][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.674178][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.694165][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.704018][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.734285][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.754165][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.771670][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.783573][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.799455][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1177.815455][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1177.822910][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1177.879173][T13758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.901596][T13758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.930840][T13758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.941609][T14083] loop2: detected capacity change from 0 to 512 [ 1177.959052][T13758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.015982][T14083] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1724: bg 0: block 393: padding at end of block bitmap is not set [ 1178.058715][T14083] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 1178.109629][ T3642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1178.125850][ T3642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1178.135932][ T3642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1178.144268][ T3642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1178.154731][ T3642] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1178.161965][T14083] EXT4-fs (loop2): 2 truncates cleaned up [ 1178.162027][ T3642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1178.175114][T14083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1178.188922][ T3648] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1178.196271][ T3648] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1178.203601][ T3648] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1178.212555][ T3648] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1178.225245][ T3648] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1178.234298][ T3648] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1178.279878][ T26] audit: type=1804 audit(1723674660.905:480): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1724" name="/newroot/0/file0/.log" dev="loop2" ino=18 res=1 errno=0 [ 1178.361878][T14093] loop4: detected capacity change from 0 to 1024 [ 1178.482149][T14093] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1780: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1178.903863][T14093] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1780: Bad quota inode: 4, type: 1 [ 1179.020914][T14093] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1179.077718][T14093] EXT4-fs (loop4): mount failed [ 1179.185231][T13636] EXT4-fs (loop2): unmounting filesystem. [ 1179.556044][T14101] loop2: detected capacity change from 0 to 1024 [ 1179.642238][T14101] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1179.674800][T14101] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1781: Bad quota inode: 4, type: 1 [ 1179.811043][T14101] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1179.829993][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 1180.091307][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.101855][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.104692][T14101] EXT4-fs (loop2): mount failed [ 1180.128532][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1180.226727][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.262482][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.284440][ T3648] Bluetooth: hci8: command tx timeout [ 1180.834755][ T9578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.206811][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1182.215165][T14135] loop4: detected capacity change from 0 to 256 [ 1182.253311][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1182.286107][T14135] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 1182.364423][ T3648] Bluetooth: hci8: command tx timeout [ 1182.446362][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.615207][ T9578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.728876][T14141] loop3: detected capacity change from 0 to 256 [ 1182.738811][T14141] exfat: Deprecated parameter 'utf8' [ 1182.777205][T14141] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1184.524452][ T3642] Bluetooth: hci8: command tx timeout [ 1184.572914][ T9578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.583596][T14158] loop2: detected capacity change from 0 to 128 [ 1185.206779][ T26] audit: type=1800 audit(1723674667.825:481): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1789" name="file0" dev="loop2" ino=1048775 res=0 errno=0 [ 1185.364064][T14081] chnl_net:caif_netlink_parms(): no params data found [ 1186.297262][ T26] audit: type=1800 audit(1723674668.605:482): pid=14165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1789" name="bus" dev="loop2" ino=1048776 res=0 errno=0 [ 1186.536148][ T9578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.614430][ T3642] Bluetooth: hci8: command tx timeout [ 1186.715132][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.900287][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.912517][T14081] device bridge_slave_0 entered promiscuous mode [ 1186.938943][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.674335][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.688090][T14081] device bridge_slave_1 entered promiscuous mode [ 1187.733031][T14183] loop3: detected capacity change from 0 to 2048 [ 1187.815000][T14183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1188.044873][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.112778][ C1] eth0: bad gso: type: 1, size: 1408 [ 1188.148121][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.175030][T14191] loop4: detected capacity change from 0 to 1024 [ 1188.182175][T14191] hfsplus: unable to parse mount options [ 1188.980951][T14200] loop0: detected capacity change from 0 to 256 [ 1189.012467][T14198] loop2: detected capacity change from 0 to 1024 [ 1189.083154][T14200] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1189.236454][T14200] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1189.249102][T14198] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1796: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1189.682833][T14200] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1189.727766][ T102] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1189.780447][T14198] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1796: Bad quota inode: 4, type: 1 [ 1189.827503][T14198] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1189.861528][ T102] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1189.874856][ T26] audit: type=1800 audit(1723674672.445:483): pid=14200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1805" name="file1" dev="loop0" ino=1048781 res=0 errno=0 [ 1189.930529][T14198] EXT4-fs (loop2): mount failed [ 1189.957644][ T102] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1189.957644][ T102] [ 1190.028700][ T102] EXT4-fs (loop3): Total free blocks count 0 [ 1190.030875][T14081] team0: Port device team_slave_0 added [ 1190.043783][ T102] EXT4-fs (loop3): Free/Dirty block details [ 1190.129064][ T26] audit: type=1326 audit(1723674672.755:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.0.1805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x0 [ 1190.194550][ T102] EXT4-fs (loop3): free_blocks=2415919104 [ 1190.261134][ T102] EXT4-fs (loop3): dirty_blocks=2784 [ 1190.267600][ T102] EXT4-fs (loop3): Block reservation details [ 1190.279041][ T102] EXT4-fs (loop3): i_reserved_data_blocks=174 [ 1191.497616][T14081] team0: Port device team_slave_1 added [ 1191.809795][T10059] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 728 with error 28 [ 1191.904323][ T3722] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1192.645493][ T3722] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1192.681043][ T3722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.725914][ T3722] usb 5-1: config 0 descriptor?? [ 1193.163419][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'. [ 1193.215164][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.222176][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.256132][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.498115][T14242] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1193.507570][T14242] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1193.653754][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.675872][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.993412][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.811875][T14081] device hsr_slave_0 entered promiscuous mode [ 1194.915018][T14081] device hsr_slave_1 entered promiscuous mode [ 1194.935928][T14081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1195.064936][T14081] Cannot create hsr debugfs directory [ 1195.200627][T14261] loop2: detected capacity change from 0 to 512 [ 1195.315588][T14261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1195.334769][T14261] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 1195.836258][T14261] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1808: Directory hole found for htree leaf block 0 [ 1196.181029][T13636] EXT4-fs (loop2): unmounting filesystem. [ 1196.404290][ T3722] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1196.453062][ T3722] asix: probe of 5-1:0.0 failed with error -71 [ 1196.498293][ T3722] usb 5-1: USB disconnect, device number 22 [ 1197.168803][ T26] audit: type=1326 audit(1723674679.645:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.441307][ T26] audit: type=1326 audit(1723674679.655:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.478690][ T26] audit: type=1326 audit(1723674679.665:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.602372][ T26] audit: type=1326 audit(1723674679.665:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.674223][ T26] audit: type=1326 audit(1723674679.675:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.768370][ T26] audit: type=1326 audit(1723674679.675:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.858108][ T26] audit: type=1326 audit(1723674679.675:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1197.944376][ T26] audit: type=1326 audit(1723674679.675:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1198.014181][ T26] audit: type=1326 audit(1723674679.685:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1198.344220][ T26] audit: type=1326 audit(1723674679.000:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x7ffc0000 [ 1198.379948][ T9578] device hsr_slave_0 left promiscuous mode [ 1198.391860][ T9578] device hsr_slave_1 left promiscuous mode [ 1198.431867][ T9578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.470083][ T9578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.521580][ T9578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.554254][ T9578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.628154][ C1] eth0: bad gso: type: 1, size: 1408 [ 1198.698497][ T9578] device bridge_slave_1 left promiscuous mode [ 1198.707172][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.795493][ T9578] device bridge_slave_0 left promiscuous mode [ 1198.801766][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.811426][T14294] loop4: detected capacity change from 0 to 1024 [ 1198.894771][T14300] loop0: detected capacity change from 0 to 1024 [ 1198.907526][T14300] hfsplus: unable to parse mount options [ 1199.577958][T13945] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1199.605739][T14294] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1813: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1199.685631][T14294] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1813: Bad quota inode: 4, type: 1 [ 1199.703499][T14294] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1199.719036][ T9578] device veth1_macvtap left promiscuous mode [ 1199.729301][ T9578] device veth0_macvtap left promiscuous mode [ 1199.746958][ T9578] device veth1_vlan left promiscuous mode [ 1199.770669][T14294] EXT4-fs (loop4): mount failed [ 1199.781803][ T9578] device veth0_vlan left promiscuous mode [ 1200.271190][T14308] loop3: detected capacity change from 0 to 1024 [ 1200.936666][T14308] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1814: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1201.162805][T14308] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1814: Bad quota inode: 4, type: 1 [ 1201.204734][T14308] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1201.233246][T14308] EXT4-fs (loop3): mount failed [ 1203.190520][T14328] loop0: detected capacity change from 0 to 1024 [ 1203.243246][T14328] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1818: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1203.302732][T14328] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1818: Bad quota inode: 4, type: 1 [ 1203.334265][T14328] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1203.381100][T14328] EXT4-fs (loop0): mount failed [ 1204.163133][ T9578] team0 (unregistering): Port device team_slave_1 removed [ 1204.236951][ T9578] team0 (unregistering): Port device team_slave_0 removed [ 1204.319319][ T9578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.429678][ T9578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.545906][ T9578] bond0 (unregistering): Released all slaves [ 1205.807519][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 1205.826557][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 1205.865470][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 1205.985799][T14337] loop3: detected capacity change from 0 to 512 [ 1206.077882][T14341] loop4: detected capacity change from 0 to 256 [ 1206.170524][T14346] loop0: detected capacity change from 0 to 1024 [ 1206.180235][T14337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1206.190295][T14337] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038 (0x7fffffff) [ 1206.729771][T14350] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1819: Directory hole found for htree leaf block 0 [ 1207.012548][T14341] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1207.051264][T14346] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1830: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1207.089018][T14341] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1207.154786][T14346] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1830: Bad quota inode: 4, type: 1 [ 1207.327119][T14341] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1207.341511][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1207.341525][ T26] audit: type=1800 audit(1723674689.280:496): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1821" name="file1" dev="loop4" ino=1048782 res=0 errno=0 [ 1207.374579][T14346] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1207.420865][T14346] EXT4-fs (loop0): mount failed [ 1207.500195][T14356] loop2: detected capacity change from 0 to 512 [ 1207.619620][T14356] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.2.1822: corrupted xattr block 95 [ 1207.637117][T14356] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1822: bg 0: block 7: invalid block bitmap [ 1207.654980][T14356] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 1207.668123][T14356] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2932: inode #11: comm syz.2.1822: corrupted xattr block 95 [ 1207.683016][T14356] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 1207.692452][T14356] EXT4-fs (loop2): 1 orphan inode deleted [ 1207.698345][T14356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1207.755721][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1208.060750][ T26] audit: type=1326 audit(1723674689.990:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.4.1821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7293f799f9 code=0x0 [ 1208.269062][T14366] loop3: detected capacity change from 0 to 128 [ 1208.356921][T13636] EXT4-fs (loop2): unmounting filesystem. [ 1208.536467][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'. [ 1210.811369][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'. [ 1211.123866][T14081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1211.132015][T14393] loop3: detected capacity change from 0 to 512 [ 1211.145855][T14393] EXT4-fs warning (device loop3): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 1211.264053][T14081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1211.299024][T14081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1211.387181][T13944] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1211.409738][T14081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1211.657086][T14403] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1213.078289][T14409] loop2: detected capacity change from 0 to 512 [ 1213.544626][T14081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.567878][T14409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1213.612796][T14409] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 1213.691819][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1213.703966][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1213.814892][ T26] audit: type=1326 audit(1723674695.750:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1213.867884][T14081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.903383][T14424] loop0: detected capacity change from 0 to 256 [ 1213.949166][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1213.986203][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1214.035902][T14426] loop4: detected capacity change from 0 to 1024 [ 1214.044441][ T26] audit: type=1326 audit(1723674695.770:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1214.091840][T14428] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1833: Directory hole found for htree leaf block 0 [ 1214.332393][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.339609][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.423167][T14424] FAT-fs (loop0): Directory bread(block 64) failed [ 1214.538365][T14424] FAT-fs (loop0): Directory bread(block 65) failed [ 1214.566273][T14426] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1836: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1214.682022][T14424] FAT-fs (loop0): Directory bread(block 66) failed [ 1214.729836][ T26] audit: type=1326 audit(1723674695.770:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1214.738701][T14424] FAT-fs (loop0): Directory bread(block 67) failed [ 1214.753270][ T26] audit: type=1326 audit(1723674695.770:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1214.760117][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1214.792885][T14426] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1836: Bad quota inode: 4, type: 1 [ 1214.845344][T13636] EXT4-fs (loop2): unmounting filesystem. [ 1214.874034][T14426] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1214.894392][T14424] FAT-fs (loop0): Directory bread(block 68) failed [ 1214.900968][T14424] FAT-fs (loop0): Directory bread(block 69) failed [ 1214.915013][ T26] audit: type=1326 audit(1723674695.770:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1214.933893][T14424] FAT-fs (loop0): Directory bread(block 70) failed [ 1214.955417][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1214.978216][T14424] FAT-fs (loop0): Directory bread(block 71) failed [ 1215.002004][T14426] EXT4-fs (loop4): mount failed [ 1215.033612][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1215.041929][T14424] FAT-fs (loop0): Directory bread(block 72) failed [ 1215.070815][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.078061][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.115528][T14424] FAT-fs (loop0): Directory bread(block 73) failed [ 1215.124595][ T26] audit: type=1326 audit(1723674695.770:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1215.155138][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1215.220905][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1215.402117][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1215.470325][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1215.488247][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1215.496457][ T26] audit: type=1326 audit(1723674695.770:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1215.645792][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1215.969327][ T26] audit: type=1326 audit(1723674695.770:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1215.991832][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1216.094548][T14436] netlink: 'syz.2.1837': attribute type 8 has an invalid length. [ 1216.155988][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1216.164481][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1216.182069][ T26] audit: type=1326 audit(1723674695.770:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1216.214666][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1216.232234][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1216.254950][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1216.270033][ T26] audit: type=1326 audit(1723674695.770:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1216.313029][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 1216.343295][T14081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1218.092707][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.106708][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1218.322822][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.614309][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 1218.700750][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1218.711211][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1218.777951][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1218.798043][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1218.837387][T14081] device veth0_vlan entered promiscuous mode [ 1218.844792][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 1218.850424][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1219.210267][T12480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1219.258048][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 1219.258252][ T26] audit: type=1326 audit(1723674701.100:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1219.768391][T14081] device veth1_vlan entered promiscuous mode [ 1219.808329][T14490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1219.840123][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 1219.990715][T14490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1219.994172][ T26] audit: type=1326 audit(1723674701.100:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1220.052408][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1220.206269][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1220.234862][T14081] device veth0_macvtap entered promiscuous mode [ 1220.997990][ T26] audit: type=1326 audit(1723674701.100:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1221.009249][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.021286][ T26] audit: type=1326 audit(1723674701.100:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1221.053048][ T26] audit: type=1326 audit(1723674701.100:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1221.084646][ T26] audit: type=1326 audit(1723674701.110:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21f83799f9 code=0x7ffc0000 [ 1221.140765][T14081] device veth1_macvtap entered promiscuous mode [ 1221.178711][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1221.190183][T14511] loop3: detected capacity change from 0 to 512 [ 1221.200074][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1221.264164][T14511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1221.305857][T14511] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038 (0x7fffffff) [ 1221.317739][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.359402][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.369913][ T26] audit: type=1326 audit(1723674703.300:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.1847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21f83799f9 code=0x0 [ 1221.382338][T14517] loop4: detected capacity change from 0 to 1024 [ 1221.404683][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.434263][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.486411][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.518814][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.552443][T14517] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1848: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1221.586046][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.604788][T14517] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1848: Bad quota inode: 4, type: 1 [ 1221.815356][T14526] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1846: Directory hole found for htree leaf block 0 [ 1222.314206][T14517] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1222.361785][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.365271][T14517] EXT4-fs (loop4): mount failed [ 1222.404895][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.436029][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.491514][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.526581][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.556872][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.597831][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.642816][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.750706][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1222.799546][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1222.971550][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1223.062485][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 1223.137551][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.271260][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.357120][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.370223][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.397163][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.468166][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.485082][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.494407][T14544] loop0: detected capacity change from 0 to 1024 [ 1223.510728][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.522022][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.545214][T14546] loop3: detected capacity change from 0 to 512 [ 1223.555476][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.582294][T14544] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1851: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1223.612672][T14546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1223.634329][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.662040][T14546] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 1223.681356][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.721909][T14546] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 1223.735939][T14544] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1851: Bad quota inode: 4, type: 1 [ 1223.754127][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.766630][T14550] loop4: detected capacity change from 0 to 256 [ 1223.775685][T14546] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1850: Failed to acquire dquot type 0 [ 1223.779960][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.801451][T14550] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 1223.823259][T14546] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 1223.827633][T14544] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1223.842939][T14546] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1850: Failed to acquire dquot type 0 [ 1223.865370][T14544] EXT4-fs (loop0): mount failed [ 1223.879627][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.068042][T14543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1850'. [ 1224.087006][ C1] eth0: bad gso: type: 1, size: 1408 [ 1224.114725][T14546] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1850: bg 0: block 64: padding at end of block bitmap is not set [ 1224.181527][T14553] tmpfs: Bad value for 'nr_inodes' [ 1224.964837][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1224.973713][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1224.992000][T14546] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 1225.243429][T14560] loop2: detected capacity change from 0 to 1024 [ 1225.266234][T14081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.287863][T14560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1225.300726][T14546] __quota_error: 1 callbacks suppressed [ 1225.300745][T14546] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 1225.344560][T14081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.353299][T14081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.362632][T14546] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 1225.374224][T14560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1225.897129][T14081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.121858][T14546] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1850: Failed to acquire dquot type 0 [ 1226.156380][T13636] EXT4-fs (loop2): unmounting filesystem. [ 1226.165920][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1851'. [ 1226.204423][T14546] EXT4-fs (loop3): 1 orphan inode deleted [ 1226.235602][T14546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1226.415468][T14543] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz.3.1850: deleted inode referenced: 16 [ 1226.475709][T14543] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz.3.1850: deleted inode referenced: 16 [ 1226.565736][ T3721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.594784][T14543] overlayfs: failed to resolve './file2': -117 [ 1226.604108][ T3721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.705568][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1226.728050][ T5738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.740241][ T5738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.842050][T14582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.855828][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1226.915647][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1226.971706][T14582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.011726][T14582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.040273][T14582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.357144][ C1] eth0: bad gso: type: 1, size: 1408 [ 1227.809739][T14592] loop3: detected capacity change from 0 to 512 [ 1227.829637][T14592] EXT4-fs (loop3): 1 truncate cleaned up [ 1227.835393][T14592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1227.847943][T14592] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 13: comm syz.3.1858: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 1227.868280][T14592] EXT4-fs (loop3): Remounting filesystem read-only [ 1227.995315][T11839] EXT4-fs (loop3): unmounting filesystem. [ 1228.260081][T14599] loop3: detected capacity change from 0 to 1024 [ 1228.299584][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 1228.446297][T14599] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.1859: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1228.464654][T14599] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.1859: Bad quota inode: 4, type: 1 [ 1228.476678][T14599] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1228.587635][T14599] EXT4-fs (loop3): mount failed [ 1228.894159][ T3680] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1229.124130][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 1229.304335][ T3680] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1229.406226][ T3680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.463881][ T3680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1229.483436][ T3680] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1229.499488][T14611] loop0: detected capacity change from 0 to 1024 [ 1229.547227][T14611] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1872: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1229.586801][T14611] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1872: Bad quota inode: 4, type: 1 [ 1229.629141][T14611] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1229.645938][ T3680] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1229.683510][ T3680] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1229.734458][ T3680] usb 5-1: Product: syz [ 1229.738679][ T3680] usb 5-1: Manufacturer: syz [ 1229.775737][T14611] EXT4-fs (loop0): mount failed [ 1229.835409][ T3680] cdc_wdm 5-1:1.0: skipping garbage [ 1229.841708][ T3680] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1229.846001][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'. [ 1229.905284][ T26] audit: type=1326 audit(1723674711.840:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.1862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x0 [ 1230.334352][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'. [ 1230.442810][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1863'. [ 1230.741223][T14630] loop0: detected capacity change from 0 to 512 [ 1230.765111][T14630] EXT4-fs: Ignoring removed orlov option [ 1230.795917][T14630] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1230.812399][T14632] loop2: detected capacity change from 0 to 1024 [ 1230.840029][ T14] usb 5-1: USB disconnect, device number 23 [ 1230.937341][T14632] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1865: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1231.038307][T14632] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1865: Bad quota inode: 4, type: 1 [ 1231.074485][T14630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 1231.087541][T14632] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1231.122312][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 1231.134939][T14632] EXT4-fs (loop2): mount failed [ 1231.145430][T14630] System zones: 1-12 [ 1231.151023][T14630] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1864: casefold flag without casefold feature [ 1231.199398][T14630] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1864: missing EA_INODE flag [ 1231.239851][T14630] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1864: error while reading EA inode 12 err=-117 [ 1231.287598][T14630] EXT4-fs (loop0): 1 orphan inode deleted [ 1231.306842][T14630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1232.095610][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 1232.722900][T14655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1864'. [ 1233.158170][T14657] fuse: Bad value for 'fd' [ 1233.164191][T14657] syz.3.1870[14657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1233.164293][T14657] syz.3.1870[14657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1234.532220][T13758] EXT4-fs (loop0): unmounting filesystem. [ 1234.899688][T14665] loop2: detected capacity change from 0 to 1024 [ 1235.128220][T14672] dccp_invalid_packet: P.Data Offset(172) too large [ 1235.155610][T14665] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1874: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1235.228491][T14665] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1874: Bad quota inode: 4, type: 1 [ 1235.274159][T14665] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1235.345847][T14665] EXT4-fs (loop2): mount failed [ 1236.221837][T14689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1878'. [ 1237.106402][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'. [ 1237.325873][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1237.339441][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1237.349452][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1237.360068][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1237.384266][T10813] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1237.427826][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1237.437405][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1237.793701][T10813] usb 1-1: Using ep0 maxpacket: 32 [ 1238.386452][T14702] loop2: detected capacity change from 0 to 2048 [ 1238.404335][T10813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1238.476342][T14702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1238.484443][T10813] usb 1-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 1238.510252][T10813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1238.593071][T10813] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.664618][T14696] chnl_net:caif_netlink_parms(): no params data found [ 1238.896803][T14702] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1882'. [ 1238.906251][T10813] usb 1-1: string descriptor 0 read error: -22 [ 1238.913681][T10813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.958763][T10813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.113845][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.115364][T10813] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 1239.540427][ T3648] Bluetooth: hci4: command tx timeout [ 1239.829040][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.836409][T10813] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1239.843245][T10813] cdc_ncm 1-1:1.0: bind() failure [ 1239.865842][T14696] device bridge_slave_0 entered promiscuous mode [ 1239.941343][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.978887][T10813] usb 1-1: USB disconnect, device number 10 [ 1239.983590][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.001168][T14696] device bridge_slave_1 entered promiscuous mode [ 1240.100109][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.112615][T13636] EXT4-fs (loop2): unmounting filesystem. [ 1240.194220][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.291641][T14696] team0: Port device team_slave_0 added [ 1240.344274][T14696] team0: Port device team_slave_1 added [ 1240.471905][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.187023][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.266673][T14730] loop0: detected capacity change from 0 to 1024 [ 1241.348802][T14730] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1241.468578][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.556101][T14730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1241.724199][ T3648] Bluetooth: hci4: command tx timeout [ 1243.804258][ T3648] Bluetooth: hci4: command tx timeout [ 1243.856366][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.863353][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.880940][T14758] loop2: detected capacity change from 0 to 1024 [ 1243.894176][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.007147][T14758] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1891: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1244.117393][T14758] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1891: Bad quota inode: 4, type: 1 [ 1244.166004][ C1] eth0: bad gso: type: 1, size: 1408 [ 1244.226766][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.283684][T13758] EXT4-fs (loop0): unmounting filesystem. [ 1244.291714][T14758] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1245.061278][T14758] EXT4-fs (loop2): mount failed [ 1245.139095][T14696] device hsr_slave_0 entered promiscuous mode [ 1245.170099][T14696] device hsr_slave_1 entered promiscuous mode [ 1245.213183][T14696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.232209][T14696] Cannot create hsr debugfs directory [ 1245.463703][ T7176] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1246.040511][ T7176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1246.098285][ T7176] usb 5-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 1246.124501][ T3648] Bluetooth: hci4: command tx timeout [ 1246.136852][ T7176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.214516][ T7176] usb 5-1: config 0 descriptor?? [ 1246.338579][T14394] udevd[14394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.891820][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1891'. [ 1246.937738][T10966] usb 5-1: USB disconnect, device number 24 [ 1247.332201][ T5368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.534112][ T5368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.683773][ T26] audit: type=1326 audit(1723674729.411:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1247.792021][ T26] audit: type=1326 audit(1723674729.411:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1248.250209][ T5368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.299925][ T26] audit: type=1326 audit(1723674729.411:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1248.352601][T14805] loop4: detected capacity change from 0 to 16 [ 1248.453714][T14805] erofs: (device loop4): mounted with root inode @ nid 36. [ 1248.458386][T14797] loop2: detected capacity change from 0 to 32768 [ 1248.464240][ T26] audit: type=1326 audit(1723674729.411:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1248.520353][T14797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1901 (14797) [ 1248.607411][ T26] audit: type=1326 audit(1723674729.411:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1248.655694][ T5368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.698978][T14797] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1248.709504][T14797] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1248.718275][T14797] BTRFS info (device loop2): force clearing of disk cache [ 1248.728641][T14797] BTRFS info (device loop2): using free space tree [ 1248.745915][ T26] audit: type=1326 audit(1723674729.411:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1249.239895][ T26] audit: type=1326 audit(1723674729.411:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1249.591241][ T26] audit: type=1326 audit(1723674729.411:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1250.425822][ T26] audit: type=1326 audit(1723674729.411:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1250.470596][T14797] BTRFS info (device loop2): enabling ssd optimizations [ 1250.478864][T14797] BTRFS info (device loop2): rebuilding free space tree [ 1250.635091][ T26] audit: type=1326 audit(1723674729.411:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa86b799f9 code=0x7ffc0000 [ 1250.662343][T14838] loop4: detected capacity change from 0 to 1024 [ 1250.734367][T13636] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1250.825574][T14838] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1905: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1250.922850][T14394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (14394) [ 1250.966505][T14838] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.1905: Bad quota inode: 4, type: 1 [ 1251.216354][T14838] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1251.309809][T14838] EXT4-fs (loop4): mount failed [ 1252.115559][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 1252.851402][T14867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1907'. [ 1253.725863][T14878] loop2: detected capacity change from 0 to 1024 [ 1254.013329][T14878] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1908: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1254.175932][T14878] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1908: Bad quota inode: 4, type: 1 [ 1254.205889][T14878] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1254.274034][T14878] EXT4-fs (loop2): mount failed [ 1254.396173][T14883] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1255.445912][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 1255.456445][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888049fd8000: rx timeout, send abort [ 1255.612117][T14696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1255.644635][T14696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1255.929310][T14696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1255.947894][T14696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1256.014580][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888049fd8000: abort rx timeout. Force session deactivation [ 1257.410165][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.608372][ T5368] device hsr_slave_0 left promiscuous mode [ 1258.670334][ T5368] device hsr_slave_1 left promiscuous mode [ 1258.694154][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.701632][ T5368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.753513][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.774867][ T5368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.819565][ T5368] device bridge_slave_1 left promiscuous mode [ 1258.851777][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.675502][ T5368] device bridge_slave_0 left promiscuous mode [ 1259.704559][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.850739][ T5368] device veth1_macvtap left promiscuous mode [ 1259.869616][ T5368] device veth0_macvtap left promiscuous mode [ 1259.905859][ T5368] device veth1_vlan left promiscuous mode [ 1259.911731][ T5368] device veth0_vlan left promiscuous mode [ 1260.196389][T14944] loop0: detected capacity change from 0 to 1024 [ 1260.197271][T14945] loop2: detected capacity change from 0 to 256 [ 1260.321675][T14945] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1260.360889][T14944] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1927: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1260.397438][T14945] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1260.442235][T14944] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.1927: Bad quota inode: 4, type: 1 [ 1260.470278][T14945] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1260.493779][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1260.493794][ T26] audit: type=1800 audit(1723674741.244:617): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1918" name="file1" dev="loop2" ino=1048811 res=0 errno=0 [ 1260.577474][T14944] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1260.590809][ T26] audit: type=1326 audit(1723674741.336:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14942 comm="syz.2.1918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f143bd799f9 code=0x0 [ 1260.638083][T14944] EXT4-fs (loop0): mount failed [ 1261.556386][T14964] loop2: detected capacity change from 0 to 1024 [ 1261.603846][T14964] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1921: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1261.748466][T14964] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1921: Bad quota inode: 4, type: 1 [ 1261.787997][T14964] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1261.804621][T14964] EXT4-fs (loop2): mount failed [ 1263.751760][ T5368] team0 (unregistering): Port device team_slave_1 removed [ 1263.768209][T14978] loop4: detected capacity change from 0 to 1024 [ 1263.848643][ T5368] team0 (unregistering): Port device team_slave_0 removed [ 1263.859358][T14978] hfsplus: extend alloc file! (8192,65536,366) [ 1263.940277][ T5368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.053955][T14980] loop4: detected capacity change from 0 to 256 [ 1264.074575][ T5368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.142719][ T26] audit: type=1800 audit(1723674744.613:619): pid=14978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1923" name="bus" dev="loop4" ino=1048812 res=0 errno=0 [ 1264.621034][T14980] kvm: pic: non byte write [ 1265.279350][ T28] INFO: task syz.2.1711:13553 blocked for more than 143 seconds. [ 1265.287786][ T28] Not tainted 6.1.105-syzkaller #0 [ 1265.320678][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1265.337302][ T28] task:syz.2.1711 state:D stack:25248 pid:13553 ppid:7493 flags:0x00004004 [ 1265.356275][ T28] Call Trace: [ 1265.363270][ T28] [ 1265.370567][ T28] __schedule+0x143f/0x4570 [ 1265.379965][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1265.393174][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1265.405494][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1265.413706][ T28] schedule+0xbf/0x180 [ 1265.418397][ T28] schedule_preempt_disabled+0xf/0x20 [ 1265.424979][ T28] __mutex_lock+0x6b9/0xd80 [ 1265.429654][ T28] ? __mutex_lock+0x53c/0xd80 [ 1265.434969][ T28] ? exfat_sync_fs+0x67/0x100 [ 1265.439753][ T28] ? mutex_lock_nested+0x10/0x10 [ 1265.445171][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1265.450487][ T28] exfat_sync_fs+0x67/0x100 [ 1265.457123][ T28] iterate_supers+0x127/0x1e0 [ 1265.461912][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 1265.467460][ T28] ksys_sync+0xd7/0x1c0 [ 1265.471725][ T28] ? sync_filesystem+0x220/0x220 [ 1265.477181][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1265.518688][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1265.552880][ T28] __do_sys_sync+0xa/0x10 [ 1265.569121][ T28] do_syscall_64+0x3b/0xb0 [ 1265.585573][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1265.601591][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.623567][ T28] RIP: 0033:0x7fdb213799f9 [ 1265.637761][ T28] RSP: 002b:00007fdb22142038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1265.665372][ T28] RAX: ffffffffffffffda RBX: 00007fdb21516058 RCX: 00007fdb213799f9 [ 1265.695268][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.721448][ T28] RBP: 00007fdb213e78ee R08: 0000000000000000 R09: 0000000000000000 [ 1265.748929][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.775076][ T28] R13: 0000000000000000 R14: 00007fdb21516058 R15: 00007ffeabc85398 [ 1265.803588][ T28] [ 1265.813346][ T28] [ 1265.813346][ T28] Showing all locks held in the system: [ 1265.821582][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1265.827016][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1265.837613][ T28] 1 lock held by rcu_tasks_trace/13: [ 1265.843680][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1265.854879][ T28] 1 lock held by khungtaskd/28: [ 1265.859752][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1265.869717][ T28] 3 locks held by kworker/u4:4/102: [ 1265.884826][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1265.896105][ T28] #1: ffffc900015c7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1265.916623][ T28] #2: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1265.939862][ T28] 2 locks held by kworker/1:2/946: [ 1265.945018][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1265.981239][ T28] #1: ffffc9000494fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.015745][ T28] 2 locks held by getty/3396: [ 1266.020478][ T28] #0: ffff88814b252098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1266.046622][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1266.074020][ T28] 3 locks held by syz-executor/3635: [ 1266.079352][ T28] 3 locks held by kworker/1:4/3684: [ 1266.084701][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.095178][ T28] #1: ffffc9000429fd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.105723][ T28] #2: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1266.116210][ T28] 2 locks held by kworker/u4:11/3837: [ 1266.121586][ T28] #0: ffff8880b983a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 1266.132076][ T28] #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 1266.143621][ T28] 2 locks held by kworker/u4:16/4947: [ 1266.149243][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.160404][ T28] #1: ffffc900043afd20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.172037][ T28] 5 locks held by kworker/u4:18/5368: [ 1266.178117][ T28] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.190506][ T28] #1: ffffc9000605fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.200539][ T28] #2: ffffffff8e4ec010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 1266.209901][ T28] #3: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0x9d0 [ 1266.220054][ T28] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1266.231030][ T28] 2 locks held by syz.2.1711/13553: [ 1266.236952][ T28] #0: ffff88805aff40e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 1266.259723][ T28] #1: ffff88805aff20e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 1266.269238][ T28] 3 locks held by kworker/u4:21/14130: [ 1266.274714][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.287293][ T28] #1: ffffc900041afd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.299669][ T28] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 1266.310741][ T28] 1 lock held by syz-executor/14696: [ 1266.316037][ T28] #0: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1266.326012][ T28] 3 locks held by kworker/0:0/14722: [ 1266.331661][ T28] #0: ffff88814af90938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.349680][ T28] #1: ffffc900060cfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1266.372011][ T28] #2: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 1266.381676][ T28] 1 lock held by syz.0.1927/14959: [ 1266.395760][ T28] #0: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6e0 [ 1266.405524][ T28] 2 locks held by syz.1.1919/14948: [ 1266.421598][ T28] #0: ffffffff8e4ec010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 1266.437243][ T28] #1: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 1266.457510][ T28] 1 lock held by syz.2.1921/14964: [ 1266.463476][ T28] #0: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6e0 [ 1266.486854][ T28] [ 1266.489228][ T28] ============================================= [ 1266.489228][ T28] [ 1266.521984][ T28] NMI backtrace for cpu 1 [ 1266.526372][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 1266.534267][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1266.544329][ T28] Call Trace: [ 1266.547700][ T28] [ 1266.550634][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1266.555327][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1266.560794][ T28] ? panic+0x764/0x764 [ 1266.564863][ T28] ? vprintk_emit+0x622/0x740 [ 1266.569552][ T28] ? printk_sprint+0x490/0x490 [ 1266.574328][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1266.579465][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1266.584430][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1266.590591][ T28] ? _printk+0xd1/0x111 [ 1266.594742][ T28] ? panic+0x764/0x764 [ 1266.598796][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1266.603634][ T28] ? panic+0x764/0x764 [ 1266.607705][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 1266.613767][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1266.619826][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 1266.625801][ T28] watchdog+0xf88/0xfd0 [ 1266.629950][ T28] ? watchdog+0x1f8/0xfd0 [ 1266.634278][ T28] kthread+0x28d/0x320 [ 1266.638333][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1266.643346][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1266.647923][ T28] ret_from_fork+0x1f/0x30 [ 1266.652336][ T28] [ 1266.656478][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1266.661722][ C0] NMI backtrace for cpu 0 [ 1266.661735][ C0] CPU: 0 PID: 4947 Comm: kworker/u4:16 Not tainted 6.1.105-syzkaller #0 [ 1266.661752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1266.661761][ C0] Workqueue: bat_events batadv_nc_worker [ 1266.661785][ C0] RIP: 0010:lock_acquire+0x80/0x5a0 [ 1266.661807][ C0] Code: 41 48 c7 44 24 48 11 da b5 8c 48 c7 44 24 50 40 72 6a 81 4c 8d 64 24 40 49 c1 ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 2c <43> c7 44 2c 09 f2 f2 f2 00 43 c7 44 2c 11 f3 f3 f3 f3 66 43 c7 44 [ 1266.661820][ C0] RSP: 0018:ffffc900043afa80 EFLAGS: 00000a02 [ 1266.661832][ C0] RAX: f2f2f200f1f1f1f1 RBX: ffff88805869c0c0 RCX: 0000000000000002 [ 1266.661844][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d32afc0 [ 1266.661854][ C0] RBP: ffffc900043afbe0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.661863][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000875f58 [ 1266.661874][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1266.661884][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1266.661897][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.661908][ C0] CR2: 00007f72940e8178 CR3: 000000007d5f3000 CR4: 00000000003506f0 [ 1266.661921][ C0] Call Trace: [ 1266.661926][ C0] [ 1266.661933][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1266.661953][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1266.661972][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1266.661991][ C0] ? nmi_handle+0x25/0x440 [ 1266.662023][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1266.662042][ C0] ? nmi_handle+0x12e/0x440 [ 1266.662061][ C0] ? nmi_handle+0x25/0x440 [ 1266.662079][ C0] ? lock_acquire+0x80/0x5a0 [ 1266.662096][ C0] ? default_do_nmi+0x62/0x150 [ 1266.662116][ C0] ? exc_nmi+0xa8/0x100 [ 1266.662133][ C0] ? end_repeat_nmi+0x16/0x31 [ 1266.662156][ C0] ? lock_acquire+0x80/0x5a0 [ 1266.662173][ C0] ? lock_acquire+0x80/0x5a0 [ 1266.662191][ C0] ? lock_acquire+0x80/0x5a0 [ 1266.662209][ C0] [ 1266.662213][ C0] [ 1266.662222][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1266.662241][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1266.662258][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1266.662277][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1266.662299][ C0] batadv_nc_worker+0xe8/0x610 [ 1266.662315][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1266.662332][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1266.662350][ C0] ? process_one_work+0x7a9/0x11d0 [ 1266.662365][ C0] process_one_work+0x8a9/0x11d0 [ 1266.662388][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1266.662406][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1266.662421][ C0] ? kthread_data+0x4e/0xc0 [ 1266.662441][ C0] ? wq_worker_running+0x97/0x190 [ 1266.662461][ C0] worker_thread+0xa47/0x1200 [ 1266.662488][ C0] kthread+0x28d/0x320 [ 1266.662500][ C0] ? worker_clr_flags+0x190/0x190 [ 1266.662515][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1266.662529][ C0] ret_from_fork+0x1f/0x30 [ 1266.662553][ C0] [ 1266.703398][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1266.703415][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 1266.703433][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1266.703442][ T28] Call Trace: [ 1266.703449][ T28] [ 1266.703456][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1266.703486][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1266.703508][ T28] ? panic+0x764/0x764 [ 1266.703524][ T28] ? llist_add_batch+0x160/0x1d0 [ 1266.703549][ T28] ? vscnprintf+0x59/0x80 [ 1266.703568][ T28] panic+0x318/0x764 [ 1266.703585][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1266.703609][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1266.703630][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1266.703650][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 1266.703674][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 1266.703699][ T28] watchdog+0xfc7/0xfd0 [ 1266.703724][ T28] ? watchdog+0x1f8/0xfd0 [ 1266.703750][ T28] kthread+0x28d/0x320 [ 1266.703765][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1266.703783][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1266.703799][ T28] ret_from_fork+0x1f/0x30 [ 1266.703831][ T28] [ 1266.719127][ T28] Kernel Offset: disabled [ 1267.080558][ T28] Rebooting in 86400 seconds..