last executing test programs: 2m4.30334268s ago: executing program 3 (id=585): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)=' ', 0x1, 0x4000080, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 2m3.775764302s ago: executing program 3 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x200, &(0x7f0000000140)=0x0) io_destroy(r2) 2m2.890478666s ago: executing program 3 (id=591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x80, 0x3, 0xf, 0x6, 0xff, 0x28, 0xd5, 0xb, 0xd, 0xf8, 0x5, 0x5, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000640)="627819", 0x3}], 0x1) 2m0.965969875s ago: executing program 3 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) 2m0.180112858s ago: executing program 3 (id=604): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x26) r1 = open(0x0, 0x4000, 0x0) dup3(r1, r0, 0x0) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x19000}]) 1m59.233559532s ago: executing program 3 (id=609): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1eb800, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 1m57.973729368s ago: executing program 32 (id=609): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1eb800, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 7.252170697s ago: executing program 4 (id=1076): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) 5.822827904s ago: executing program 1 (id=1083): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) fstatfs(r1, &(0x7f0000000140)=""/15) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8], 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) truncate(&(0x7f0000000380)='./file2\x00', 0x0) 5.535913205s ago: executing program 5 (id=1084): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 4.35441206s ago: executing program 4 (id=1091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x15}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.142801961s ago: executing program 1 (id=1092): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 4.123093781s ago: executing program 5 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 4.019988262s ago: executing program 2 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)={0x78, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x78}}, 0x0) 3.905561022s ago: executing program 4 (id=1095): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@nogrpid}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x9bad}}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, 0x0) quotactl$Q_GETINFO(0x1fcaec641b476ac4, &(0x7f00000001c0)=@sr0, r2, &(0x7f00000003c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r2, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000001811", @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r8}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.708752743s ago: executing program 0 (id=1096): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004094}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 3.495054224s ago: executing program 2 (id=1097): socket(0x2000000000000021, 0x2, 0x10000000000002) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) fallocate(r0, 0x8, 0x0, 0x1000) 3.440072205s ago: executing program 5 (id=1098): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 3.210263646s ago: executing program 1 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 3.080034346s ago: executing program 0 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) exit(0x7) 2.847932387s ago: executing program 4 (id=1101): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2.847437697s ago: executing program 2 (id=1102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.664421398s ago: executing program 5 (id=1103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4}, {0x1}}, [{0x8, 0xb, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="01", 0x1}], 0x1}, 0x40041) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfe0b}}, 0x20004080) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r8 = io_uring_setup(0x30d1, &(0x7f0000000340)={0x0, 0x0, 0x40, 0xffffffff, 0xce}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6}]}) getresuid(0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2.18794331s ago: executing program 2 (id=1104): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x80}}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000100), 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000040000000000000541de3cea47721580061bc24cf4080f2d3c60b2e2c246cd37ea2852e74203493a8b1cd1cf8239e3f7d6af8db7b6d835922fb0375871b637b6a9e0846d4d4e2b42c382db7e02f7b8538f39305a95e1a4ee51b86fa535b9c5610fb15453165540cc893e6f959cc7175be22d16afd232d30dffa1638add46c7c7c9bcd706eda3bc77a5e8116e5e3a58915ab6ec210f681152f55289ef3ae8ec004b9a0b700f77e31527ead8f801f7ffaf9ee47fb7e185d750ee18170"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = memfd_secret(0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x2284, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x100fffe}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) msgget(0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) open_tree(0xffffffffffffffff, 0x0, 0x800) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 1.924021752s ago: executing program 4 (id=1105): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000005c0)=0x6, 0xfe69) 1.923673331s ago: executing program 1 (id=1106): socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 1.923398821s ago: executing program 0 (id=1107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x98}}, 0x0) 1.478337993s ago: executing program 5 (id=1108): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1.303348574s ago: executing program 2 (id=1109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1.283958784s ago: executing program 0 (id=1110): socketpair(0x18, 0x0, 0x2, 0x0) 1.057824135s ago: executing program 1 (id=1111): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd27, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="8302", 0x2}, {0x0, 0x500}], 0x2}, 0x24044056) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 835.542476ms ago: executing program 5 (id=1112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r3}, &(0x7f0000000300)=0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5, 0x10000}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001100)={r5, 0x6, 0xee8}, &(0x7f0000001140)=0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x6, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYBLOB="0300000000000000240012800c0001"], 0x54}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001440)={0x0, 0x8, "de8b26c60bd2bb62"}, &(0x7f0000001480)=0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8], 0x6c}, 0x1, 0xba01}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) 835.340366ms ago: executing program 0 (id=1113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/167, 0xa7}], 0x1) 835.153716ms ago: executing program 2 (id=1114): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) read$watch_queue(r2, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) 529.523598ms ago: executing program 4 (id=1115): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x549, &(0x7f0000001800)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000001c300)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0x10000) 389.509308ms ago: executing program 1 (id=1116): faccessat(0xffffffffffffffff, 0x0, 0x130) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): : bogus i_mode (0) [ 232.081816][ T5091] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.265: couldn't read orphan inode 17 (err -117) [ 232.191373][ T5091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.433771][ T5087] loop1: detected capacity change from 0 to 8192 [ 232.670505][ T5087] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 232.739790][ T5087] FAT-fs (loop1): Filesystem has been set read-only [ 232.759636][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 235.753303][ T5118] loop3: detected capacity change from 0 to 256 [ 236.132198][ T5122] loop4: detected capacity change from 0 to 512 [ 236.210400][ T5122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm +}[@: bg 0: block 16: invalid block bitmap [ 236.231544][ T5129] loop1: detected capacity change from 0 to 128 [ 236.292038][ T5122] EXT4-fs (loop4): Remounting filesystem read-only [ 236.304345][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.313768][ T5122] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 236.323961][ T5129] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.425775][ T5122] EXT4-fs (loop4): Remounting filesystem read-only [ 236.432660][ T5122] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm +}[@: invalid indirect mapped block 5 (level 0) [ 236.455902][ T5122] EXT4-fs (loop4): Remounting filesystem read-only [ 236.476194][ T5122] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm +}[@: invalid indirect mapped block 4294967295 (level 1) [ 236.519804][ T5122] EXT4-fs (loop4): Remounting filesystem read-only [ 236.541746][ T5129] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.280: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 236.550395][ T5122] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm +}[@: invalid indirect mapped block 4294967295 (level 2) [ 236.603094][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 236.603126][ T27] audit: type=1326 audit(1732273554.781:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 236.634239][ T5122] EXT4-fs (loop4): Remounting filesystem read-only [ 236.657663][ T5122] EXT4-fs (loop4): 1 truncate cleaned up [ 236.708667][ T5122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 236.732375][ T5129] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 236.759863][ T27] audit: type=1326 audit(1732273554.781:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 236.877398][ T27] audit: type=1326 audit(1732273554.781:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 236.957517][ T27] audit: type=1326 audit(1732273554.781:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.037522][ T27] audit: type=1326 audit(1732273554.781:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.135792][ T27] audit: type=1326 audit(1732273554.781:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.222605][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 237.236158][ T27] audit: type=1326 audit(1732273554.781:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.328798][ T27] audit: type=1326 audit(1732273554.781:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.389111][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 237.458447][ T27] audit: type=1326 audit(1732273554.781:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.587657][ T27] audit: type=1326 audit(1732273554.791:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 237.766756][ T5139] loop2: detected capacity change from 0 to 8192 [ 237.980296][ T5139] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 238.036969][ T5139] FAT-fs (loop2): Filesystem has been set read-only [ 239.545752][ T5172] tipc: Enabled bearer , priority 0 [ 239.601718][ T5170] tipc: Disabling bearer [ 240.312480][ T5185] loop3: detected capacity change from 0 to 1024 [ 240.403924][ T5185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.494421][ T5181] loop2: detected capacity change from 0 to 8192 [ 240.580223][ T5185] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.307: Failed to acquire dquot type 1 [ 240.901629][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 241.880866][ T5208] tipc: Started in network mode [ 241.890859][ T5208] tipc: Node identity fe758a43a421, cluster identity 4711 [ 241.912759][ T5211] loop3: detected capacity change from 0 to 764 [ 241.928341][ T5208] tipc: Enabled bearer , priority 0 [ 241.968970][ T5211] rock: directory entry would overflow storage [ 241.982706][ T5206] tipc: Disabling bearer [ 242.007591][ T5211] rock: sig=0x4654, size=5, remaining=4 [ 242.431905][ T27] kauditd_printk_skb: 133 callbacks suppressed [ 242.431952][ T27] audit: type=1326 audit(1732273560.611:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 242.577955][ T27] audit: type=1326 audit(1732273560.701:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 242.673613][ T27] audit: type=1326 audit(1732273560.701:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 242.778152][ T27] audit: type=1326 audit(1732273560.701:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 242.877302][ T27] audit: type=1326 audit(1732273560.711:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 242.966823][ T27] audit: type=1326 audit(1732273560.711:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 243.056851][ T27] audit: type=1326 audit(1732273560.711:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 243.164863][ T27] audit: type=1326 audit(1732273560.711:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 243.266031][ T27] audit: type=1326 audit(1732273560.711:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 243.377572][ T27] audit: type=1326 audit(1732273560.711:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 243.396170][ T5231] Process accounting resumed [ 243.541981][ T5231] loop0: detected capacity change from 0 to 256 [ 243.574644][ T5226] loop3: detected capacity change from 0 to 8192 [ 243.640842][ T5231] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 243.673512][ T5231] FAT-fs (loop0): Filesystem has been set read-only [ 243.841658][ T5238] loop1: detected capacity change from 0 to 512 [ 243.872593][ T5238] EXT4-fs: Ignoring removed orlov option [ 243.918728][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.983510][ T5238] EXT4-fs (loop1): orphan cleanup on readonly fs [ 244.076964][ T5238] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.329: bg 0: block 248: padding at end of block bitmap is not set [ 244.099723][ T5238] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.329: Failed to acquire dquot type 1 [ 244.133176][ T5238] EXT4-fs (loop1): 1 truncate cleaned up [ 244.152734][ T5238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 244.240473][ T5238] EXT4-fs: Ignoring removed orlov option [ 244.266343][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.309387][ T5238] EXT4-fs error (device loop1): __ext4_remount:6449: comm syz.1.329: Abort forced by user [ 244.543318][ T5246] tipc: Started in network mode [ 244.557586][ T5246] tipc: Node identity da5db4068782, cluster identity 4711 [ 244.584235][ T5248] loop4: detected capacity change from 0 to 512 [ 244.618812][ T5246] tipc: Enabled bearer , priority 0 [ 244.644640][ T5248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.664857][ T5238] syz.1.329 (5238) used greatest stack depth: 19352 bytes left [ 244.749330][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 244.764107][ T5245] tipc: Disabling bearer [ 244.783444][ T5248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 244.837741][ T5248] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.611087][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 246.333622][ T5273] loop3: detected capacity change from 0 to 2048 [ 246.408372][ T5273] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 246.654293][ T5273] loop3: detected capacity change from 0 to 512 [ 246.767730][ T5284] loop0: detected capacity change from 0 to 512 [ 246.777805][ T5273] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #2: comm syz.3.341: corrupted xattr block 255 [ 246.823671][ T5284] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.345: inode #1: comm syz.0.345: iget: illegal inode # [ 246.863392][ T5284] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.345: error while reading EA inode 1 err=-117 [ 246.882239][ T5284] EXT4-fs (loop0): 1 orphan inode deleted [ 246.888187][ T5284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 246.907589][ T5273] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 246.949007][ T5273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.008181][ T5273] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #2: comm syz.3.341: corrupted xattr block 255 [ 247.047928][ T5276] loop1: detected capacity change from 0 to 8192 [ 247.150966][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 247.420720][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 248.132997][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 248.133030][ T27] audit: type=1326 audit(1732273566.311:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.237683][ T27] audit: type=1326 audit(1732273566.321:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.321891][ T27] audit: type=1326 audit(1732273566.321:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.428909][ T27] audit: type=1326 audit(1732273566.321:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.534934][ T27] audit: type=1326 audit(1732273566.321:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.617371][ T27] audit: type=1326 audit(1732273566.341:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.728007][ T27] audit: type=1326 audit(1732273566.341:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.827320][ T27] audit: type=1326 audit(1732273566.341:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 248.928691][ T27] audit: type=1326 audit(1732273566.341:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 249.004274][ T27] audit: type=1326 audit(1732273566.341:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 249.526458][ T5315] loop0: detected capacity change from 0 to 512 [ 249.622207][ T5315] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.358: inode #1: comm syz.0.358: iget: illegal inode # [ 249.760292][ T5315] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.358: error while reading EA inode 1 err=-117 [ 249.802931][ T5315] EXT4-fs (loop0): 1 orphan inode deleted [ 249.820294][ T5316] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 249.823353][ T5315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 249.840264][ T5316] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 250.204049][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 251.265337][ T5331] loop1: detected capacity change from 0 to 256 [ 251.432510][ T5331] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 251.461843][ T5331] FAT-fs (loop1): Filesystem has been set read-only [ 251.743506][ T5331] Process accounting resumed [ 251.888902][ T5341] loop0: detected capacity change from 0 to 128 [ 252.189516][ T5348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.196865][ T5348] IPv6: NLM_F_CREATE should be set when creating new route [ 252.223151][ T5346] loop2: detected capacity change from 0 to 512 [ 252.352087][ T5346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.371: inode #1: comm syz.2.371: iget: illegal inode # [ 252.438272][ T5346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.371: error while reading EA inode 1 err=-117 [ 252.468295][ T5346] EXT4-fs (loop2): 1 orphan inode deleted [ 252.474198][ T5346] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.980247][ T5360] loop0: detected capacity change from 0 to 1024 [ 253.077769][ T5360] JBD2: no valid journal superblock found [ 253.113989][ T5360] EXT4-fs (loop0): error loading journal [ 254.105495][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 255.423398][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 255.423428][ T27] audit: type=1326 audit(1732273573.601:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 255.676976][ T27] audit: type=1326 audit(1732273573.641:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 255.847576][ T27] audit: type=1326 audit(1732273573.641:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 255.941036][ T27] audit: type=1326 audit(1732273573.681:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 255.963853][ T27] audit: type=1326 audit(1732273573.681:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 255.986450][ T27] audit: type=1326 audit(1732273573.711:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 256.010781][ T27] audit: type=1326 audit(1732273573.711:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 256.033321][ T27] audit: type=1326 audit(1732273573.781:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 256.834767][ T5388] loop3: detected capacity change from 0 to 512 [ 256.883744][ T5388] EXT4-fs: inline encryption not supported [ 257.058065][ T5388] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 257.107444][ T5388] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 257.127332][ T5388] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.384: Corrupt directory, running e2fsck is recommended [ 257.172944][ T5388] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 257.208007][ T5388] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.384: corrupted in-inode xattr [ 257.255744][ T5388] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.384: couldn't read orphan inode 15 (err -117) [ 257.299721][ T5388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.511763][ T5400] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.384'. [ 257.538354][ T5398] loop4: detected capacity change from 0 to 512 [ 257.604159][ T5388] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.384'. [ 257.670602][ T5398] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.386: inode #1: comm syz.4.386: iget: illegal inode # [ 257.694345][ T5398] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.386: error while reading EA inode 1 err=-117 [ 257.701120][ T5388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 257.709142][ T5398] EXT4-fs (loop4): 1 orphan inode deleted [ 257.723506][ T5398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 257.824710][ T5388] netlink: 348 bytes leftover after parsing attributes in process `syz.3.384'. [ 257.863033][ T5402] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 257.915737][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 257.976106][ T5402] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 258.099945][ T5402] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.384: Corrupt directory, running e2fsck is recommended [ 259.625161][ T27] audit: type=1326 audit(1732273577.801:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 259.715901][ T27] audit: type=1326 audit(1732273577.831:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 260.241599][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 260.298458][ T5424] syz.0.396[5424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.298670][ T5424] syz.0.396[5424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.686755][ T5430] loop3: detected capacity change from 0 to 256 [ 260.809725][ T5430] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 260.840729][ T5430] FAT-fs (loop3): Filesystem has been set read-only [ 261.049820][ T5435] loop1: detected capacity change from 0 to 512 [ 261.064441][ T5428] loop4: detected capacity change from 0 to 8192 [ 261.104703][ T5435] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.400: inode #1: comm syz.1.400: iget: illegal inode # [ 261.130929][ T5435] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.400: error while reading EA inode 1 err=-117 [ 261.198485][ T5435] EXT4-fs (loop1): 1 orphan inode deleted [ 261.204382][ T5435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.258342][ T5436] loop0: detected capacity change from 0 to 512 [ 261.353872][ T5436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.383740][ T5436] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.544108][ T5436] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 261.576148][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 261.785331][ T5446] loop2: detected capacity change from 0 to 256 [ 261.893316][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 262.453140][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 262.453172][ T27] audit: type=1326 audit(1732273580.631:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 262.541317][ T27] audit: type=1326 audit(1732273580.671:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 262.671952][ T27] audit: type=1326 audit(1732273580.671:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 262.768056][ T5459] smc: net device bond0 applied user defined pnetid SYZ0 [ 262.785590][ T27] audit: type=1326 audit(1732273580.671:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 262.821674][ T5461] smc: net device bond0 erased user defined pnetid SYZ0 [ 262.887546][ T27] audit: type=1326 audit(1732273580.681:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 262.997788][ T27] audit: type=1326 audit(1732273580.681:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 263.077563][ T27] audit: type=1326 audit(1732273580.711:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 263.182881][ T27] audit: type=1326 audit(1732273580.711:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 263.307713][ T27] audit: type=1326 audit(1732273580.711:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 263.393102][ T27] audit: type=1326 audit(1732273580.711:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 263.737818][ T5473] loop2: detected capacity change from 0 to 512 [ 263.833492][ T5473] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.415: inode #1: comm syz.2.415: iget: illegal inode # [ 263.948162][ T5473] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.415: error while reading EA inode 1 err=-117 [ 263.969131][ T5473] EXT4-fs (loop2): 1 orphan inode deleted [ 263.996495][ T5473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 264.042274][ T5480] loop4: detected capacity change from 0 to 512 [ 264.072214][ T5480] ext4: Unknown parameter 'obj_role' [ 264.380207][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 264.479914][ T5476] loop3: detected capacity change from 0 to 8192 [ 264.750685][ T5488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.421'. [ 265.443604][ T5497] loop2: detected capacity change from 0 to 256 [ 265.513218][ T5497] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 265.550634][ T5497] FAT-fs (loop2): Filesystem has been set read-only [ 266.575410][ T5515] loop0: detected capacity change from 0 to 1024 [ 266.628123][ T5515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 266.991233][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 267.394238][ T5528] loop3: detected capacity change from 0 to 256 [ 267.457589][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 267.457623][ T27] audit: type=1326 audit(1732273585.641:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 267.462901][ T5528] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 267.467523][ T27] audit: type=1326 audit(1732273585.641:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ec97d1b0 code=0x7ffc0000 [ 267.574890][ T5520] loop2: detected capacity change from 0 to 8192 [ 267.587664][ T5528] FAT-fs (loop3): Filesystem has been set read-only [ 267.717368][ T27] audit: type=1326 audit(1732273585.641:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 267.807775][ T27] audit: type=1326 audit(1732273585.641:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 267.857607][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 267.863769][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 267.870092][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 267.870129][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 267.876212][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 267.927443][ T27] audit: type=1326 audit(1732273585.641:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 267.950895][ T27] audit: type=1326 audit(1732273585.721:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 267.974054][ T27] audit: type=1326 audit(1732273585.721:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 267.997957][ T27] audit: type=1326 audit(1732273585.721:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 268.021408][ T27] audit: type=1326 audit(1732273585.721:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 268.118901][ T27] audit: type=1326 audit(1732273585.721:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 269.010013][ T5551] netlink: 'syz.1.448': attribute type 10 has an invalid length. [ 269.151031][ T5551] batman_adv: batadv0: Adding interface: team0 [ 269.181483][ T5551] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.298203][ T5551] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 269.988209][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 270.069563][ T5566] loop2: detected capacity change from 0 to 256 [ 270.085525][ T5562] device syz_tun entered promiscuous mode [ 270.129946][ T5566] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 270.130257][ T5562] device syz_tun left promiscuous mode [ 270.161275][ T5566] FAT-fs (loop2): Filesystem has been set read-only [ 270.771906][ T5567] loop4: detected capacity change from 0 to 8192 [ 270.900042][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.906566][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.458764][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 271.497452][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.505136][ T5585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.599952][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.650269][ T5585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.481500][ T5605] loop0: detected capacity change from 0 to 512 [ 272.517198][ T5605] ext4: Unknown parameter 'seclabel' [ 273.338344][ T5613] device bond1 entered promiscuous mode [ 273.347805][ T5613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.519573][ T5613] bond1 (unregistering): Released all slaves [ 276.184636][ T5640] loop3: detected capacity change from 0 to 1024 [ 276.208852][ T5640] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.339469][ T5640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.349588][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 276.359693][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.367406][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.395452][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.417364][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.774571][ T5650] loop1: detected capacity change from 0 to 128 [ 276.861145][ T5650] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 276.882730][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 276.936575][ T5650] FAT-fs (loop1): Filesystem has been set read-only [ 276.985475][ T5650] syz.1.485: attempt to access beyond end of device [ 276.985475][ T5650] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 277.068339][ T5650] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 277.127726][ T5650] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 277.233280][ T5650] syz.1.485: attempt to access beyond end of device [ 277.233280][ T5650] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 277.348823][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 277.348866][ T27] audit: type=1800 audit(1732273595.531:1592): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.485" name="file2" dev="loop1" ino=1048640 res=0 errno=0 [ 278.563132][ T5650] syz.1.485 (5650) used greatest stack depth: 18656 bytes left [ 279.645077][ T27] audit: type=1326 audit(1732273597.821:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 279.671804][ T5684] loop2: detected capacity change from 0 to 512 [ 279.683940][ T5674] device syzkaller0 entered promiscuous mode [ 279.722832][ T27] audit: type=1326 audit(1732273597.831:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 279.758587][ T5684] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.497: inode #1: comm syz.2.497: iget: illegal inode # [ 279.816466][ T5684] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.497: error while reading EA inode 1 err=-117 [ 279.841765][ T27] audit: type=1326 audit(1732273597.831:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 279.888074][ T27] audit: type=1326 audit(1732273597.831:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 279.910853][ T5684] EXT4-fs (loop2): 1 orphan inode deleted [ 279.916763][ T5684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.998173][ T27] audit: type=1326 audit(1732273597.831:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 280.062358][ T27] audit: type=1326 audit(1732273597.831:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 280.140919][ T27] audit: type=1326 audit(1732273597.861:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 280.287528][ T27] audit: type=1326 audit(1732273597.861:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 280.339410][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 280.423685][ T27] audit: type=1326 audit(1732273597.861:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 280.673340][ T5697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 282.909278][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 282.909313][ T27] audit: type=1326 audit(1732273601.091:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 282.983416][ T27] audit: type=1326 audit(1732273601.091:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.032928][ T27] audit: type=1326 audit(1732273601.091:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.060801][ T27] audit: type=1326 audit(1732273601.091:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.114560][ T27] audit: type=1326 audit(1732273601.091:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.159945][ T27] audit: type=1326 audit(1732273601.091:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.231662][ T27] audit: type=1326 audit(1732273601.091:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.292783][ T27] audit: type=1326 audit(1732273601.091:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.316336][ T27] audit: type=1326 audit(1732273601.161:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 283.350790][ T27] audit: type=1326 audit(1732273601.161:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 288.639031][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.701839][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.748929][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.771042][ T5724] device bridge_slave_0 left promiscuous mode [ 288.818433][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.850422][ T5724] device bridge_slave_1 left promiscuous mode [ 288.858572][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.923522][ T5724] bond0: (slave bond_slave_0): Releasing backup interface [ 289.012582][ T5724] bond0: (slave bond_slave_1): Releasing backup interface [ 289.161955][ T5724] team0: Port device team_slave_0 removed [ 289.225932][ T5724] team0: Port device team_slave_1 removed [ 289.254283][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.342207][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.436045][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.456427][ T5732] loop2: detected capacity change from 0 to 8192 [ 289.575007][ T5725] device geneve2 entered promiscuous mode [ 289.625540][ T5725] batman_adv: batadv0: Adding interface: geneve2 [ 289.642461][ T5725] batman_adv: batadv0: Interface activated: geneve2 [ 289.666326][ T5739] syz.4.518 (5739): /proc/5738/oom_adj is deprecated, please use /proc/5738/oom_score_adj instead. [ 289.679550][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 289.679583][ T27] audit: type=1800 audit(1732273607.861:1681): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.516" name="file2" dev="loop2" ino=1048641 res=0 errno=0 [ 289.827765][ T5739] loop4: detected capacity change from 0 to 512 [ 289.835466][ T5739] ext4: Bad value for 'journal_ioprio' [ 291.714617][ T27] audit: type=1326 audit(1732273609.891:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 291.885126][ T27] audit: type=1326 audit(1732273609.941:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.079097][ T27] audit: type=1326 audit(1732273609.941:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.177919][ T27] audit: type=1326 audit(1732273609.941:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.267338][ T27] audit: type=1326 audit(1732273609.941:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.369576][ T27] audit: type=1326 audit(1732273609.981:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.462975][ T27] audit: type=1326 audit(1732273609.981:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.580424][ T27] audit: type=1326 audit(1732273610.001:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.687749][ T27] audit: type=1326 audit(1732273610.001:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 292.905870][ T5769] loop0: detected capacity change from 0 to 1024 [ 292.928925][ T5769] ext4: Unknown parameter 'smackfstransmute' [ 293.046678][ T5772] capability: warning: `syz.3.528' uses 32-bit capabilities (legacy support in use) [ 293.197773][ T5776] dccp_invalid_packet: invalid packet type [ 294.371967][ T5783] loop3: detected capacity change from 0 to 8192 [ 295.491542][ T5798] sctp: [Deprecated]: syz.2.535 (pid 5798) Use of int in max_burst socket option deprecated. [ 295.491542][ T5798] Use struct sctp_assoc_value instead [ 295.522463][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 295.522494][ T27] audit: type=1326 audit(1732273613.701:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 295.627458][ T27] audit: type=1326 audit(1732273613.741:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 295.747471][ T27] audit: type=1326 audit(1732273613.741:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 295.823030][ T27] audit: type=1326 audit(1732273613.741:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 295.917359][ T27] audit: type=1326 audit(1732273613.741:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 296.001765][ T27] audit: type=1326 audit(1732273613.741:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 296.107498][ T27] audit: type=1326 audit(1732273613.741:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 296.249128][ T27] audit: type=1326 audit(1732273613.741:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 296.351073][ T27] audit: type=1326 audit(1732273613.741:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 296.452639][ T5819] tipc: Enabling of bearer rejected, failed to enable media [ 296.476151][ T27] audit: type=1326 audit(1732273613.741:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 296.811987][ T5823] loop4: detected capacity change from 0 to 1024 [ 296.856358][ T5823] ext4: Unknown parameter 'smackfstransmute' [ 297.185422][ T5832] dccp_invalid_packet: invalid packet type [ 298.038651][ T5838] loop2: detected capacity change from 0 to 8192 [ 298.406490][ T5849] loop3: detected capacity change from 0 to 1024 [ 298.599889][ T5849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.678723][ T5849] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.311915][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 299.613319][ T5865] loop2: detected capacity change from 0 to 512 [ 299.697936][ T5865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.554: inode #1: comm syz.2.554: iget: illegal inode # [ 299.741963][ T5865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.554: error while reading EA inode 1 err=-117 [ 299.820805][ T5865] EXT4-fs (loop2): 1 orphan inode deleted [ 299.872747][ T5865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.900715][ T5866] sctp: [Deprecated]: syz.4.555 (pid 5866) Use of int in max_burst socket option deprecated. [ 299.900715][ T5866] Use struct sctp_assoc_value instead [ 300.204617][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 300.957905][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 301.238212][ T5900] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 302.138155][ T5882] device syzkaller1 entered promiscuous mode [ 302.213153][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 302.213185][ T27] audit: type=1326 audit(1732273620.391:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.1.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x0 [ 302.366072][ T5907] loop3: detected capacity change from 0 to 8192 [ 302.670578][ T27] audit: type=1326 audit(1732273620.851:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 302.764612][ T27] audit: type=1326 audit(1732273620.881:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 302.823385][ T5924] loop0: detected capacity change from 0 to 512 [ 302.879890][ T27] audit: type=1326 audit(1732273620.881:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 302.990159][ T27] audit: type=1326 audit(1732273620.881:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 303.113311][ T5924] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.569: inode #1: comm syz.0.569: iget: illegal inode # [ 303.163054][ T5924] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.569: error while reading EA inode 1 err=-117 [ 303.227313][ T27] audit: type=1326 audit(1732273620.881:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 303.257610][ T5924] EXT4-fs (loop0): 1 orphan inode deleted [ 303.263475][ T5924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 303.352844][ T27] audit: type=1326 audit(1732273620.891:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 303.472773][ T27] audit: type=1326 audit(1732273620.891:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 303.588586][ T27] audit: type=1326 audit(1732273620.891:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 304.437615][ T27] audit: type=1326 audit(1732273620.891:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 305.111246][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 305.293962][ T5944] tipc: Enabling of bearer rejected, failed to enable media [ 307.032875][ T5973] loop0: detected capacity change from 0 to 1024 [ 307.215716][ T5973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.270236][ T5973] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.359491][ T5968] loop2: detected capacity change from 0 to 8192 [ 307.516249][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 307.516283][ T27] audit: type=1326 audit(1732273625.691:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 307.627172][ T27] audit: type=1326 audit(1732273625.691:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 307.729042][ T27] audit: type=1326 audit(1732273625.691:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 307.872657][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 307.886510][ T27] audit: type=1326 audit(1732273625.711:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 308.029608][ T27] audit: type=1326 audit(1732273625.711:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 308.127402][ T27] audit: type=1326 audit(1732273625.711:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 308.221637][ T27] audit: type=1326 audit(1732273625.811:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 308.348382][ T27] audit: type=1326 audit(1732273625.811:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7557e819 code=0x7ffc0000 [ 308.766808][ T6005] tipc: Enabling of bearer rejected, failed to enable media [ 308.840206][ T5999] sctp: [Deprecated]: syz.3.591 (pid 5999) Use of int in max_burst socket option deprecated. [ 308.840206][ T5999] Use struct sctp_assoc_value instead [ 309.845960][ T6018] loop0: detected capacity change from 0 to 2048 [ 309.931333][ T6018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.133685][ T6018] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 310.164491][ T27] audit: type=1326 audit(1732273628.341:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 310.226704][ T27] audit: type=1326 audit(1732273628.381:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 310.522278][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 311.772954][ T6052] device vlan2 entered promiscuous mode [ 311.819966][ T6052] device vlan0 entered promiscuous mode [ 311.853558][ T6052] device vlan0 left promiscuous mode [ 312.440979][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.745232][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.041832][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.233208][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.797127][ T6047] infiniband syz1: set active [ 314.827704][ T6047] infiniband syz1: added team_slave_0 [ 314.835581][ T6075] mmap: syz.1.615 (6075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 314.903157][ T6047] rdma_rxe: unable to create cq [ 314.977928][ T6047] infiniband syz1: Couldn't create ib_mad CQ [ 314.985013][ T6047] infiniband syz1: Couldn't open port 1 [ 315.291707][ T6047] RDS/IB: syz1: added [ 315.297119][ T6047] smc: adding ib device syz1 with port count 1 [ 315.359465][ T6047] smc: ib device syz1 port 1 has pnetid [ 315.562906][ T35] tipc: Left network mode [ 316.294318][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.330208][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.338825][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.350040][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.358589][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 316.366958][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.411218][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.428403][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.436139][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.471675][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.480172][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 316.488653][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.526221][ T6087] loop4: detected capacity change from 0 to 8192 [ 316.695639][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 316.695672][ T27] audit: type=1800 audit(1732273634.871:1909): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.619" name="file2" dev="loop4" ino=1048647 res=0 errno=0 [ 318.567473][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 320.647444][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 320.926979][ T6129] loop4: detected capacity change from 0 to 512 [ 320.976695][ T6129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 321.075058][ T6129] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 321.128246][ T6129] EXT4-fs (loop4): 1 truncate cleaned up [ 321.135219][ T6129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.218339][ T27] audit: type=1800 audit(1732273639.391:1910): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.629" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 321.524951][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 321.958003][ T6144] loop4: detected capacity change from 0 to 256 [ 322.069938][ T27] audit: type=1800 audit(1732273640.251:1911): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.633" name="bus" dev="loop4" ino=1048648 res=0 errno=0 [ 322.301596][ T27] audit: type=1326 audit(1732273640.481:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 322.417399][ T27] audit: type=1326 audit(1732273640.521:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 322.503997][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 322.536527][ T27] audit: type=1326 audit(1732273640.521:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 322.679019][ T27] audit: type=1326 audit(1732273640.521:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 322.727492][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 322.787362][ T27] audit: type=1326 audit(1732273640.521:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 322.925561][ T27] audit: type=1326 audit(1732273640.521:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 323.069417][ T27] audit: type=1326 audit(1732273640.521:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 323.202066][ T27] audit: type=1326 audit(1732273640.521:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 324.145225][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.188353][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.250272][ T6091] device bridge_slave_0 entered promiscuous mode [ 324.315098][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.375986][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.438917][ T6091] device bridge_slave_1 entered promiscuous mode [ 324.807299][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 324.837937][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.853327][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.926757][ T6176] loop0: detected capacity change from 0 to 256 [ 325.014152][ T6176] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 325.057391][ T6176] FAT-fs (loop0): Filesystem has been set read-only [ 325.094361][ T6091] team0: Port device team_slave_0 added [ 325.132196][ T6091] team0: Port device team_slave_1 added [ 325.482324][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.508605][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.634737][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.716941][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 325.759669][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.774275][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.902213][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.301973][ T6091] device hsr_slave_0 entered promiscuous mode [ 326.339438][ T6091] device hsr_slave_1 entered promiscuous mode [ 326.367829][ T6091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.375491][ T6091] Cannot create hsr debugfs directory [ 326.434155][ T35] device hsr_slave_0 left promiscuous mode [ 326.482562][ T35] device hsr_slave_1 left promiscuous mode [ 326.499377][ T35] batman_adv: batadv0: Interface deactivated: geneve2 [ 326.537296][ T35] batman_adv: batadv0: Removing interface: geneve2 [ 326.727976][ T35] device veth1_macvtap left promiscuous mode [ 326.754341][ T35] device veth0_macvtap left promiscuous mode [ 326.777881][ T35] device veth1_vlan left promiscuous mode [ 326.789659][ T6193] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 326.808774][ T35] device veth0_vlan left promiscuous mode [ 330.056360][ T6221] loop2: detected capacity change from 0 to 256 [ 330.128154][ T6221] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 330.136381][ T6221] FAT-fs (loop2): Filesystem has been set read-only [ 330.761833][ T6226] loop0: detected capacity change from 0 to 512 [ 330.822131][ T6227] loop2: detected capacity change from 0 to 2048 [ 330.905599][ T6226] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.659: casefold flag without casefold feature [ 330.925241][ T6226] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.659: couldn't read orphan inode 15 (err -117) [ 330.982386][ T6226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.037604][ T6227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 331.110781][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 331.461963][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 332.147125][ T6242] loop2: detected capacity change from 0 to 2048 [ 332.231658][ T6242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 332.269763][ T6242] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.664: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 332.344029][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.350701][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.416668][ T6250] loop4: detected capacity change from 0 to 512 [ 332.505269][ T6250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 332.543586][ T6250] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.667799][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 332.699917][ T6250] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.666: corrupted inode contents [ 332.842631][ T6250] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.666: mark_inode_dirty error [ 332.951448][ T6250] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.666: corrupted inode contents [ 333.010760][ T6250] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.666: mark_inode_dirty error [ 333.065084][ T6256] loop2: detected capacity change from 0 to 256 [ 333.174294][ T6256] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 333.212531][ T6256] FAT-fs (loop2): Filesystem has been set read-only [ 333.271402][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 334.117647][ T27] audit: type=1326 audit(1732273652.291:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.177402][ T27] audit: type=1326 audit(1732273652.291:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.205550][ T27] audit: type=1326 audit(1732273652.321:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.229388][ T27] audit: type=1326 audit(1732273652.321:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.262259][ T27] audit: type=1326 audit(1732273652.321:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.286218][ T27] audit: type=1326 audit(1732273652.321:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.317103][ T27] audit: type=1326 audit(1732273652.321:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.351117][ T27] audit: type=1326 audit(1732273652.321:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.376067][ T27] audit: type=1326 audit(1732273652.321:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 334.423673][ T27] audit: type=1326 audit(1732273652.321:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 335.147760][ T35] bond0 (unregistering): Released all slaves [ 336.951939][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 337.336497][ T6091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.431794][ T6091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.509096][ T6091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.588004][ T6091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.286045][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.455144][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.470476][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.532139][ T6091] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.698862][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.714869][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.748539][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.755843][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.799701][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.828981][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.846053][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.853404][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.944499][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.959120][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.085207][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.178330][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.200011][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.239195][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.287862][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.298921][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.467407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.488857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.582799][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.671164][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.741397][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 339.741427][ T27] audit: type=1326 audit(1732273657.921:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 339.745403][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.758242][ T27] audit: type=1326 audit(1732273657.941:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 339.876392][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 339.905162][ T6334] device batadv_slave_1 entered promiscuous mode [ 339.938719][ T27] audit: type=1326 audit(1732273657.981:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 339.985977][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.694'. [ 339.996365][ T27] audit: type=1326 audit(1732273657.981:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ec97d1b0 code=0x7ffc0000 [ 340.061463][ T27] audit: type=1326 audit(1732273657.981:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ec97d1b0 code=0x7ffc0000 [ 340.115452][ T27] audit: type=1326 audit(1732273658.001:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 340.245298][ T27] audit: type=1326 audit(1732273658.001:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 340.285487][ T6331] device batadv_slave_1 left promiscuous mode [ 340.377284][ T27] audit: type=1326 audit(1732273658.001:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 340.477313][ T27] audit: type=1326 audit(1732273658.041:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 340.577273][ T27] audit: type=1326 audit(1732273658.241:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 341.289324][ T6349] dccp_close: ABORT with 37 bytes unread [ 342.060450][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.074481][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.138434][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.765626][ T6378] loop2: detected capacity change from 0 to 512 [ 342.783819][ T6379] random: crng reseeded on system resumption [ 342.957548][ T6378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 342.966662][ T6378] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.526520][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 344.917445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.947565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.094704][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.120101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.163637][ T6091] device veth0_vlan entered promiscuous mode [ 345.189618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.210748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.272397][ T6091] device veth1_vlan entered promiscuous mode [ 345.422815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.449804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.480301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.541806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.573452][ T6091] device veth0_macvtap entered promiscuous mode [ 345.630255][ T6091] device veth1_macvtap entered promiscuous mode [ 345.755177][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.815583][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.879522][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.907321][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.950171][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.988414][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.000739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.034767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.068738][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 346.069364][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.116241][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.157734][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.229232][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.272515][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.311618][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.348660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.380329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.415966][ T6091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.437086][ T6091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.466913][ T6091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.532484][ T6091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.598416][ T6424] bridge0: port 3(syz_tun) entered blocking state [ 346.647991][ T6424] bridge0: port 3(syz_tun) entered disabled state [ 346.686824][ T6424] device syz_tun entered promiscuous mode [ 346.738875][ T6424] bridge0: port 3(syz_tun) entered blocking state [ 346.746383][ T6424] bridge0: port 3(syz_tun) entered forwarding state [ 346.880810][ T6425] netlink: 68 bytes leftover after parsing attributes in process `syz.1.718'. [ 347.276213][ T6424] loop1: detected capacity change from 0 to 2048 [ 347.336391][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.407849][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.420428][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 347.420457][ T27] audit: type=1326 audit(1732273665.601:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 347.473837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.607350][ T27] audit: type=1326 audit(1732273665.601:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 347.653739][ T27] audit: type=1326 audit(1732273665.611:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 347.672538][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.777375][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.835620][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.125979][ T6458] sd 0:0:1:0: device reset [ 350.169568][ T6474] capability: warning: `syz.5.733' uses deprecated v2 capabilities in a way that may be insecure [ 350.979136][ T27] audit: type=1326 audit(1732273669.161:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 351.104070][ T27] audit: type=1326 audit(1732273669.221:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 351.220267][ T27] audit: type=1326 audit(1732273669.221:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 351.276912][ T6486] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 351.340668][ T27] audit: type=1326 audit(1732273669.221:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 351.498513][ T27] audit: type=1326 audit(1732273669.221:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.5.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 352.244959][ T6501] loop1: detected capacity change from 0 to 164 [ 352.871736][ T27] audit: type=1326 audit(1732273671.051:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 353.066341][ T27] audit: type=1326 audit(1732273671.051:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 353.630644][ T6526] netlink: 'syz.4.749': attribute type 10 has an invalid length. [ 353.697496][ T6526] device hsr_slave_0 left promiscuous mode [ 353.744999][ T6526] device hsr_slave_1 left promiscuous mode [ 354.236419][ T27] audit: type=1326 audit(1732273672.411:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 354.327658][ T27] audit: type=1326 audit(1732273672.411:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 354.435417][ T27] audit: type=1326 audit(1732273672.411:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 354.544299][ T27] audit: type=1326 audit(1732273672.411:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 354.673057][ T27] audit: type=1326 audit(1732273672.411:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 354.808291][ T27] audit: type=1326 audit(1732273672.411:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 354.968338][ T27] audit: type=1326 audit(1732273672.411:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 355.062826][ T27] audit: type=1326 audit(1732273672.411:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 356.214550][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 356.651853][ T6526] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.302054][ T6575] loop5: detected capacity change from 0 to 256 [ 357.427733][ T6575] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 357.467639][ T6575] FAT-fs (loop5): Filesystem has been set read-only [ 358.085229][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 358.085280][ T27] audit: type=1326 audit(1732273676.261:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.197423][ T27] audit: type=1326 audit(1732273676.301:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.271620][ T27] audit: type=1326 audit(1732273676.331:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.396811][ T27] audit: type=1326 audit(1732273676.331:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.507449][ T27] audit: type=1326 audit(1732273676.341:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.612837][ T27] audit: type=1326 audit(1732273676.341:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.714442][ T27] audit: type=1326 audit(1732273676.361:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.807563][ T27] audit: type=1326 audit(1732273676.361:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 358.931996][ T27] audit: type=1326 audit(1732273676.371:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 359.003335][ T27] audit: type=1326 audit(1732273676.371:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 359.123738][ T6598] loop2: detected capacity change from 0 to 164 [ 359.337073][ T6604] loop5: detected capacity change from 0 to 256 [ 360.208599][ T6616] loop1: detected capacity change from 0 to 256 [ 360.228541][ T6614] loop4: detected capacity change from 0 to 256 [ 360.268109][ T6614] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 360.276314][ T6614] FAT-fs (loop4): Filesystem has been set read-only [ 363.958272][ T6667] loop5: detected capacity change from 0 to 256 [ 364.076754][ T6667] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 364.135582][ T6667] FAT-fs (loop5): Filesystem has been set read-only [ 366.470517][ T6698] loop1: detected capacity change from 0 to 512 [ 366.564435][ T6698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 366.573487][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.808'. [ 367.099007][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 367.099042][ T27] audit: type=1326 audit(367.060:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.147110][ T6709] loop2: detected capacity change from 0 to 1024 [ 367.185876][ T27] audit: type=1326 audit(367.090:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.201043][ T6709] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 367.341509][ T6709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 367.352086][ T27] audit: type=1326 audit(367.090:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.445680][ T27] audit: type=1326 audit(367.090:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.567605][ T27] audit: type=1326 audit(367.090:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.676536][ T6714] loop5: detected capacity change from 0 to 2048 [ 367.697641][ T27] audit: type=1326 audit(367.090:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.768614][ T6714] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.795052][ T27] audit: type=1326 audit(367.090:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 367.819179][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 367.922503][ T6714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 367.947138][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 367.981671][ T27] audit: type=1326 audit(367.090:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 368.087422][ T27] audit: type=1326 audit(367.090:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 368.197367][ T27] audit: type=1326 audit(367.090:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a4b7e819 code=0x7ffc0000 [ 368.334613][ T6727] syz.5.814[6727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.334809][ T6727] syz.5.814[6727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.493206][ T6739] loop1: detected capacity change from 0 to 1024 [ 369.897598][ T6739] EXT4-fs: Ignoring removed orlov option [ 369.949025][ T6739] EXT4-fs: Ignoring removed bh option [ 370.005771][ T6739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.148533][ T6739] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c018, mo2=0002] [ 370.223320][ T6739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 370.567306][ T6702] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 370.664589][ T6702] EXT4-fs (loop5): Remounting filesystem read-only [ 371.047491][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 371.121481][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 373.510036][ T6791] loop1: detected capacity change from 0 to 128 [ 373.546127][ T6791] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 373.613323][ T6791] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 374.151557][ T4391] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 374.534903][ T6809] device batadv_slave_1 entered promiscuous mode [ 374.570230][ T6807] device batadv_slave_1 left promiscuous mode [ 375.333789][ T6820] loop2: detected capacity change from 0 to 736 [ 375.620132][ T6820] Symlink component flag not implemented [ 375.620296][ T6820] Symlink component flag not implemented (122) [ 376.438302][ T6838] loop5: detected capacity change from 0 to 256 [ 376.530171][ T6838] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 376.568238][ T6838] FAT-fs (loop5): Filesystem has been set read-only [ 377.272989][ T6846] loop1: detected capacity change from 0 to 2048 [ 377.289767][ T6846] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.432356][ T6846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 377.697011][ T6861] syz.1.861[6861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.698899][ T6861] syz.1.861[6861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.550932][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 378.550990][ T27] audit: type=1107 audit(378.510:2158): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nor' [ 378.878806][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 379.088945][ T6882] netlink: 40 bytes leftover after parsing attributes in process `syz.5.873'. [ 379.117777][ T6882] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 379.935642][ T6899] netlink: 'syz.1.877': attribute type 3 has an invalid length. [ 380.326598][ T6903] loop5: detected capacity change from 0 to 2048 [ 380.465670][ T6903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 381.482976][ T980] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 381.568871][ T980] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 381.627398][ T980] EXT4-fs (loop5): This should not happen!! Data will be lost [ 381.627398][ T980] [ 381.688241][ T980] EXT4-fs (loop5): Total free blocks count 0 [ 381.694369][ T980] EXT4-fs (loop5): Free/Dirty block details [ 381.768092][ T980] EXT4-fs (loop5): free_blocks=2415919104 [ 381.774128][ T980] EXT4-fs (loop5): dirty_blocks=1024 [ 381.797417][ T980] EXT4-fs (loop5): Block reservation details [ 381.813859][ T980] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 381.851574][ T980] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1004 with error 28 [ 381.885856][ T27] audit: type=1326 audit(381.840:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 381.960826][ T27] audit: type=1326 audit(381.840:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 382.057743][ T27] audit: type=1326 audit(381.840:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 382.111235][ T27] audit: type=1326 audit(381.840:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 382.179784][ T27] audit: type=1326 audit(381.870:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 382.630462][ T6935] loop1: detected capacity change from 0 to 256 [ 382.720376][ T6935] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 382.773403][ T6935] FAT-fs (loop1): Filesystem has been set read-only [ 383.423135][ T6947] loop5: detected capacity change from 0 to 128 [ 383.606106][ T27] audit: type=1804 audit(383.560:2164): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.891" name="/newroot/34/file2/file0" dev="loop5" ino=1048663 res=1 errno=0 [ 384.053854][ T6954] syz.0.894[6954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.054073][ T6954] syz.0.894[6954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.104453][ T6969] syz.1.898[6969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.184483][ T6969] syz.1.898[6969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.196144][ T27] audit: type=1326 audit(385.150:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.307462][ T27] audit: type=1326 audit(385.180:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.435038][ T27] audit: type=1326 audit(385.180:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.517646][ T27] audit: type=1326 audit(385.180:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.587348][ T27] audit: type=1326 audit(385.180:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.677361][ T27] audit: type=1326 audit(385.190:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.786625][ T27] audit: type=1326 audit(385.190:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.857627][ T27] audit: type=1326 audit(385.190:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 385.996354][ T27] audit: type=1326 audit(385.190:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 386.400748][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 387.539968][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.5.911'. [ 387.561442][ T7006] loop4: detected capacity change from 0 to 1024 [ 387.621913][ T7006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 387.846165][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 388.204061][ T7022] device batadv_slave_1 entered promiscuous mode [ 388.491293][ T7021] device batadv_slave_1 left promiscuous mode [ 388.553781][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 388.715606][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 389.233813][ T7036] loop1: detected capacity change from 0 to 256 [ 389.363362][ T7036] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 389.387399][ T7036] FAT-fs (loop1): Filesystem has been set read-only [ 389.570516][ T7041] loop5: detected capacity change from 0 to 256 [ 389.798169][ T7041] FAT-fs (loop5): Directory bread(block 64) failed [ 389.805039][ T7041] FAT-fs (loop5): Directory bread(block 65) failed [ 389.828277][ T7045] sg_write: process 460 (syz.0.924) changed security contexts after opening file descriptor, this is not allowed. [ 389.841287][ T7041] FAT-fs (loop5): Directory bread(block 66) failed [ 389.877327][ T7041] FAT-fs (loop5): Directory bread(block 67) failed [ 389.884167][ T7041] FAT-fs (loop5): Directory bread(block 68) failed [ 389.947446][ T7041] FAT-fs (loop5): Directory bread(block 69) failed [ 389.975601][ T7041] FAT-fs (loop5): Directory bread(block 70) failed [ 390.026450][ T7041] FAT-fs (loop5): Directory bread(block 71) failed [ 390.061956][ T7041] FAT-fs (loop5): Directory bread(block 72) failed [ 390.095564][ T7041] FAT-fs (loop5): Directory bread(block 73) failed [ 390.450773][ T7041] syz.5.923: attempt to access beyond end of device [ 390.450773][ T7041] loop5: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 390.545323][ T7041] syz.5.923: attempt to access beyond end of device [ 390.545323][ T7041] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 390.612652][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 390.612697][ T27] audit: type=1800 audit(390.570:2209): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.923" name="file1" dev="loop5" ino=1048665 res=0 errno=0 [ 390.956961][ T7063] device batadv_slave_1 entered promiscuous mode [ 391.192277][ T7062] device batadv_slave_1 left promiscuous mode [ 391.894105][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 393.848297][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.854855][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.314000][ T7104] loop0: detected capacity change from 0 to 512 [ 394.377430][ T7104] EXT4-fs: Mount option(s) incompatible with ext2 [ 396.042882][ T7141] netlink: 'syz.4.957': attribute type 4 has an invalid length. [ 396.290548][ T7144] netlink: 'syz.4.957': attribute type 4 has an invalid length. [ 396.413814][ T7148] loop1: detected capacity change from 0 to 256 [ 396.526083][ T7148] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 396.597546][ T7148] FAT-fs (loop1): Filesystem has been set read-only [ 396.701817][ T7152] loop5: detected capacity change from 0 to 512 [ 396.736355][ T7153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.961'. [ 396.744918][ T7152] EXT4-fs: Ignoring removed bh option [ 396.827533][ T7152] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 397.001590][ T7152] EXT4-fs (loop5): 1 truncate cleaned up [ 397.060578][ T7152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 397.183653][ T7152] autofs4:pid:7152:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc018937e) [ 397.198371][ T7152] autofs4:pid:7152:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 397.280025][ T27] audit: type=1326 audit(397.240:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 397.374801][ T7168] loop0: detected capacity change from 0 to 512 [ 397.381755][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.960'. [ 397.387864][ T27] audit: type=1326 audit(397.280:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 397.453203][ T7168] EXT4-fs: Ignoring removed bh option [ 397.454331][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.510877][ T7152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.535606][ T27] audit: type=1326 audit(397.280:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 397.604826][ T7168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 397.625943][ T27] audit: type=1326 audit(397.280:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 397.683813][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.711749][ T7152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.750973][ T27] audit: type=1326 audit(397.290:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 397.835066][ T27] audit: type=1326 audit(397.290:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95777e819 code=0x7ffc0000 [ 397.935015][ T27] audit: type=1326 audit(397.300:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 398.033298][ T27] audit: type=1326 audit(397.300:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 398.118324][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 398.125642][ T27] audit: type=1326 audit(397.300:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 398.217290][ T27] audit: type=1326 audit(397.300:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 398.794461][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 399.395519][ T7194] loop5: detected capacity change from 0 to 1024 [ 399.403155][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.976'. [ 399.416526][ T7199] loop1: detected capacity change from 0 to 256 [ 399.442379][ T7194] EXT4-fs: Ignoring removed nobh option [ 399.491260][ T7199] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 399.529976][ T7194] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.973: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 399.559479][ T7199] FAT-fs (loop1): Filesystem has been set read-only [ 399.570892][ T7194] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.973: couldn't read orphan inode 11 (err -117) [ 399.649548][ T7194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 399.995962][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 400.001312][ T7207] netlink: 64 bytes leftover after parsing attributes in process `syz.0.977'. [ 400.059098][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 400.121943][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'. [ 400.185660][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'. [ 401.419263][ T7218] loop5: detected capacity change from 0 to 512 [ 401.523101][ T7218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.573216][ T7218] EXT4-fs: Ignoring removed bh option [ 401.634545][ T7218] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.741411][ T7218] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 401.901643][ T7218] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 401.952459][ T7218] EXT4-fs (loop5): orphan cleanup on readonly fs [ 402.010794][ T7218] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.980: Failed to acquire dquot type 1 [ 402.076945][ T7218] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.980: Invalid block bitmap block 0 in block_group 0 [ 402.141509][ T7218] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.980: Failed to acquire dquot type 1 [ 402.190220][ T7218] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.980: Failed to acquire dquot type 1 [ 402.232043][ T7218] EXT4-fs (loop5): 1 orphan inode deleted [ 402.277499][ T7218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 402.767638][ T7239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.989'. [ 403.189483][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 403.189520][ T27] audit: type=1326 audit(403.150:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 403.220860][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 403.346916][ T27] audit: type=1326 audit(403.200:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 403.441090][ T7249] netlink: 'syz.2.992': attribute type 4 has an invalid length. [ 403.454463][ T27] audit: type=1326 audit(403.200:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec97e819 code=0x7ffc0000 [ 403.757400][ T7253] netlink: 'syz.2.992': attribute type 4 has an invalid length. [ 403.777276][ T27] audit: type=1326 audit(403.730:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 403.862147][ T27] audit: type=1326 audit(403.740:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 403.989783][ T27] audit: type=1326 audit(403.740:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 404.594906][ T27] audit: type=1326 audit(403.740:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 404.922525][ T27] audit: type=1326 audit(403.740:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 405.122511][ T27] audit: type=1326 audit(403.740:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 405.331649][ T27] audit: type=1326 audit(403.740:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 405.789074][ T7274] loop2: detected capacity change from 0 to 256 [ 405.852862][ T7274] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 405.880429][ T7274] FAT-fs (loop2): Filesystem has been set read-only [ 406.470864][ T7286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1002'. [ 407.428709][ T7299] xt_hashlimit: max too large, truncated to 1048576 [ 407.530807][ T7299] Cannot find set identified by id 0 to match [ 408.262550][ T27] kauditd_printk_skb: 249 callbacks suppressed [ 408.262684][ T27] audit: type=1326 audit(408.210:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f639f5757e7 code=0x7ffc0000 [ 408.748451][ T27] audit: type=1326 audit(408.290:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f639f51a1a9 code=0x7ffc0000 [ 408.982984][ T27] audit: type=1326 audit(408.330:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f639f5757e7 code=0x7ffc0000 [ 409.267274][ T27] audit: type=1326 audit(408.360:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f639f51a1a9 code=0x7ffc0000 [ 409.450691][ T27] audit: type=1326 audit(408.610:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f639f5757e7 code=0x7ffc0000 [ 409.561379][ T27] audit: type=1326 audit(408.610:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f639f51a1a9 code=0x7ffc0000 [ 409.680581][ T27] audit: type=1326 audit(408.610:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 409.881421][ T7320] loop1: detected capacity change from 0 to 256 [ 410.006409][ T7320] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 410.038463][ T7320] FAT-fs (loop1): Filesystem has been set read-only [ 410.937611][ T7336] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1019'. [ 411.312717][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'. [ 411.637607][ T7343] loop1: detected capacity change from 0 to 1024 [ 411.680368][ T7343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 412.578498][ T7343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 413.943502][ T7369] loop4: detected capacity change from 0 to 256 [ 413.953474][ T7371] loop5: detected capacity change from 0 to 512 [ 414.007473][ T7371] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 414.028784][ T7369] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 414.081738][ T7369] FAT-fs (loop4): Filesystem has been set read-only [ 414.089541][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 414.102631][ T7371] EXT4-fs (loop5): 1 truncate cleaned up [ 414.185266][ T7371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 414.364960][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1033'. [ 414.800810][ T27] audit: type=1326 audit(414.760:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 414.903095][ T27] audit: type=1326 audit(414.760:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 415.028351][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 415.065699][ T27] audit: type=1326 audit(414.830:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 415.198154][ T27] audit: type=1326 audit(414.840:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 415.340325][ T27] audit: type=1326 audit(414.840:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 415.435474][ T27] audit: type=1326 audit(414.840:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 415.548963][ T27] audit: type=1326 audit(414.840:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 415.683484][ T27] audit: type=1326 audit(414.840:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 416.007977][ T27] audit: type=1326 audit(414.840:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 416.585472][ T27] audit: type=1326 audit(414.840:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7379 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 418.209702][ T7424] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 418.763638][ T7433] random: crng reseeded on system resumption [ 420.358319][ T7443] loop5: detected capacity change from 0 to 256 [ 420.535467][ T7443] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 420.609889][ T7443] FAT-fs (loop5): Filesystem has been set read-only [ 422.033125][ T7463] loop0: detected capacity change from 0 to 2048 [ 422.150779][ T7466] loop4: detected capacity change from 0 to 512 [ 422.173069][ T7463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 422.357700][ T7463] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 422.439166][ T7463] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 1 with error 28 [ 422.574982][ T7463] EXT4-fs (loop0): This should not happen!! Data will be lost [ 422.574982][ T7463] [ 422.637727][ T7463] EXT4-fs (loop0): Total free blocks count 0 [ 422.714853][ T7463] EXT4-fs (loop0): Free/Dirty block details [ 422.740442][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 422.740473][ T27] audit: type=1800 audit(422.700:2599): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 422.754494][ T7463] EXT4-fs (loop0): free_blocks=2415919104 [ 422.834587][ T7463] EXT4-fs (loop0): dirty_blocks=32 [ 422.867968][ T7463] EXT4-fs (loop0): Block reservation details [ 422.890144][ T7463] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 422.931331][ T7481] loop5: detected capacity change from 0 to 512 [ 423.023687][ T7481] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 423.179333][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 423.250598][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 423.894532][ T7498] random: crng reseeded on system resumption [ 423.919557][ T27] audit: type=1326 audit(423.880:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 423.979767][ T27] audit: type=1326 audit(423.880:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.057449][ T27] audit: type=1326 audit(423.880:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.172296][ T27] audit: type=1326 audit(423.880:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.278873][ T27] audit: type=1326 audit(423.880:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.384804][ T27] audit: type=1326 audit(423.880:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.473993][ T27] audit: type=1326 audit(423.890:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.562643][ T27] audit: type=1326 audit(423.890:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 424.646118][ T27] audit: type=1326 audit(423.910:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a5f7e819 code=0x7ffc0000 [ 425.124307][ T7510] device batadv_slave_1 entered promiscuous mode [ 425.166773][ T7509] device batadv_slave_1 left promiscuous mode [ 425.890779][ T7514] loop1: detected capacity change from 0 to 8192 [ 425.947629][ T7514] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.354508][ T7514] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1051) [ 426.393630][ T7514] FAT-fs (loop1): Filesystem has been set read-only [ 426.455483][ T7514] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1051) [ 427.331877][ T7541] loop4: detected capacity change from 0 to 512 [ 427.359738][ T7541] journal_path: Lookup failure for './bus' [ 427.365691][ T7541] EXT4-fs: error: could not find journal device path [ 427.465300][ T5744] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.637949][ T7541] siw: device registration error -23 [ 427.778981][ T7548] loop2: detected capacity change from 0 to 128 [ 427.847750][ T7548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.057940][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 428.190879][ T7556] loop1: detected capacity change from 0 to 128 [ 428.283017][ T7556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 428.431836][ T7563] loop5: detected capacity change from 0 to 1024 [ 428.440470][ T7563] EXT4-fs: Ignoring removed orlov option [ 428.446374][ T7563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 428.479134][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1101'. [ 428.512839][ T7563] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 428.520355][ T7562] netlink: 'syz.4.1101': attribute type 7 has an invalid length. [ 428.557904][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 428.638400][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1103'. [ 428.670686][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 428.670717][ T27] audit: type=1326 audit(428.630:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 428.797420][ T27] audit: type=1326 audit(428.660:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 428.853616][ T7567] netlink: 'syz.5.1103': attribute type 3 has an invalid length. [ 428.877469][ T27] audit: type=1326 audit(428.660:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 428.941302][ T27] audit: type=1326 audit(428.660:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 428.979535][ T27] audit: type=1326 audit(428.660:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 428.993141][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 429.038811][ T27] audit: type=1326 audit(428.670:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 429.136685][ T27] audit: type=1326 audit(428.670:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 429.239689][ T27] audit: type=1326 audit(428.670:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 429.361489][ T27] audit: type=1326 audit(428.680:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 429.434663][ T27] audit: type=1326 audit(428.680:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f639f57e819 code=0x7ffc0000 [ 429.460312][ T6091] EXT4-fs (loop5): unmounting filesystem. [ 430.081092][ T7586] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 430.405674][ T7594] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1112'. [ 430.529205][ T7594] bridge0: port 3(vlan2) entered blocking state [ 430.538084][ T7594] bridge0: port 3(vlan2) entered disabled state [ 430.843059][ T7601] loop4: detected capacity change from 0 to 512 [ 431.205311][ T7601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 431.372497][ T7601] [ 431.374921][ T7601] ====================================================== [ 431.382040][ T7601] WARNING: possible circular locking dependency detected [ 431.389130][ T7601] 6.1.118-syzkaller #0 Not tainted [ 431.394320][ T7601] ------------------------------------------------------ [ 431.401406][ T7601] syz.4.1115/7601 is trying to acquire lock: [ 431.407456][ T7601] ffff88823bc260a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x57/0x510 [ 431.416515][ T7601] [ 431.416515][ T7601] but task is already holding lock: [ 431.423939][ T7601] ffff8880550bc8c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x955/0x1cb0 [ 431.433626][ T7601] [ 431.433626][ T7601] which lock already depends on the new lock. [ 431.433626][ T7601] [ 431.444094][ T7601] [ 431.444094][ T7601] the existing dependency chain (in reverse order) is: [ 431.453200][ T7601] [ 431.453200][ T7601] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 431.461189][ T7601] lock_acquire+0x1f8/0x5a0 [ 431.466337][ T7601] down_read+0xad/0xa30 [ 431.471130][ T7601] ext4_map_blocks+0x379/0x1cb0 [ 431.476639][ T7601] ext4_getblk+0x1eb/0x7c0 [ 431.481713][ T7601] ext4_bread+0x2a/0x170 [ 431.486623][ T7601] ext4_quota_read+0x1a1/0x2c0 [ 431.492051][ T7601] find_tree_dqentry+0x1cd/0xf70 [ 431.497641][ T7601] find_tree_dqentry+0x6a8/0xf70 [ 431.503264][ T7601] find_tree_dqentry+0x6a8/0xf70 [ 431.508904][ T7601] find_tree_dqentry+0x6a8/0xf70 [ 431.514512][ T7601] qtree_read_dquot+0x546/0x7f0 [ 431.520030][ T7601] v2_read_dquot+0xbe/0x100 [ 431.525239][ T7601] dquot_acquire+0x188/0x680 [ 431.530475][ T7601] ext4_acquire_dquot+0x2eb/0x4a0 [ 431.536189][ T7601] dqget+0x762/0xe90 [ 431.540765][ T7601] __dquot_initialize+0x45e/0xea0 [ 431.546451][ T7601] ext4_process_orphan+0x57/0x2d0 [ 431.552096][ T7601] ext4_orphan_cleanup+0xb70/0x1400 [ 431.557919][ T7601] ext4_fill_super+0x83ff/0x8b50 [ 431.563463][ T7601] get_tree_bdev+0x3fe/0x620 [ 431.568698][ T7601] vfs_get_tree+0x88/0x270 [ 431.573729][ T7601] do_new_mount+0x2ba/0xb40 [ 431.578859][ T7601] __se_sys_mount+0x2d5/0x3c0 [ 431.584176][ T7601] do_syscall_64+0x3b/0xb0 [ 431.589214][ T7601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.595741][ T7601] [ 431.595741][ T7601] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 431.603900][ T7601] lock_acquire+0x1f8/0x5a0 [ 431.609028][ T7601] down_read+0xad/0xa30 [ 431.613788][ T7601] v2_read_dquot+0x4a/0x100 [ 431.618890][ T7601] dquot_acquire+0x188/0x680 [ 431.624070][ T7601] ext4_acquire_dquot+0x2eb/0x4a0 [ 431.629734][ T7601] dqget+0x762/0xe90 [ 431.634264][ T7601] __dquot_initialize+0x2d9/0xea0 [ 431.639878][ T7601] ext4_set_acl+0x1b3/0x730 [ 431.644993][ T7601] posix_acl_xattr_set+0x37b/0x3e0 [ 431.650707][ T7601] __vfs_setxattr+0x3e7/0x420 [ 431.655961][ T7601] __vfs_setxattr_noperm+0x12a/0x5e0 [ 431.661822][ T7601] vfs_setxattr+0x21d/0x420 [ 431.666897][ T7601] setxattr+0x250/0x2b0 [ 431.671642][ T7601] path_setxattr+0x1bc/0x2a0 [ 431.676873][ T7601] __x64_sys_lsetxattr+0xb4/0xd0 [ 431.682385][ T7601] do_syscall_64+0x3b/0xb0 [ 431.687377][ T7601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.693866][ T7601] [ 431.693866][ T7601] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 431.701678][ T7601] validate_chain+0x1661/0x5950 [ 431.707127][ T7601] __lock_acquire+0x125b/0x1f80 [ 431.712596][ T7601] lock_acquire+0x1f8/0x5a0 [ 431.717728][ T7601] __mutex_lock+0x132/0xd80 [ 431.722888][ T7601] dquot_commit+0x57/0x510 [ 431.727971][ T7601] ext4_write_dquot+0x1fd/0x360 [ 431.733460][ T7601] mark_all_dquot_dirty+0xf7/0x400 [ 431.739178][ T7601] __dquot_alloc_space+0xb68/0x10e0 [ 431.744988][ T7601] ext4_mb_new_blocks+0x1302/0x4b80 [ 431.750829][ T7601] ext4_ext_map_blocks+0x1c1c/0x7ab0 [ 431.756733][ T7601] ext4_map_blocks+0xa2b/0x1cb0 [ 431.762183][ T7601] ext4_getblk+0x1eb/0x7c0 [ 431.767207][ T7601] ext4_bread+0x2a/0x170 [ 431.772070][ T7601] ext4_append+0x31f/0x5c0 [ 431.777101][ T7601] ext4_init_new_dir+0x33a/0xa20 [ 431.782670][ T7601] ext4_mkdir+0x4f2/0xce0 [ 431.787614][ T7601] vfs_mkdir+0x3b6/0x590 [ 431.792452][ T7601] do_mkdirat+0x225/0x360 [ 431.797374][ T7601] __x64_sys_mkdir+0x6a/0x80 [ 431.802663][ T7601] do_syscall_64+0x3b/0xb0 [ 431.807727][ T7601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.814233][ T7601] [ 431.814233][ T7601] other info that might help us debug this: [ 431.814233][ T7601] [ 431.824579][ T7601] Chain exists of: [ 431.824579][ T7601] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 431.824579][ T7601] [ 431.838387][ T7601] Possible unsafe locking scenario: [ 431.838387][ T7601] [ 431.845879][ T7601] CPU0 CPU1 [ 431.851275][ T7601] ---- ---- [ 431.856684][ T7601] lock(&ei->i_data_sem/2); [ 431.861408][ T7601] lock(&s->s_dquot.dqio_sem); [ 431.868946][ T7601] lock(&ei->i_data_sem/2); [ 431.876244][ T7601] lock(&dquot->dq_lock); [ 431.880765][ T7601] [ 431.880765][ T7601] *** DEADLOCK *** [ 431.880765][ T7601] [ 431.888971][ T7601] 4 locks held by syz.4.1115/7601: [ 431.894146][ T7601] #0: ffff888027e1c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 431.903508][ T7601] #1: ffff8880550bd440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 431.914288][ T7601] #2: ffff8880550bc8c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x955/0x1cb0 [ 431.924372][ T7601] #3: ffffffff8d4727a8 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x1d6/0x10e0 [ 431.934221][ T7601] [ 431.934221][ T7601] stack backtrace: [ 431.940146][ T7601] CPU: 1 PID: 7601 Comm: syz.4.1115 Not tainted 6.1.118-syzkaller #0 [ 431.948322][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 431.958411][ T7601] Call Trace: [ 431.961762][ T7601] [ 431.964736][ T7601] dump_stack_lvl+0x1e3/0x2cb [ 431.969535][ T7601] ? nf_tcp_handle_invalid+0x642/0x642 [ 431.975078][ T7601] ? print_circular_bug+0x12b/0x1a0 [ 431.980375][ T7601] check_noncircular+0x2fa/0x3b0 [ 431.985432][ T7601] ? add_chain_block+0x850/0x850 [ 431.990452][ T7601] ? lockdep_lock+0x11f/0x2a0 [ 431.995256][ T7601] ? noop_count+0x30/0x30 [ 431.999688][ T7601] ? _find_first_zero_bit+0xd0/0x100 [ 432.005087][ T7601] validate_chain+0x1661/0x5950 [ 432.010018][ T7601] ? lockdep_unlock+0x165/0x300 [ 432.015006][ T7601] ? reacquire_held_locks+0x660/0x660 [ 432.020437][ T7601] ? add_chain_block+0x850/0x850 [ 432.025435][ T7601] ? validate_chain+0x13ce/0x5950 [ 432.030515][ T7601] ? lockdep_lock+0x2a0/0x2a0 [ 432.035324][ T7601] ? mark_lock+0x9a/0x340 [ 432.039779][ T7601] __lock_acquire+0x125b/0x1f80 [ 432.044763][ T7601] lock_acquire+0x1f8/0x5a0 [ 432.049353][ T7601] ? dquot_commit+0x57/0x510 [ 432.054068][ T7601] ? read_lock_is_recursive+0x10/0x10 [ 432.059552][ T7601] ? __might_sleep+0xb0/0xb0 [ 432.064203][ T7601] ? __lock_acquire+0x125b/0x1f80 [ 432.069325][ T7601] __mutex_lock+0x132/0xd80 [ 432.073887][ T7601] ? dquot_commit+0x57/0x510 [ 432.078592][ T7601] ? dquot_commit+0x57/0x510 [ 432.083304][ T7601] ? __might_sleep+0xb0/0xb0 [ 432.087955][ T7601] ? mutex_lock_nested+0x10/0x10 [ 432.093021][ T7601] dquot_commit+0x57/0x510 [ 432.097528][ T7601] ? __ext4_journal_start_sb+0x1f1/0x410 [ 432.103253][ T7601] ext4_write_dquot+0x1fd/0x360 [ 432.108191][ T7601] mark_all_dquot_dirty+0xf7/0x400 [ 432.113450][ T7601] __dquot_alloc_space+0xb68/0x10e0 [ 432.118764][ T7601] ? __dquot_alloc_space+0x1d6/0x10e0 [ 432.124233][ T7601] ? __dquot_drop+0x420/0x420 [ 432.129014][ T7601] ? percpu_counter_add_batch+0x142/0x160 [ 432.134884][ T7601] ext4_mb_new_blocks+0x1302/0x4b80 [ 432.140161][ T7601] ? ext4_find_extent+0x378/0xe20 [ 432.145281][ T7601] ? rcu_is_watching+0x11/0xb0 [ 432.150112][ T7601] ? ext4_find_extent+0x378/0xe20 [ 432.155297][ T7601] ? __kmalloc+0xe2/0x230 [ 432.159742][ T7601] ? ext4_mb_pa_callback+0xd0/0xd0 [ 432.164972][ T7601] ? ext4_find_extent+0xcdb/0xe20 [ 432.170085][ T7601] ? ext4_ext_search_right+0x4a7/0x860 [ 432.175652][ T7601] ? ext4_ext_check_overlap+0x180/0x5b0 [ 432.181321][ T7601] ? ext4_inode_to_goal_block+0x312/0x450 [ 432.187119][ T7601] ext4_ext_map_blocks+0x1c1c/0x7ab0 [ 432.192533][ T7601] ? ext4_ext_release+0x10/0x10 [ 432.197506][ T7601] ? ext4_es_lookup_extent+0x44a/0xb70 [ 432.203072][ T7601] ext4_map_blocks+0xa2b/0x1cb0 [ 432.208041][ T7601] ? ext4_map_blocks+0x59b/0x1cb0 [ 432.213184][ T7601] ? ext4_issue_zeroout+0x250/0x250 [ 432.218478][ T7601] ext4_getblk+0x1eb/0x7c0 [ 432.223023][ T7601] ? ext4_get_block_unwritten+0x100/0x100 [ 432.228892][ T7601] ? rcu_is_watching+0x11/0xb0 [ 432.233783][ T7601] ext4_bread+0x2a/0x170 [ 432.238121][ T7601] ext4_append+0x31f/0x5c0 [ 432.242607][ T7601] ? ext4_init_new_dir+0xa20/0xa20 [ 432.247796][ T7601] ext4_init_new_dir+0x33a/0xa20 [ 432.252840][ T7601] ? ext4_init_dot_dotdot+0x4e0/0x4e0 [ 432.258319][ T7601] ext4_mkdir+0x4f2/0xce0 [ 432.262743][ T7601] ? ext4_symlink+0xb40/0xb40 [ 432.267546][ T7601] ? inode_permission+0xf7/0x450 [ 432.272597][ T7601] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 432.277709][ T7601] ? security_inode_mkdir+0xb4/0x100 [ 432.283119][ T7601] vfs_mkdir+0x3b6/0x590 [ 432.287459][ T7601] do_mkdirat+0x225/0x360 [ 432.291903][ T7601] ? vfs_mkdir+0x590/0x590 [ 432.296494][ T7601] ? getname_flags+0x1f9/0x4f0 [ 432.301383][ T7601] ? lockdep_hardirqs_on+0x94/0x130 [ 432.306651][ T7601] __x64_sys_mkdir+0x6a/0x80 [ 432.311316][ T7601] do_syscall_64+0x3b/0xb0 [ 432.315810][ T7601] ? clear_bhb_loop+0x45/0xa0 [ 432.320572][ T7601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.326601][ T7601] RIP: 0033:0x7fc5a4b7e819 [ 432.331070][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.350752][ T7601] RSP: 002b:00007fc5a59d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 432.359225][ T7601] RAX: ffffffffffffffda RBX: 00007fc5a4d35fa0 RCX: 00007fc5a4b7e819 [ 432.367277][ T7601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 432.375300][ T7601] RBP: 00007fc5a4bf175e R08: 0000000000000000 R09: 0000000000000000 [ 432.383324][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.391361][ T7601] R13: 0000000000000000 R14: 00007fc5a4d35fa0 R15: 00007ffec2114968 [ 432.399400][ T7601] [ 432.416394][ T7601] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1115: corrupted inode contents [ 432.516017][ T7612] loop1: detected capacity change from 0 to 128 [ 432.675011][ T7601] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.1115: mark_inode_dirty error [ 432.936083][ T7601] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1115: corrupted inode contents [ 432.952899][ T7601] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1115: mark_inode_dirty error [ 433.112779][ T4270] EXT4-fs (loop4): unmounting filesystem.