last executing test programs: 6.796440311s ago: executing program 2 (id=1242): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6.706215029s ago: executing program 2 (id=1243): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000300)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = epoll_create1(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000002100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x20000001}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) flock(r6, 0x18) 4.852981141s ago: executing program 2 (id=1257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) 4.704446454s ago: executing program 2 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) recvmmsg(r2, 0x0, 0x0, 0x40002000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x1}, 0xf) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.084242474s ago: executing program 3 (id=1276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="dc", 0x1, 0x40004, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) 2.605969799s ago: executing program 1 (id=1288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.573150012s ago: executing program 4 (id=1290): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) 2.468368001s ago: executing program 0 (id=1291): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setresuid(0x0, 0x0, 0x0) 2.468092871s ago: executing program 4 (id=1292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xa00704, &(0x7f0000000280)={[], [{@uid_eq}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq}, {@pcr={'pcr', 0x3d, 0x13}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, ',#}(\\#$\xec'}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") 2.467870141s ago: executing program 1 (id=1293): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.440165894s ago: executing program 0 (id=1294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000040c0)={0x200000, 0x200000, 0x1000, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0xfd}], 0x1, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x20040001) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000040000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)='$\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 2.418177376s ago: executing program 1 (id=1295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.256512461s ago: executing program 4 (id=1296): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200)=0x3ff, 0x4) 2.248498082s ago: executing program 0 (id=1297): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.223890834s ago: executing program 4 (id=1298): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0xa4) 2.136601582s ago: executing program 3 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) 2.136476102s ago: executing program 1 (id=1300): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 2.038733091s ago: executing program 4 (id=1301): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 2.024517103s ago: executing program 3 (id=1302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 1.976551587s ago: executing program 1 (id=1303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.976437527s ago: executing program 4 (id=1304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292"], 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00', 0x4000}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 1.126409816s ago: executing program 0 (id=1305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fremovexattr(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(r0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 1.106431618s ago: executing program 2 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000001c00)="c2", &(0x7f0000000340)=""/107}, 0x20) 120.426259ms ago: executing program 0 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 120.214999ms ago: executing program 3 (id=1308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timer_create(0x7, 0x0, &(0x7f0000000380)) timer_delete(0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x84) 62.630104ms ago: executing program 3 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, 0x0}, 0x20) 50.581305ms ago: executing program 2 (id=1310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r1, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x2c}}, 0x0) 533.33µs ago: executing program 0 (id=1311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="2b0300000ec00000000005"], 0x124}}, 0x0) 214.86µs ago: executing program 1 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000000000000000000000065cd850000002300000095000000000000009f7fd3e730c38a9c0cf5c65f4803a3fd0a4851e5e2155ac99e9dc3ccc8bb"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000d00)=0x3) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4498e75d, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x19) pwritev(r2, &(0x7f0000001600)=[{&(0x7f0000001680)="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", 0x149}, {&(0x7f00000007c0)="8eb833d4bcf322ec13691b552743d2c29b1546a5c901aca01565b46515d8ab82740e2ab270bfad3df12d6e5589279a7da43a3f68136868436d9ec09204492f136193d671d26b67b270f734de58", 0x4d}, {&(0x7f0000001380)="7f9765e37e6a5c336456fb3aa14ceebd750cef1504c8ecfcd4ba79f13b13251175df37da77a00ddd3a64d48ec2c83d3eb06f12591420a0414c8f817a20aba9b85aaa87dbcc119a09b962cc625d5eacd31a1e3ab6844ba4ae0b58c0e8f48bf67e70be19301bc0edeca3928355f4b8dfc0dea5276ce79dd4c890ea36ee9049de99f1ec832e3765d6239839d45e82aba44c41a170fd1ff1d652a030c5fae5e298bd37e303508e688ea5f4ed677e242f1c2cb00d1ac8e311573a210bb18c02450261e9c4dd506772ae85c1", 0xc9}, {&(0x7f0000000840)="0de271ebca379f6e444288e7feb8b4f1c05b0d9208c7209ee0c13362cb06c3a63db502ac287c56291bc05e487336fc24a57d7350a034c699aeaa9983d404e225002736355a7c2b683bb31596a98ff9", 0x4f}, {&(0x7f0000001480)="eecf5ad7fd33ae24fdd1f47a24965d5a079ac1d0990533e11b50d7b8b8193255d6feb767a2d3fc133a0855ba5675109eae29875ab38e35c27223d6bf3b467bea2644802753b5496c4ecf31c9fa52851251b215fb50f2906187494f67991c9208869e29e712d72636f315543fcaac0bf2828203b2b64a135c4e87f813ba3516b5f3c97af0822fa04d61c9ce79f2b2d2b813173bfd8ea4f87617cdcba4b4aa96005c3180907e7316a9d8addd05dfdaff83a8c2056b6158890aef9a7192427866db63fd919384b00166426c9ae03860e5c435cb80d60daf018813fc8993e8581f3b581745014f021e9ec15eb56b18", 0xed}, {&(0x7f0000001580)="ca0209d308838cd197adecef5a0969d3e9d14aa122f56ae7542bfc5ef40e70c27062de85896df25b62effe63cfadbdf8d8acd50139ac6e9b2589ee974abc62616837928ed9743f63c6abff8a98aee475682dc1ec3e31f891f5d779d1f9dd9269a89c51703c587d", 0xffffff79}], 0x6, 0xf1, 0x6) 0s ago: executing program 3 (id=1313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 HID v0.00 Device [syz0] on syz0 [ 94.634611][ T5235] EXT4-fs (loop1): 1 truncate cleaned up [ 94.636097][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 94.719685][ T5235] EXT4-fs (loop1): resizing filesystem from 256 to 1 blocks [ 94.721949][ T5235] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 94.966367][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.080034][ T5256] mmap: syz.1.421 (5256) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 95.156708][ T13] usb 1-1: device descriptor read/64, error -71 [ 95.190166][ T5259] loop1: detected capacity change from 0 to 128 [ 95.247382][ T5259] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.268547][ T5259] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.431193][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.616428][ T13] usb 1-1: device descriptor read/64, error -71 [ 95.736936][ T13] usb usb1-port1: attempt power cycle [ 96.645350][ T148] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.800227][ T5278] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.429'. [ 96.802592][ T5278] netlink: zone id is out of range [ 96.813424][ T5278] netlink: zone id is out of range [ 96.814760][ T5278] netlink: zone id is out of range [ 96.816064][ T5278] netlink: get zone limit has 4 unknown bytes [ 96.826911][ T5276] hub 2-0:1.0: USB hub found [ 96.834690][ T5276] hub 2-0:1.0: 8 ports detected [ 96.839392][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.429'. [ 96.857396][ T5278] device hsr_slave_0 left promiscuous mode [ 96.909452][ T5278] device hsr_slave_1 left promiscuous mode [ 96.966503][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.056749][ T13] usb 1-1: device descriptor read/8, error -71 [ 97.063159][ T5294] device bond1 entered promiscuous mode [ 97.079292][ T5294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.123629][ T5294] bond1 (unregistering): Released all slaves [ 97.162629][ T5300] loop3: detected capacity change from 0 to 512 [ 97.185152][ T5300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.200818][ T5300] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.439: invalid indirect mapped block 512 (level 0) [ 97.209274][ T5300] EXT4-fs (loop3): Remounting filesystem read-only [ 97.211607][ T5300] EXT4-fs (loop3): 1 orphan inode deleted [ 97.213143][ T5300] EXT4-fs (loop3): 1 truncate cleaned up [ 97.214771][ T5300] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 97.326526][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.343305][ T5306] IPv6: Can't replace route, no match found [ 97.420442][ T13] usb 1-1: device descriptor read/8, error -71 [ 97.541279][ T13] usb usb1-port1: unable to enumerate USB device [ 98.525833][ T5320] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 98.913914][ T5351] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 99.551801][ T5344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.554563][ T5344] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 99.639431][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 99.639443][ T26] audit: type=1326 audit(99.610:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.655034][ T26] audit: type=1326 audit(99.620:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.667980][ T5367] loop3: detected capacity change from 0 to 512 [ 99.675385][ T26] audit: type=1326 audit(99.630:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.712999][ T26] audit: type=1326 audit(99.640:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.736375][ T26] audit: type=1326 audit(99.640:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.752361][ T26] audit: type=1326 audit(99.640:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.776065][ T26] audit: type=1326 audit(99.640:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.784771][ T5367] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.804700][ T26] audit: type=1326 audit(99.640:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.830834][ T26] audit: type=1326 audit(99.640:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 99.837526][ T26] audit: type=1326 audit(99.640:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 100.022598][ T5390] capability: warning: `syz.1.475' uses deprecated v2 capabilities in a way that may be insecure [ 100.194234][ T5398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'. [ 100.311127][ T5406] loop3: detected capacity change from 0 to 512 [ 100.375363][ T5406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.393607][ T5406] EXT4-fs (loop3): 1 truncate cleaned up [ 100.395566][ T5406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.838802][ T5427] x_tables: duplicate underflow at hook 1 [ 101.108919][ T5442] IPVS: stopping master sync thread 5444 ... [ 101.115690][ T5444] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 101.347471][ T5451] ebtables: ebtables: counters copy to user failed while replacing table [ 101.368937][ T5456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.451519][ T5465] loop1: detected capacity change from 0 to 512 [ 101.497536][ T5465] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.508: casefold flag without casefold feature [ 101.505699][ T5465] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.508: couldn't read orphan inode 15 (err -117) [ 101.510152][ T5465] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,journal_dev=0x000000000000000a,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,nodelalloc,norecovery,errors=continue,bsddf,. Quota mode: writeback. [ 101.530056][ T5468] loop2: detected capacity change from 0 to 2048 [ 101.639753][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.675527][ T5468] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.704619][ T5468] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 101.722257][ T5468] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.722257][ T5468] [ 101.736785][ T5468] EXT4-fs (loop2): Total free blocks count 0 [ 101.742212][ T5468] EXT4-fs (loop2): Free/Dirty block details [ 101.744337][ T5468] EXT4-fs (loop2): free_blocks=2415919104 [ 101.747507][ T5468] EXT4-fs (loop2): dirty_blocks=32 [ 101.749170][ T5468] EXT4-fs (loop2): Block reservation details [ 101.751020][ T5468] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 101.787093][ T148] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.790548][ T148] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.790548][ T148] [ 101.875772][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 101.878272][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 102.008378][ T5494] loop2: detected capacity change from 0 to 512 [ 102.087707][ T5494] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.520: iget: bad extended attribute block 1 [ 102.094780][ T5494] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.520: couldn't read orphan inode 15 (err -117) [ 102.109214][ T5494] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 102.220850][ T5486] usb usb8: usbfs: process 5486 (syz.3.517) did not claim interface 0 before use [ 102.462226][ T5521] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 102.464266][ T5521] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.475077][ T5521] vhci_hcd vhci_hcd.0: Device attached [ 102.550715][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.576185][ T5533] ptrace attach of "./syz-executor exec"[4537] was attempted by "./syz-executor exec"[5533] [ 102.668391][ T4073] vhci_hcd: vhci_device speed not set [ 102.733286][ T5539] ebt_among: dst integrity fail: 101 [ 102.736757][ T4073] usb 4-1: new full-speed USB device number 2 using vhci_hcd [ 102.915476][ T5548] udc-core: couldn't find an available UDC or it's busy [ 102.926632][ T5548] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.191558][ T5522] vhci_hcd: connection reset by peer [ 103.195921][ T4171] vhci_hcd: stop threads [ 103.198840][ T4171] vhci_hcd: release socket [ 103.201152][ T4171] vhci_hcd: disconnect device [ 104.109131][ T5584] loop4: detected capacity change from 0 to 512 [ 104.235671][ T5584] EXT4-fs (loop4): filesystem is read-only [ 104.441368][ T5584] EXT4-fs (loop4): filesystem is read-only [ 104.442998][ T5584] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.449484][ T5584] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.557: bad orphan inode 16 [ 104.457957][ T5584] ext4_test_bit(bit=15, block=3) = 0 [ 104.459628][ T5584] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 104.933424][ T26] kauditd_printk_skb: 109 callbacks suppressed [ 104.933437][ T26] audit: type=1326 audit(104.900:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 104.950344][ T26] audit: type=1326 audit(104.920:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 104.963299][ T26] audit: type=1326 audit(104.920:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 104.995895][ T26] audit: type=1326 audit(104.920:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.003405][ T26] audit: type=1326 audit(104.920:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.014231][ T26] audit: type=1326 audit(104.920:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.020581][ T26] audit: type=1326 audit(104.920:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.035970][ T26] audit: type=1326 audit(104.920:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.043115][ T26] audit: type=1326 audit(104.940:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.062651][ T26] audit: type=1326 audit(104.940:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 105.086127][ T5599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.565'. [ 105.127760][ T5601] netlink: 'syz.4.567': attribute type 29 has an invalid length. [ 105.130241][ T5601] netlink: 'syz.4.567': attribute type 29 has an invalid length. [ 105.142996][ T5601] netlink: 'syz.4.567': attribute type 29 has an invalid length. [ 105.200356][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.202590][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.356139][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.358740][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.360835][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.363254][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.365227][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.367329][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.369131][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.371169][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.373161][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.375196][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.377285][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.379299][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.381265][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.383350][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.385312][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.387375][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.389347][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.391363][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.393305][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.395185][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.397883][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.399892][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.401822][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.403829][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.405674][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.407798][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.409809][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.411916][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.414025][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.416215][ T4076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.314920][ T5606] loop4: detected capacity change from 0 to 2048 [ 106.346620][ T4076] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.408406][ T5617] device pim6reg1 entered promiscuous mode [ 106.436110][ T5606] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.956787][ T5665] loop3: detected capacity change from 0 to 164 [ 107.030117][ T5665] Unable to read rock-ridge attributes [ 107.272221][ T5681] netlink: 268 bytes leftover after parsing attributes in process `syz.1.601'. [ 107.661888][ T5703] tipc: Enabling of bearer rejected, failed to enable media [ 107.693306][ T5706] loop1: detected capacity change from 0 to 512 [ 107.774097][ T5706] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.610: bg 0: block 393: padding at end of block bitmap is not set [ 107.796018][ T5706] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 107.800169][ T5706] EXT4-fs (loop1): 2 truncates cleaned up [ 107.810472][ T5706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.866384][ T4073] vhci_hcd: vhci_device speed not set [ 108.002574][ T5722] netlink: 9 bytes leftover after parsing attributes in process `syz.0.618'. [ 108.042472][ T5722] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 108.044659][ T5722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.618'. [ 108.066611][ T5722] device hsr0 entered promiscuous mode [ 108.068683][ T5722] bridge0: port 3(hsr0) entered blocking state [ 108.070394][ T5722] bridge0: port 3(hsr0) entered disabled state [ 108.074149][ T5726] loop1: detected capacity change from 0 to 128 [ 108.087597][ T5722] bridge0: port 3(hsr0) entered blocking state [ 108.089444][ T5722] bridge0: port 3(hsr0) entered forwarding state [ 108.930830][ T5783] raw_sendmsg: syz.2.647 forgot to set AF_INET. Fix it! [ 108.954412][ T5785] tmpfs: Bad value for 'mpol' [ 109.125706][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 109.132304][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 109.253540][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 109.265526][ T5809] device bridge_slave_1 left promiscuous mode [ 109.270810][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.302305][ T5811] loop4: detected capacity change from 0 to 512 [ 109.310704][ T5809] device bridge_slave_0 left promiscuous mode [ 109.312586][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.385351][ T5811] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (4740) [ 109.458703][ T5811] loop4: detected capacity change from 0 to 1024 [ 109.499837][ T5811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 109.502490][ T5811] System zones: 0-1, 3-12 [ 109.504839][ T5811] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 109.625357][ T5825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.661'. [ 109.671194][ T5827] tmpfs: Bad value for 'mpol' [ 109.683938][ T5827] IPv6: Can't replace route, no match found [ 109.760196][ T5831] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 110.333132][ T5864] loop1: detected capacity change from 0 to 1024 [ 110.349527][ T5866] loop2: detected capacity change from 0 to 2048 [ 110.365180][ T5864] EXT4-fs (loop1): Ignoring removed nobh option [ 110.367072][ T5864] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 110.417111][ T5866] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9) [ 110.433815][ T5864] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,usrquota,norecovery,nobh,block_validity,noinit_itable,nomblk_io_submit,block_validity,nogrpid,,errors=continue. Quota mode: writeback. [ 110.547573][ T5864] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 110.592653][ T5848] tipc: Started in network mode [ 110.594123][ T5848] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 110.619975][ T5848] tipc: Enabling of bearer rejected, failed to enable media [ 110.705064][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 110.705077][ T26] audit: type=1326 audit(110.670:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.707994][ T5878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.724589][ T26] audit: type=1326 audit(110.690:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.751049][ T26] audit: type=1326 audit(110.690:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.774846][ T26] audit: type=1326 audit(110.690:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.791479][ T26] audit: type=1326 audit(110.690:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.802504][ T26] audit: type=1326 audit(110.710:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=270 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.847524][ T26] audit: type=1326 audit(110.710:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 110.881681][ T26] audit: type=1326 audit(110.850:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 110.925144][ T26] audit: type=1326 audit(110.850:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 110.950587][ T26] audit: type=1326 audit(110.860:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=84 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 111.292656][ T5906] loop4: detected capacity change from 0 to 512 [ 111.365016][ T5906] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 112.201293][ T5947] loop1: detected capacity change from 0 to 256 [ 112.247476][ T5947] FAT-fs (loop1): Unrecognized mount option "nodžÞ§³œªÀ™¼RóFDaots" or missing value [ 112.280605][ T5951] ptrace attach of "./syz-executor exec"[4034] was attempted by "./syz-executor exec"[5951] [ 112.689427][ T5969] netlink: 'syz.4.726': attribute type 4 has an invalid length. [ 113.033258][ T5989] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.051072][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 113.053055][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.063585][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.070515][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.074878][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.082933][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.086700][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.091197][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.093829][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.100259][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.104704][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.109487][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.112682][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.117703][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.122123][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.126841][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.131513][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.135654][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.145651][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.150134][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.154732][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.159132][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.163391][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.167616][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.171840][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.176149][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.182270][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.185373][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.191651][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.195947][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.200370][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.204447][ T4073] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.213693][ T4073] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 114.020579][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 114.110036][ T6018] netlink: 'syz.3.747': attribute type 3 has an invalid length. [ 116.312002][ T6043] loop2: detected capacity change from 0 to 2048 [ 116.347482][ T6043] Alternate GPT is invalid, using primary GPT. [ 116.349535][ T6043] loop2: p1 p2 p3 [ 116.471806][ T6049] 9pnet: Could not find request transport: A [ 116.560216][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 116.560231][ T26] audit: type=1326 audit(116.525:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 116.575695][ T26] audit: type=1326 audit(116.535:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 116.606386][ T26] audit: type=1326 audit(116.535:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 116.629980][ T26] audit: type=1326 audit(116.535:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=181 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 116.645369][ T26] audit: type=1326 audit(116.535:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 116.676392][ T26] audit: type=1326 audit(116.555:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 116.703053][ T26] audit: type=1326 audit(116.555:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 116.730463][ T26] audit: type=1326 audit(116.555:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 116.757603][ T26] audit: type=1326 audit(116.625:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 116.786023][ T26] audit: type=1326 audit(116.645:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 116.918968][ T6069] loop3: detected capacity change from 0 to 1024 [ 116.963762][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 117.003154][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 117.015373][ T6069] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 117.836894][ T6069] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback. [ 117.977641][ T6077] ebtables: ebtables: counters copy to user failed while replacing table [ 118.045057][ T6069] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 118.104174][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 118.502547][ T6112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.783'. [ 118.592721][ T6109] ebtables: ebtables: counters copy to user failed while replacing table [ 118.595899][ T6117] loop3: detected capacity change from 0 to 512 [ 118.754547][ T6117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.784: inode #1: comm syz.3.784: iget: illegal inode # [ 118.762180][ T6117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.784: error while reading EA inode 1 err=-117 [ 118.778292][ T6117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.784: inode #1: comm syz.3.784: iget: illegal inode # [ 118.825789][ T6117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.784: error while reading EA inode 1 err=-117 [ 118.830828][ T6117] EXT4-fs (loop3): 1 orphan inode deleted [ 118.832673][ T6117] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 118.852834][ T6124] 9pnet: Could not find request transport: ‚ [ 119.162634][ T2439] kernel write not supported for file /snd/seq (pid: 2439 comm: kworker/1:2) [ 119.665509][ T6151] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 121.211322][ T6174] loop3: detected capacity change from 0 to 512 [ 121.356014][ T6174] EXT4-fs (loop3): Ignoring removed oldalloc option [ 122.225357][ T6174] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.807: Parent and EA inode have the same ino 15 [ 122.250265][ T6174] EXT4-fs (loop3): Remounting filesystem read-only [ 122.252046][ T6174] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.807: couldn't truncate inode 15 (err -30) [ 122.283670][ T6174] EXT4-fs (loop3): 1 orphan inode deleted [ 122.285252][ T6174] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 122.397290][ T6208] IPv6: Can't replace route, no match found [ 122.743331][ T6235] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 122.745174][ T6235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.745319][ T6234] loop3: detected capacity change from 0 to 512 [ 122.747780][ T6235] vhci_hcd vhci_hcd.0: Device attached [ 122.778220][ T6237] vhci_hcd: connection closed [ 122.792665][ T4822] vhci_hcd: stop threads [ 122.795169][ T4822] vhci_hcd: release socket [ 122.796679][ T6234] EXT4-fs (loop3): Ignoring removed oldalloc option [ 122.799048][ T4822] vhci_hcd: disconnect device [ 122.833929][ T6234] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.825: Parent and EA inode have the same ino 15 [ 122.865988][ T6234] EXT4-fs (loop3): Remounting filesystem read-only [ 122.891679][ T6234] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.825: couldn't truncate inode 15 (err -30) [ 122.934588][ T6234] EXT4-fs (loop3): 1 orphan inode deleted [ 122.936183][ T6234] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 123.099534][ T6260] loop1: detected capacity change from 0 to 256 [ 123.194126][ T6260] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 123.404158][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 123.404174][ T26] audit: type=1326 audit(123.365:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a068a8 code=0x7ffc0000 [ 123.427046][ T26] audit: type=1326 audit(123.365:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff97a068a8 code=0x7ffc0000 [ 123.472091][ T26] audit: type=1326 audit(123.365:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a068a8 code=0x7ffc0000 [ 123.494904][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'. [ 123.649124][ T6292] loop3: detected capacity change from 0 to 512 [ 123.690094][ T6292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.731729][ T6294] tmpfs: Bad value for 'mpol' [ 123.733482][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.839: bad orphan inode 17 [ 123.742024][ T6292] ext4_test_bit(bit=16, block=4) = 1 [ 123.743452][ T6292] is_bad_inode(inode)=0 [ 123.744583][ T6292] NEXT_ORPHAN(inode)=1048336 [ 123.745794][ T6292] max_ino=32 [ 123.747282][ T6292] i_nlink=0 [ 123.748499][ T6292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.896543][ T26] audit: type=1326 audit(123.825:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 123.907384][ T26] audit: type=1326 audit(123.865:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=196 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 123.949790][ T26] audit: type=1326 audit(123.865:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 123.955669][ T26] audit: type=1326 audit(123.865:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 124.122001][ T6312] serio: Serial port ptm0 [ 124.498281][ T6329] IPVS: stopping master sync thread 6332 ... [ 124.500517][ T6329] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 124.576003][ T6329] team0: Device veth0_macvtap failed to register rx_handler [ 124.645034][ T6334] batman_adv: batadv0: Adding interface: dummy0 [ 124.653225][ T6334] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.687657][ T6334] batman_adv: batadv0: Interface activated: dummy0 [ 124.726313][ T6336] batadv0: mtu less than device minimum [ 124.732393][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.740024][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.747176][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.754382][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.761575][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.768598][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.775679][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.783097][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.790436][ T6336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.018840][ T6331] loop2: detected capacity change from 0 to 256 [ 125.077286][ T6331] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.225019][ T6351] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 125.274071][ T6351] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 125.303369][ T6351] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 125.355813][ T6351] bond1 (unregistering): Released all slaves [ 125.886743][ T6381] loop3: detected capacity change from 0 to 512 [ 125.984791][ T6381] EXT4-fs (loop3): too many log groups per flexible block group [ 125.988593][ T6381] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 125.990526][ T6381] EXT4-fs (loop3): mount failed [ 126.296739][ T26] audit: type=1326 audit(126.255:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 126.302554][ T26] audit: type=1326 audit(126.255:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 126.333111][ T26] audit: type=1326 audit(126.255:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 126.392483][ T6407] loop2: detected capacity change from 0 to 512 [ 126.462760][ T6407] EXT4-fs (loop2): can't mount with commit=57766, fs mounted w/o journal [ 126.534065][ T6417] loop1: detected capacity change from 0 to 512 [ 126.611287][ T6417] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.890: bg 0: block 5: invalid block bitmap [ 126.656638][ T6417] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 126.681959][ T6417] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.890: invalid indirect mapped block 3 (level 2) [ 126.739236][ T6417] EXT4-fs (loop1): 1 orphan inode deleted [ 126.740826][ T6417] EXT4-fs (loop1): 1 truncate cleaned up [ 126.742353][ T6417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.265707][ T6465] tmpfs: Bad value for 'mpol' [ 127.556961][ T6488] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 127.666484][ T6496] ebt_among: src integrity fail: 300 [ 127.758110][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 127.837123][ T6504] loop3: detected capacity change from 0 to 512 [ 127.896178][ T6504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.949327][ T6504] EXT4-fs (loop3): 1 truncate cleaned up [ 127.950819][ T6504] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nombcache,inode_readahead_blks=0x0000000000000002,stripe=0x0000000002004000,max_batch_time=0x0000000000000002,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 127.992327][ T6504] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.930: corrupted in-inode xattr [ 128.018101][ T6504] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1751: inode #15: comm syz.3.930: unable to update i_inline_off [ 128.021703][ T6504] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.930: corrupted in-inode xattr [ 128.045977][ T6504] EXT4-fs error (device loop3): ext4_xattr_ibody_list:748: inode #15: comm syz.3.930: corrupted in-inode xattr [ 128.364102][ T6518] loop1: detected capacity change from 0 to 1024 [ 128.440808][ T6518] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 128.443758][ T6518] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 128.478241][ T6518] EXT4-fs (loop1): journal inode is deleted [ 129.884825][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 129.893783][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 129.985319][ T6563] device syz_tun entered promiscuous mode [ 129.998139][ T6563] device syz_tun left promiscuous mode [ 130.204275][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 130.204289][ T26] audit: type=1326 audit(130.165:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 130.214477][ T26] audit: type=1326 audit(130.175:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 130.233374][ T26] audit: type=1326 audit(130.175:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 130.357607][ T26] audit: type=1326 audit(130.325:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 130.364217][ T26] audit: type=1326 audit(130.325:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 130.395833][ T26] audit: type=1326 audit(130.325:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96a9e8a8 code=0x7ffc0000 [ 130.501541][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 130.524123][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 130.899919][ T6606] device hsr0 entered promiscuous mode [ 130.902629][ T6606] device hsr_slave_0 left promiscuous mode [ 130.962890][ T6609] loop2: detected capacity change from 0 to 512 [ 131.008693][ T6606] device hsr0 left promiscuous mode [ 131.019239][ T6609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.051662][ T6609] EXT4-fs (loop2): 1 truncate cleaned up [ 131.053244][ T6609] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nombcache,inode_readahead_blks=0x0000000000000002,stripe=0x0000000002004000,max_batch_time=0x0000000000000002,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 131.063094][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.064721][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.144651][ T26] audit: type=1326 audit(131.105:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 131.154904][ T26] audit: type=1326 audit(131.105:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 131.170660][ T26] audit: type=1326 audit(131.105:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 131.178409][ T26] audit: type=1326 audit(131.105:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff906858a8 code=0x7ffc0000 [ 131.332640][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 131.335062][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.357025][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.359111][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.360943][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 131.362944][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.364913][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.379029][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.381003][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.383004][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.385038][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.402009][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.404062][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.414611][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.419398][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.423976][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.429586][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.434048][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.439515][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.443622][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.452888][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.463523][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.468800][ T6647] netlink: 116 bytes leftover after parsing attributes in process `syz.1.988'. [ 131.474848][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.480645][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.487819][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.491958][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.497970][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.502268][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.509097][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.514714][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.519297][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.525516][ T13] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 131.691532][ T6663] bridge_slave_0: default FDB implementation only supports local addresses [ 131.812224][ T6669] loop4: detected capacity change from 0 to 512 [ 131.847416][ T6672] loop1: detected capacity change from 0 to 512 [ 131.890595][ T6672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.904127][ T6672] EXT4-fs (loop1): 1 orphan inode deleted [ 131.906023][ T6672] EXT4-fs (loop1): 1 truncate cleaned up [ 131.910212][ T6672] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 131.946581][ T6669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.954894][ T6669] EXT4-fs (loop4): 1 orphan inode deleted [ 131.956616][ T6669] EXT4-fs (loop4): 1 truncate cleaned up [ 131.958124][ T6669] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 132.311909][ T6685] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 132.354260][ T6685] EXT4-fs (loop1): Remounting filesystem read-only [ 132.668611][ T6699] loop2: detected capacity change from 0 to 512 [ 132.689415][ T6701] 9pnet: Insufficient options for proto=fd [ 132.744929][ T6699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1012: bg 0: block 5: invalid block bitmap [ 132.748929][ T6699] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 132.753381][ T6699] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1012: invalid indirect mapped block 3 (level 2) [ 132.762560][ T6699] EXT4-fs (loop2): 1 orphan inode deleted [ 132.764026][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 132.765458][ T6699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.142986][ T6716] IPVS: Error joining to the multicast group [ 133.198447][ T6718] loop2: detected capacity change from 0 to 512 [ 133.268922][ T6718] EXT4-fs (loop2): Ignoring removed orlov option [ 133.270791][ T6718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.291206][ T6718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 133.293340][ T6718] System zones: 1-12 [ 133.295721][ T6718] EXT4-fs (loop2): 1 truncate cleaned up [ 133.297576][ T6718] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,orlov,data_err=ignore,debug,noload,,errors=continue. Quota mode: none. [ 133.686195][ T6741] loop3: detected capacity change from 0 to 1024 [ 133.693491][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 133.697612][ T6741] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 133.722077][ T6741] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback. [ 133.741414][ T6741] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 133.911145][ T6754] loop4: detected capacity change from 0 to 1024 [ 133.978986][ T6754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.984359][ T6754] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1033: bad orphan inode 8 [ 134.002822][ T6754] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.041383][ T6764] batman_adv: batadv0: Adding interface: dummy0 [ 134.045258][ T6764] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.075623][ T6764] batman_adv: batadv0: Interface activated: dummy0 [ 134.125842][ T6764] net_ratelimit: 10 callbacks suppressed [ 134.125857][ T6764] batadv0: mtu less than device minimum [ 134.159740][ T6770] loop4: detected capacity change from 0 to 512 [ 134.170374][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.177823][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.184853][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.192207][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.199483][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.206769][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.214418][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.221746][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.229149][ T6764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.384737][ T6770] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1041: casefold flag without casefold feature [ 134.397112][ T6770] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1041: couldn't read orphan inode 15 (err -117) [ 134.406689][ T6770] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.549473][ T6798] loop3: detected capacity change from 0 to 512 [ 134.602745][ T6798] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1050: iget: bad extended attribute block 1 [ 134.632560][ T6798] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1050: couldn't read orphan inode 15 (err -117) [ 134.672290][ T6798] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 134.923328][ T6811] loop3: detected capacity change from 0 to 512 [ 134.928464][ T6811] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 135.078840][ T6818] hub 2-0:1.0: USB hub found [ 135.090627][ T6818] hub 2-0:1.0: 8 ports detected [ 135.178052][ T6828] loop1: detected capacity change from 0 to 512 [ 135.229299][ T6828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.272028][ T6828] EXT4-fs (loop1): 1 truncate cleaned up [ 135.273618][ T6828] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 135.344578][ T6837] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1065'. [ 135.367110][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 135.389179][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 135.389192][ T26] audit: type=1326 audit(135.325:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.411292][ T6837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1065'. [ 135.414635][ T26] audit: type=1326 audit(135.355:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.450541][ T26] audit: type=1326 audit(135.365:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.475314][ T26] audit: type=1326 audit(135.365:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.499833][ T26] audit: type=1326 audit(135.365:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.513393][ T26] audit: type=1326 audit(135.365:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.520205][ T26] audit: type=1326 audit(135.365:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.525688][ T26] audit: type=1326 audit(135.365:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.531835][ T26] audit: type=1326 audit(135.385:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.565143][ T26] audit: type=1326 audit(135.385:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 135.635456][ T6851] loop4: detected capacity change from 0 to 512 [ 135.738501][ T6851] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 135.777705][ T6864] tipc: Started in network mode [ 135.779070][ T6864] tipc: Node identity c24966641a69, cluster identity 4711 [ 135.781698][ T6864] tipc: Enabled bearer , priority 10 [ 135.953179][ T6863] tipc: Resetting bearer [ 136.039555][ T6863] tipc: Disabling bearer [ 136.052321][ T6872] loop2: detected capacity change from 0 to 1024 [ 136.135595][ T6872] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.139839][ T6872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 136.145608][ T6872] System zones: 0-1, 3-12 [ 136.150618][ T6872] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.152985][ T6872] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.1077: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.173559][ T6872] EXT4-fs (loop2): 1 orphan inode deleted [ 136.175375][ T6872] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,max_batch_time=0x0000000000000400,stripe=0x0000000000000800,grpjquota=,debug,,errors=continue. Quota mode: writeback. [ 137.291397][ T6871] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.1077: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 137.497469][ T6889] loop1: detected capacity change from 0 to 512 [ 137.552574][ T6889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.567565][ T6889] EXT4-fs (loop1): 1 truncate cleaned up [ 137.569459][ T6889] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nombcache,inode_readahead_blks=0x0000000000000002,stripe=0x0000000002004000,max_batch_time=0x0000000000000002,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 137.643254][ T6889] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1083: corrupted in-inode xattr [ 137.681275][ T6902] loop3: detected capacity change from 0 to 512 [ 137.694084][ T6889] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1751: inode #15: comm syz.1.1083: unable to update i_inline_off [ 137.736380][ T6904] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #15: comm syz.1.1083: corrupted in-inode xattr [ 137.761058][ T6889] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1083: corrupted in-inode xattr [ 137.770930][ T6902] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 137.773030][ T6902] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.808994][ T6902] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 137.811173][ T6902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 137.840295][ T6902] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 137.842969][ T6902] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 137.845314][ T6902] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 137.864795][ T6902] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1089: dx entry: limit 65535 != root limit 120 [ 137.909636][ T6902] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1089: Corrupt directory, running e2fsck is recommended [ 137.929923][ T6902] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1089: path /163/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 138.322284][ T6926] loop2: detected capacity change from 0 to 512 [ 138.467114][ T6926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.647558][ T6926] EXT4-fs (loop2): 1 orphan inode deleted [ 138.649382][ T6926] EXT4-fs (loop2): 1 truncate cleaned up [ 138.651171][ T6926] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 139.058633][ T6934] loop2: detected capacity change from 0 to 1024 [ 139.096435][ T6934] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 139.144051][ T6934] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 139.157954][ T6945] IPv6: Can't replace route, no match found [ 139.332436][ T6948] loop1: detected capacity change from 0 to 512 [ 139.467844][ T6948] EXT4-fs (loop1): Ignoring removed orlov option [ 139.469650][ T6948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.490704][ T6948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 139.492978][ T6948] System zones: 1-12 [ 139.531453][ T6948] EXT4-fs (loop1): 1 truncate cleaned up [ 139.533053][ T6948] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,jqfmt=vfsv1,orlov,data_err=ignore,debug,noload,,errors=continue. Quota mode: none. [ 139.897226][ T6975] loop1: detected capacity change from 0 to 512 [ 139.907313][ T6975] EXT4-fs (loop1): Ignoring removed nobh option [ 140.063688][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 140.905486][ T6975] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 140.907978][ T6975] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 140.931907][ T6975] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.1113: casefold flag without casefold feature [ 140.981016][ T6975] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1113: couldn't read orphan inode 13 (err -117) [ 141.009146][ T6975] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 141.073788][ T6975] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 141.235157][ T7000] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1126'. [ 141.255622][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1126'. [ 141.270263][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1126'. [ 141.549512][ T7026] loop2: detected capacity change from 0 to 256 [ 142.391197][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 142.391209][ T26] audit: type=1326 audit(142.355:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 142.409648][ T26] audit: type=1326 audit(142.375:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=12 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 142.433773][ T26] audit: type=1326 audit(142.375:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 142.759089][ T7083] loop1: detected capacity change from 0 to 2048 [ 143.023232][ T7083] Alternate GPT is invalid, using primary GPT. [ 143.025139][ T7083] loop1: p1 p2 p3 [ 143.433184][ T7091] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 143.490398][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 143.635891][ T7102] loop3: detected capacity change from 0 to 512 [ 143.642023][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 144.393965][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 144.441138][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 144.497184][ T4073] Bluetooth: hci1: command 0x0409 tx timeout [ 144.499175][ T7102] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 144.547411][ T7102] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 144.576919][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 144.660698][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 144.676115][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 144.747507][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.749604][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.753206][ T7070] device bridge_slave_0 entered promiscuous mode [ 144.765293][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.767545][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.770283][ T7070] device bridge_slave_1 entered promiscuous mode [ 144.895123][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.909744][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.951908][ T7070] team0: Port device team_slave_0 added [ 144.971281][ T7070] team0: Port device team_slave_1 added [ 145.015706][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.046549][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.082482][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.087675][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.089581][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.104036][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.208522][ T7070] device hsr_slave_0 entered promiscuous mode [ 145.237252][ T7070] device hsr_slave_1 entered promiscuous mode [ 145.291271][ T7070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.293607][ T7070] Cannot create hsr debugfs directory [ 145.500510][ T7147] loop3: detected capacity change from 0 to 512 [ 145.531322][ T7147] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 145.533580][ T7147] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.702032][ T7147] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.704268][ T7147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 145.712801][ T7147] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 145.715425][ T7147] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 145.745628][ T7147] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 145.774300][ T7070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.710387][ T4073] Bluetooth: hci1: command 0x041b tx timeout [ 146.730207][ T7147] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1189: dx entry: limit 65535 != root limit 120 [ 146.737663][ T7147] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1189: Corrupt directory, running e2fsck is recommended [ 146.759068][ T7147] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1189: path /181/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 146.950780][ T7070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.889619][ T7070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.002081][ T7070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.242450][ T7070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.278430][ T7070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.318347][ T7070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.359671][ T7070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.482185][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 149.559768][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.571991][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.574563][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.619647][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.649010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.651949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.654914][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.656944][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.674232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.686962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.697424][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.699300][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.727048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.836631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.842408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.845589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.867189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.814512][ T7198] 9pnet: p9_fd_create_tcp (7198): problem connecting socket to 127.0.0.1 [ 150.834982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.848005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.859226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.902708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.905887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.956491][ T7214] device hsr_slave_0 left promiscuous mode [ 151.011111][ T7215] loop3: detected capacity change from 0 to 512 [ 151.030231][ T7214] device hsr_slave_1 left promiscuous mode [ 151.101848][ T7215] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.462386][ T7215] EXT4-fs (loop3): 1 truncate cleaned up [ 151.464311][ T7215] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nombcache,inode_readahead_blks=0x0000000000000002,stripe=0x0000000002004000,max_batch_time=0x0000000000000002,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 151.544648][ T4029] Bluetooth: hci1: command 0x0419 tx timeout [ 151.599713][ T7222] loop2: detected capacity change from 0 to 2048 [ 151.734127][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 151.806415][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.809211][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.814857][ T7070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.835079][ T26] audit: type=1326 audit(151.795:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.841178][ T26] audit: type=1326 audit(151.795:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.864110][ T26] audit: type=1326 audit(151.825:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.886399][ T26] audit: type=1326 audit(151.825:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.892123][ T26] audit: type=1326 audit(151.825:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.959365][ T26] audit: type=1326 audit(151.825:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.964472][ T26] audit: type=1326 audit(151.825:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 151.973984][ T7227] loop1: detected capacity change from 0 to 1024 [ 152.012629][ T26] audit: type=1326 audit(151.825:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 152.043105][ T26] audit: type=1326 audit(151.825:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 152.106303][ T26] audit: type=1326 audit(151.825:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1acf8a8 code=0x7ffc0000 [ 152.145817][ T7227] EXT4-fs (loop1): Invalid want_extra_isize 0 [ 152.225270][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.248002][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.087640][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.324743][ T7244] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 153.890507][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 154.802869][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 154.824244][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 154.916477][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.922488][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.956799][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.960245][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.964642][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.975248][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.981961][ T7070] device veth0_vlan entered promiscuous mode [ 155.012919][ T7286] loop2: detected capacity change from 0 to 128 [ 155.026210][ T7070] device veth1_vlan entered promiscuous mode [ 155.059513][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.065836][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.068856][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.071799][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.076142][ T7070] device veth0_macvtap entered promiscuous mode [ 155.090652][ T7070] device veth1_macvtap entered promiscuous mode [ 155.134423][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.140686][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.143552][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.151720][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.155089][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.161653][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.165683][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.172857][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.180987][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.211929][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.214615][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.222603][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.232586][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.244288][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.251769][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.254529][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.264647][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.275050][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.285184][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.292238][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.310635][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.315276][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.364088][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.370153][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.375849][ T7070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.384636][ T7070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.393801][ T7070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.396178][ T7070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.445809][ T7307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1242'. [ 155.509398][ T7304] loop3: detected capacity change from 0 to 8192 [ 155.521182][ T1626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.523759][ T1626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.529902][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.559211][ T4171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.563535][ T4171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.590940][ T7304] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.597004][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.628896][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 155.685397][ T7310] loop2: detected capacity change from 0 to 2048 [ 155.754182][ T7310] Alternate GPT is invalid, using primary GPT. [ 155.757561][ T7310] loop2: p2 p3 p7 [ 155.886083][ T7322] ptrace attach of "./syz-executor exec"[4537] was attempted by "./syz-executor exec"[7322] [ 155.903193][ T3639] Alternate GPT is invalid, using primary GPT. [ 155.909653][ T3639] loop2: p2 p3 p7 [ 155.934757][ T7328] atomic_op 0000000095451f39 conn xmit_atomic 0000000000000000 [ 156.400781][ T7341] net_ratelimit: 10 callbacks suppressed [ 156.400798][ T7341] ebtables: ebtables: counters copy to user failed while replacing table [ 157.405999][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 157.406012][ T26] audit: type=1326 audit(157.365:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.419770][ T26] audit: type=1326 audit(157.385:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.440176][ T26] audit: type=1326 audit(157.395:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.475894][ T26] audit: type=1326 audit(157.395:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.494340][ T26] audit: type=1326 audit(157.395:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.529439][ T26] audit: type=1326 audit(157.395:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.535240][ T26] audit: type=1326 audit(157.395:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.566774][ T7360] loop2: detected capacity change from 0 to 512 [ 157.645601][ T26] audit: type=1326 audit(157.395:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.669251][ T26] audit: type=1326 audit(157.395:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.693371][ T26] audit: type=1326 audit(157.395:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff896888a8 code=0x7ffc0000 [ 157.712676][ T7360] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 157.715225][ T7360] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.752502][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 157.755568][ T7360] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.758389][ T7360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 157.762369][ T7360] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 157.766648][ T7360] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 157.768829][ T7360] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 158.684891][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 158.699579][ T7360] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1261: dx entry: limit 65535 != root limit 120 [ 158.702990][ T7360] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1261: Corrupt directory, running e2fsck is recommended [ 158.794347][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 158.799290][ T7360] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1261: path /301/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 158.935651][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 158.950358][ T7389] ptrace attach of "./syz-executor exec"[4037] was attempted by "./syz-executor exec"[7389] [ 158.968995][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 158.975140][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 158.986741][ T7388] : renamed from ipvlan1 [ 159.092743][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'. [ 159.400777][ T4077] kernel write not supported for file /snd/seq (pid: 4077 comm: kworker/0:4) [ 159.537673][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1286'. [ 159.756029][ T7433] loop4: detected capacity change from 0 to 512 [ 161.133069][ T7459] udc-core: couldn't find an available UDC or it's busy [ 161.135157][ T7459] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.084974][ T7470] Cannot find set identified by id 0 to match [ 162.240998][ T7479] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1311'. [ 162.244392][ T7479] ------------[ cut here ]------------ [ 162.245821][ T7479] WARNING: CPU: 0 PID: 7479 at net/wireless/core.h:220 wdev_lock+0xd0/0xe8 [ 162.247918][ T7479] Modules linked in: [ 162.248939][ T7479] CPU: 0 PID: 7479 Comm: syz.0.1311 Not tainted 5.15.167-syzkaller #0 [ 162.251206][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.253680][ T7479] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.255493][ T7479] pc : wdev_lock+0xd0/0xe8 [ 162.256829][ T7479] lr : wdev_lock+0xd0/0xe8 [ 162.258002][ T7479] sp : ffff80001d2f6ca0 [ 162.259098][ T7479] x29: ffff80001d2f6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 162.261210][ T7479] x26: 1fffe0001ad60000 x25: ffff0000e60f0c90 x24: 0000000000000000 [ 162.263332][ T7479] x23: 1fffe0001cc1e193 x22: ffff700003a5ed9c x21: 00000000000007d0 [ 162.265547][ T7479] x20: 0000000000000000 x19: ffff0000e60f0c90 x18: 0000000000000000 [ 162.267418][ T7479] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000002 [ 162.269709][ T7479] x14: ffff0000c658b680 x13: 0000000000ff0100 x12: 0000000000040000 [ 162.271657][ T7479] x11: 0000000000003e92 x10: ffff800020cf9000 x9 : 0000000000003e93 [ 162.273925][ T7479] x8 : ffff80001131bdc0 x7 : 0000000000000000 x6 : 00000000000007d0 [ 162.276103][ T7479] x5 : ffff0000d7c76090 x4 : ffff80001d2f6d04 x3 : ffff80000ab195c0 [ 162.278241][ T7479] x2 : 0000000000000004 x1 : 0000000000000000 x0 : 0000000000000000 [ 162.280437][ T7479] Call trace: [ 162.281376][ T7479] wdev_lock+0xd0/0xe8 [ 162.282481][ T7479] nl80211_send_iface+0x68c/0xccc [ 162.283790][ T7479] nl80211_dump_interface+0x38c/0x5cc [ 162.285188][ T7479] netlink_dump+0x4a8/0xad0 [ 162.286372][ T7479] __netlink_dump_start+0x474/0x6d4 [ 162.287826][ T7479] genl_rcv_msg+0xa80/0x1018 [ 162.289040][ T7479] netlink_rcv_skb+0x20c/0x3b8 [ 162.290295][ T7479] genl_rcv+0x38/0x50 [ 162.291401][ T7479] netlink_unicast+0x664/0x938 [ 162.292720][ T7479] netlink_sendmsg+0x844/0xb38 [ 162.294072][ T7479] ____sys_sendmsg+0x584/0x870 [ 162.295453][ T7479] ___sys_sendmsg+0x214/0x294 [ 162.296680][ T7479] __arm64_sys_sendmsg+0x1ac/0x25c [ 162.298061][ T7479] invoke_syscall+0x98/0x2b8 [ 162.299333][ T7479] el0_svc_common+0x138/0x258 [ 162.300558][ T7479] do_el0_svc+0x58/0x14c [ 162.301827][ T7479] el0_svc+0x7c/0x1f0 [ 162.302974][ T7479] el0t_64_sync_handler+0x84/0xe4 [ 162.304224][ T7479] el0t_64_sync+0x1a0/0x1a4 [ 162.305346][ T7479] irq event stamp: 698 [ 162.306391][ T7479] hardirqs last enabled at (697): [] kasan_quarantine_put+0xdc/0x204 [ 162.309032][ T7479] hardirqs last disabled at (698): [] el1_dbg+0x24/0x80 [ 162.311194][ T7479] softirqs last enabled at (662): [] local_bh_enable+0x10/0x34 [ 162.313539][ T7479] softirqs last disabled at (656): [] local_bh_disable+0x10/0x34 [ 162.316107][ T7479] ---[ end trace c7ee40943e677726 ]--- [ 162.376391][ T7479] ------------[ cut here ]------------ [ 162.378365][ T7479] WARNING: CPU: 0 PID: 7479 at net/wireless/core.h:228 wdev_unlock+0xcc/0xe4 [ 162.380798][ T7479] Modules linked in: [ 162.381954][ T7479] CPU: 0 PID: 7479 Comm: syz.0.1311 Tainted: G W 5.15.167-syzkaller #0 [ 162.384557][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.386991][ T7479] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.388949][ T7479] pc : wdev_unlock+0xcc/0xe4 [ 162.390168][ T7479] lr : wdev_unlock+0xcc/0xe4 [ 162.391333][ T7479] sp : ffff80001d2f6ca0 [ 162.392571][ T7479] x29: ffff80001d2f6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 162.394495][ T7479] x26: 1fffe0001ad60000 x25: ffff0000e60f0c90 x24: 0000000000000001 [ 162.396731][ T7479] x23: 0000000000000000 x22: ffff700003a5ed9c x21: 1fffe0001cc1e1ca [ 162.398940][ T7479] x20: 0000000000000000 x19: ffff0000e60f0c90 x18: 0000000000000000 [ 162.401171][ T7479] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000009 [ 162.403274][ T7479] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000040000 [ 162.405286][ T7479] x11: 0000000000023e93 x10: ffff800020cf9000 x9 : 0000000000023e94 [ 162.407456][ T7479] x8 : ffff80001131bea4 x7 : 0000000000000000 x6 : 0000000010101010 [ 162.409438][ T7479] x5 : ffff0000d7c7609a x4 : ffff0000e63b4c25 x3 : ffff80000ab195c0 [ 162.411615][ T7479] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 [ 162.413821][ T7479] Call trace: [ 162.414703][ T7479] wdev_unlock+0xcc/0xe4 [ 162.415810][ T7479] nl80211_send_iface+0x984/0xccc [ 162.417107][ T7479] nl80211_dump_interface+0x38c/0x5cc [ 162.418408][ T7479] netlink_dump+0x4a8/0xad0 [ 162.419446][ T7479] __netlink_dump_start+0x474/0x6d4 [ 162.420756][ T7479] genl_rcv_msg+0xa80/0x1018 [ 162.421926][ T7479] netlink_rcv_skb+0x20c/0x3b8 [ 162.423263][ T7479] genl_rcv+0x38/0x50 [ 162.424347][ T7479] netlink_unicast+0x664/0x938 [ 162.425573][ T7479] netlink_sendmsg+0x844/0xb38 [ 162.426887][ T7479] ____sys_sendmsg+0x584/0x870 [ 162.428330][ T7479] ___sys_sendmsg+0x214/0x294 [ 162.429566][ T7479] __arm64_sys_sendmsg+0x1ac/0x25c [ 162.430999][ T7479] invoke_syscall+0x98/0x2b8 [ 162.432233][ T7479] el0_svc_common+0x138/0x258 [ 162.433518][ T7479] do_el0_svc+0x58/0x14c [ 162.434747][ T7479] el0_svc+0x7c/0x1f0 [ 162.435887][ T7479] el0t_64_sync_handler+0x84/0xe4 [ 162.437338][ T7479] el0t_64_sync+0x1a0/0x1a4 [ 162.438612][ T7479] irq event stamp: 852 [ 162.439634][ T7479] hardirqs last enabled at (851): [] exit_to_kernel_mode+0x100/0x178 [ 162.442159][ T7479] hardirqs last disabled at (852): [] el1_dbg+0x24/0x80 [ 162.444536][ T7479] softirqs last enabled at (846): [] handle_softirqs+0xb88/0xdbc [ 162.446989][ T7479] softirqs last disabled at (701): [] __irq_exit_rcu+0x268/0x4d8 [ 162.449435][ T7479] ---[ end trace c7ee40943e677727 ]--- [ 162.456309][ T7479] ------------[ cut here ]------------ [ 162.457688][ T7479] WARNING: CPU: 0 PID: 7479 at net/wireless/core.h:220 wdev_lock+0xd0/0xe8 [ 162.460007][ T7479] Modules linked in: [ 162.461040][ T7479] CPU: 0 PID: 7479 Comm: syz.0.1311 Tainted: G W 5.15.167-syzkaller #0 [ 162.463676][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.466424][ T7479] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.468423][ T7479] pc : wdev_lock+0xd0/0xe8 [ 162.469453][ T7479] lr : wdev_lock+0xd0/0xe8 [ 162.470736][ T7479] sp : ffff80001d2f6ca0 [ 162.471943][ T7479] x29: ffff80001d2f6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 162.473954][ T7479] x26: 1fffe0001af16000 x25: ffff0000e6014c90 x24: 0000000000000000 [ 162.476243][ T7479] x23: 1fffe0001cc02993 x22: ffff700003a5ed9c x21: 00000000000007d0 [ 162.478393][ T7479] x20: 0000000000000000 x19: ffff0000e6014c90 x18: 0000000000000000 [ 162.480556][ T7479] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000002 [ 162.482795][ T7479] x14: ffff0000c658b680 x13: 0000000000ff0100 x12: 0000000000040000 [ 162.484857][ T7479] x11: 000000000003ffff x10: ffff800020cf9000 x9 : 0000000000040000 [ 162.486906][ T7479] x8 : ffff80001131bdc0 x7 : 0000000000000000 x6 : 00000000000007d0 [ 162.489157][ T7479] x5 : ffff0000d7c7612c x4 : ffff80001d2f6d04 x3 : ffff80000ab195c0 [ 162.491454][ T7479] x2 : 0000000000000004 x1 : 0000000000000000 x0 : 0000000000000000 [ 162.493645][ T7479] Call trace: [ 162.494698][ T7479] wdev_lock+0xd0/0xe8 [ 162.495693][ T7479] nl80211_send_iface+0x68c/0xccc [ 162.497134][ T7479] nl80211_dump_interface+0x38c/0x5cc [ 162.498507][ T7479] netlink_dump+0x4a8/0xad0 [ 162.499689][ T7479] __netlink_dump_start+0x474/0x6d4 [ 162.501109][ T7479] genl_rcv_msg+0xa80/0x1018 [ 162.502345][ T7479] netlink_rcv_skb+0x20c/0x3b8 [ 162.503565][ T7479] genl_rcv+0x38/0x50 [ 162.504662][ T7479] netlink_unicast+0x664/0x938 [ 162.505993][ T7479] netlink_sendmsg+0x844/0xb38 [ 162.507294][ T7479] ____sys_sendmsg+0x584/0x870 [ 162.508563][ T7479] ___sys_sendmsg+0x214/0x294 [ 162.509944][ T7479] __arm64_sys_sendmsg+0x1ac/0x25c [ 162.511392][ T7479] invoke_syscall+0x98/0x2b8 [ 162.512370][ T7479] el0_svc_common+0x138/0x258 [ 162.513425][ T7479] do_el0_svc+0x58/0x14c [ 162.514543][ T7479] el0_svc+0x7c/0x1f0 [ 162.515792][ T7479] el0t_64_sync_handler+0x84/0xe4 [ 162.517311][ T7479] el0t_64_sync+0x1a0/0x1a4 [ 162.518511][ T7479] irq event stamp: 1066 [ 162.519387][ T7479] hardirqs last enabled at (1065): [] _raw_spin_unlock_irqrestore+0xac/0x158 [ 162.522126][ T7479] hardirqs last disabled at (1066): [] el1_dbg+0x24/0x80 [ 162.524315][ T7479] softirqs last enabled at (1058): [] handle_softirqs+0xb88/0xdbc [ 162.526750][ T7479] softirqs last disabled at (855): [] __irq_exit_rcu+0x268/0x4d8 [ 162.529097][ T7479] ---[ end trace c7ee40943e677728 ]--- [ 162.534831][ T7479] ------------[ cut here ]------------ [ 162.536242][ T7479] WARNING: CPU: 0 PID: 7479 at net/wireless/core.h:228 wdev_unlock+0xcc/0xe4 [ 162.538432][ T7479] Modules linked in: [ 162.539521][ T7479] CPU: 0 PID: 7479 Comm: syz.0.1311 Tainted: G W 5.15.167-syzkaller #0 [ 162.542053][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.544851][ T7479] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.546872][ T7479] pc : wdev_unlock+0xcc/0xe4 [ 162.548094][ T7479] lr : wdev_unlock+0xcc/0xe4 [ 162.549141][ T7479] sp : ffff80001d2f6ca0 [ 162.550126][ T7479] x29: ffff80001d2f6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 162.552339][ T7479] x26: 1fffe0001af16000 x25: ffff0000e6014c90 x24: 0000000000000001 [ 162.554353][ T7479] x23: 0000000000000000 x22: ffff700003a5ed9c x21: 1fffe0001cc029ca [ 162.556393][ T7479] x20: 0000000000000000 x19: ffff0000e6014c90 x18: 0000000000000000 [ 162.558327][ T7479] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000009 [ 162.560356][ T7479] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000040000 [ 162.562491][ T7479] x11: 000000000003ffff x10: ffff800020cf9000 x9 : 0000000000040000 [ 162.564391][ T7479] x8 : ffff80001131bea4 x7 : 0000000000000000 x6 : 0000000010101010 [ 162.566474][ T7479] x5 : ffff0000d7c76136 x4 : ffff0000e6189925 x3 : ffff80000ab195c0 [ 162.568555][ T7479] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 [ 162.570784][ T7479] Call trace: [ 162.571651][ T7479] wdev_unlock+0xcc/0xe4 [ 162.572674][ T7479] nl80211_send_iface+0x984/0xccc [ 162.573715][ T7479] nl80211_dump_interface+0x38c/0x5cc [ 162.575121][ T7479] netlink_dump+0x4a8/0xad0 [ 162.576304][ T7479] __netlink_dump_start+0x474/0x6d4 [ 162.577690][ T7479] genl_rcv_msg+0xa80/0x1018 [ 162.578935][ T7479] netlink_rcv_skb+0x20c/0x3b8 [ 162.580347][ T7479] genl_rcv+0x38/0x50 [ 162.581457][ T7479] netlink_unicast+0x664/0x938 [ 162.582731][ T7479] netlink_sendmsg+0x844/0xb38 [ 162.584017][ T7479] ____sys_sendmsg+0x584/0x870 [ 162.585308][ T7479] ___sys_sendmsg+0x214/0x294 [ 162.586620][ T7479] __arm64_sys_sendmsg+0x1ac/0x25c [ 162.587972][ T7479] invoke_syscall+0x98/0x2b8 [ 162.589147][ T7479] el0_svc_common+0x138/0x258 [ 162.590411][ T7479] do_el0_svc+0x58/0x14c [ 162.591435][ T7479] el0_svc+0x7c/0x1f0 [ 162.592415][ T7479] el0t_64_sync_handler+0x84/0xe4 [ 162.593732][ T7479] el0t_64_sync+0x1a0/0x1a4 [ 162.595022][ T7479] irq event stamp: 1594 [ 162.596125][ T7479] hardirqs last enabled at (1593): [] exit_to_kernel_mode+0x100/0x178 [ 162.598765][ T7479] hardirqs last disabled at (1594): [] el1_dbg+0x24/0x80 [ 162.601011][ T7479] softirqs last enabled at (1588): [] handle_softirqs+0xb88/0xdbc [ 162.603557][ T7479] softirqs last disabled at (1069): [] __irq_exit_rcu+0x268/0x4d8 [ 162.606094][ T7479] ---[ end trace c7ee40943e677729 ]--- [ 162.620931][ T7489] device bridge1 entered promiscuous mode [ 168.773043][ T309] device hsr_slave_0 left promiscuous mode [ 168.806846][ T309] device hsr_slave_1 left promiscuous mode [ 168.886490][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.888569][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.892633][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.894678][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.897280][ T309] device bridge_slave_1 left promiscuous mode [ 168.898991][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.947773][ T309] device bridge_slave_0 left promiscuous mode [ 168.949754][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.976433][ T4073] Bluetooth: hci0: command 0x0406 tx timeout [ 168.978090][ T4073] Bluetooth: hci3: command 0x0406 tx timeout [ 168.979745][ T4073] Bluetooth: hci2: command 0x0406 tx timeout [ 169.076565][ T309] device veth1_macvtap left promiscuous mode [ 169.078532][ T309] device veth1_vlan left promiscuous mode [ 169.300823][ T309] team0 (unregistering): Port device team_slave_1 removed [ 169.310979][ T309] team0 (unregistering): Port device team_slave_0 removed [ 169.320942][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.356978][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.507721][ T309] bond0 (unregistering): Released all slaves