last executing test programs: 4.333685579s ago: executing program 0 (id=1430): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x36d87ba5f0d3bb4d) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.872132791s ago: executing program 0 (id=1439): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 2.258782979s ago: executing program 3 (id=1460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000500)="45685e33e11fd4370898d8690e3eabf3417f5f4544cc8c6d52cf7ccc1a3ee6a4cd96dd", 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x20048004) 2.11837494s ago: executing program 3 (id=1463): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.937717541s ago: executing program 3 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r2, 0x0, 0x6}, 0x18) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 1.831979982s ago: executing program 3 (id=1470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.726185772s ago: executing program 4 (id=1472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000002280)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 1.644075653s ago: executing program 1 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000008000000080000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 1.643981513s ago: executing program 4 (id=1475): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000f40)={0x2, 0x4e21, @empty}, 0x10) 1.586433263s ago: executing program 1 (id=1476): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.529705483s ago: executing program 4 (id=1477): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.150935215s ago: executing program 0 (id=1480): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs28uPFMUfAPBv9z74/XjtivgAUVeJceNjl11QOXjRaOIBo4ke8LjOLoQwsIZdEyFEVmPwYmJI9Gw8mvgXePNi1JOJV70bEqJcQE9juqcbZoaZhYXZmZX5fJKGqumarfpOdXVXd80EMLAmsn+SiK0R8VtEjNWzzQUm6v9dvXy28vfls5UkarW3/kzyclcun62URcv3bSkyk2lE+klSVNJs6fSZ43PV6sKpIj+9fOK96aXTZ549dmLu6MLRhZOzBw8e2D/zwvOzz3UlzlqtVruy+8PFPbtee+fC65XDF9796dusvVuL/Y1xdMtEFvhftVzrvie6XVmfbWtIJ8N9bAhrMhQRWXeN5ON/LIbieueNxasf97VxwLrKrk2bOu9eqQF3sST63QKgP8oLfXb/W249mnpsCJdeqt8AZXFfLbb6nuFIizIjLfe33TQREYdX/vkq22KdnkMAADT6rPLloXim3fwvjfsbym0v1obGI+KeiNgREfdGxM6IuC8iL/tARDy4xvpbl4ZunP+kF28rsFuUzf9eLNa2mud/5ewvxoeK3LY8/pHkyLHqwr7iM5mMkU1ZfmaVOr5/5dfPO+1rnP9lW1Z/ORcs2nFxuOUB3fzc8lw+Ke2CSx9F7B5uF39ybSUgiYhdEbF7bX96e5k49tQ3ezoVunn8q+jCOlPt64gn6/2/Ei3xl5LV1yen/xfVhX3T5VFxo59/Of9mp/rvKP4uyPp/c/Px31pkPGlcr11aex3nf/+04z3N7R7/o8nb+flotHjtg7nl5VMzEaPJoTzf9Prs9feW+bJ8Fv/k3vbjf0fxniz+hyIiO4gfjohHIuLRou2PRcTjEbF3lfh/fLnzvo3Q//Ntz3/Xjv+W/l97Yuj4D991qv/W+v9AnposXsnPfzdxqw28k88OAAAA/ivS/DvwSTp1LZ2mU1P17/DvjM1pdXFp+ekji++fnK9/V348RtLySddYw/PQmWSl+Iv1/GzxrLjcv794bvzF0P/z/FRlsTrf59hh0G3pMP4zfwz1u3XAumu3jjY72oeGAD3XOv7T5uy5N3rZGKCn/F4bBtdNxn/aq3YAvef6D4Or3fg/15K3FgB3J9d/GFzGPwwu4x8Gl/EPA+lOftcvMciJSDdEMyTWKdHvMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BsAAP//bK7yyQ==") 1.035786405s ago: executing program 0 (id=1481): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001680)={0x10, 0x31, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20040080}, 0x2000000) 936.030005ms ago: executing program 2 (id=1482): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r3, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 935.727095ms ago: executing program 0 (id=1483): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.events\x00', 0x275a, 0x0) io_uring_setup(0x7d5, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000900)=[{&(0x7f0000000800)="7f", 0x1}], 0x1, 0x5405, 0xfffffffc, 0x4) 924.408296ms ago: executing program 4 (id=1484): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 918.918356ms ago: executing program 2 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x7, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x7, @local}}}, 0x3a) 871.340156ms ago: executing program 2 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 871.027226ms ago: executing program 3 (id=1487): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sync_file_range(0xffffffffffffffff, 0x45a5909b, 0x9, 0x2) 715.823287ms ago: executing program 3 (id=1488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file0\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x32c, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x77359400}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r0, 0x0, 0x48, 0x3a, &(0x7f0000000480)="69aad4515855565429d6d59b8780124a8be4b4252bd35e8fd8500c532660d77c1684689592ca623c3eeaeef649c9bca78e2d920b738f03f63e09fcd25f6d8ff920249ee90240b45d", &(0x7f0000000500)=""/58, 0x4, 0x0, 0x1000, 0xeb, &(0x7f0000000540)="cfbdb172ec068a4328296ca3b7012c330ab47f384d68c7b00cc6a0045eb7cc684dbbc8a44ba340bcecbfbb7c2e2d475d29a18ad363f138ad36d808e73919e98514c95b21d2396346592dad732526c8163ccd726ab391f37411c7dbd33bf9491a2b400f74eb8c5c698c0fdcda9979af3b1656188a6efc12b7d81a6eb3b81e6d3ef91485edf3a732463d0ddb024c6db4fbbc5c13261dae308ac729e49b9897316820b931285cbee2fd3e7618fb8ded4a018d480a7b696297ad9503161aaff50d3438c64121743d214c712edc1516c3bbc12021770be8c00df07402f9c85a04fbacfc9380cf37f8670738b8f286049d1cb46a16634e419f77cf76bc37c399642fe0dc147eab34abdf4ca4d3b2752638826df4d0e0e8a3b7a9523d5196baf605115c8015294ba275845aec6b717eea8aeb394fb11e27221d562d8e3a93dcfc4a16c548243d45e52133d44fe68fc16fea7dd92e631a4ee24eb3d8372769daff975e7947a7ac7f6520f09092b94ecd902ed4e5fcdcb97b0443ce0c5f3b1eed4e54aaadc2a74be519e3ad6fbd5c909699794f2b90b25dba187cbbbb1aac6c8e8867b140554f68039f4509c255caa83fdac34295c2ba59b8b894accd2211c4b527bbea102ff04ed7a79bc57cb93e2979fd076a64a07363091e483419b2cc2a8488c2e20f255bf31f5ed1cbf63326a2f6e18efbce53481dd86004b5e3b491ad1df9ff703d2c24433367b8627307e490bb0c020f0431356ad4ff5e81b4e72c53c5c0b21c369220a33e777c08b6a664b16e360c8a79f113e08c88e160735035342d2678b77e44c340211e612652ffeda822d61d6eb4af4a64f1a3e5416df1d0b529d95e604d96e0d606546d91db02a4ca20db2bcb682dc6dffae82cd1fd5732bead855c9622a1c581041f45ffbacc1ab84d1b96b2d34e4d7baed65190e448c644cab082ff63f5ecd330f47cc315e9c72092b4507dee0ec8ba1c9492ba1b8a319ee33923dd6ed6d12e454514fe38ddffec5e2ed7f60067487bbdd4b9529e9628f1e2976b456479266157b1508f72278ece76f13cbd9f6b398110cd8e5c932018c13b8e13f61b87857079974201f459cd8c3a0a4301fe86369fad95fe66f7771eff3fb1193748ca7256de1220abf3e3c4416a897b733d57092b8bff856d7db8a02c0b7332b9860c72e21884f0e9982b42bc39cb432d2294a81282c095309d0e37b1418706fd4bc92ef6999d8231e640a345db615bcc541d76c87abefec0cf2c995fc125ed874c7e571282706c86bd68c8b1a8377095e6d3bfeda42275728df55ff7b597325bfaf78c9261d00925dfcad887b4b52d5b2dc70f3ab67ea755fa3c52a21f2912cac495bb471f3d85234dd5d8ff2e120d09da4a8f4d338813205d74fbed3ab3d884b9a8b22d94a0812910fb27bf8b5be796d616d6e179d46c0ca91f941c56dda27d13efd43c2056d751b15dc8579cfed0a8b9d6e13e290e430f24051e82b4f5f45431efd50e46485b7b2036a097fd471b7dd7bc2e7c7527473a5dbf0e48c92c6c8a99984a29895dca7ba1a45a970e996e000dcf2a4b421c3ad39d29d85fb5383b815946d8dc793b230938819ff3bd44960a2e803303f6f71e3719129468068d7e925f74c1b43ff6c7b46733dd0795cdaf66795f5ee39b63d0dfd6f29df6d821efefdaa914e10b0548c7727a9d82cdd205e60b455b7d3646127716b080016113157bf20d9d168f231083579e07727d4bf57bf78b75b6304b0e827a7f9385848aa930aa9fcc936c7887cded782d4908d065abd306236104e5316671d640f16f0d5b4a8cc2e907d5f69782f5714026d0a65b908cdba9f1d1b311f2dbe3fbac90c0dc3e7e8a0526833d0c7cec23f17cb08bebf5bb796a92e2009bf9114928832e688c80f6fe1d862dc5b7ba61eb8d843a06ea0bf6d21a5bf617ba5e9bb9669525218f8a889240a3e2841e2e2d6ab6126af93a3a0790e6867178a11b805681dea4d77bdfd5a1d7121517a2111bdd54fef28100bce968a04db3c463446c085fe97ac8863673eb4177688b4c690a19afd7c11b4e118382bc97a2a136e5d6a92cdf09d4d051b0393bf41ab878f8b8baf65b63bddf6a9868d617d58de4dfaff0fdc8986ad241f94f9ef8269cd2ccea43313cbcf5208f046a8d70b5e2ea15c24c6fe3e03a2c5fa25f9984310e0b1131495ef4a69d6989129bfc9f857d4b91bf47146050e2711f264723c92f56d65ec7b3e22abe9ec9b6890dd838ae965e6af1e8102c308910a49d6ea7fe336429abf43808b3df16fe6296cddf975a9ad161d9f507e362dd84fefbcb0f3bb2cd686cbb64110294f5c9486069d069b2269342344ced6b075f4d6b2adc9f2dceccf3c25121ed7e26c054539b031d4c3a5d51ffd129261e2a5e0c9a55349229aa7e4004e9c79f6d82e8c993069e368393a25fea93e3796410fd9ca7585c5e35d2c5ab6e67759ce923a0deffd1e43d31ec39f0910b4c23fce9e2503edf591d150e9c424c128df8939647d14ba05833395bf77ca9bf8839095dace4fa39184b9975fea95d9060cf3db6e52138a5feddcfcb448521c1b14bc008bc185c97afb28bc39600a330c6ba91ab455d69ab9cfd53153dd850de5b3866b468cf745655a145b036644be31e3119fd9534e3abc0cfabe464ca9b82342a77c13a608b257fd4b48ef11cc7d2191cd78abd6e10daa5bde0eec3bf434fb711a2c3703447d3659053a7bfa2806625c89df7f35409e4956f822e6ac6050b7aa41ce6b2404b51b88a4b11f117b3eb5eae60251569026c708f884165dddcbe4f5dc48e1272512646421908b1d18c554af5e45d4a38a4383fe2d0ae74e02cc5e95441c09f7fb3a0a8f752488f4b0b6f604a157dea9f39a77fa6d1da71e1af547276725c1c7e4536e2cf9bc5a86187c26e60fb25acbe677cf5b0ee3aabe48007bc3fd8118637d272e0f3f788433c3ddcb80cae7de827b0c46dc78719a775af942d8f52fc7d8657b8499424f0e70ac3930f98f55bd4f8d3dee3c657279b4b2698520211532af5d743444501b9ef75fbe4e029d0142bc37326211f5a32d983db0ee77a6cbafbdd9457fe6eec37c52287f731e1d0418c27bd55ac9e3fea052994687652f8260798f1778c94a2e65716ba3e132d8332e515d6193150e4e5e352f0a9f242103ea91365ce7cab4255aad19941cf52f1b9585bd3bbf6b0f43f9cf305d842b6fd43abb56281d76cb19da137324eb2677a0115f21ab7bef532b09a8f1c35967e75738a84f46e39a9514f1b76ca76f3dff95b25b084e36d65623e2493f46a3cd270f8c15316c3db2b83b3e61a4cf5a4a66378f08508b7af12df3178d54889ffb4f591cd26060ae283d6245bf4883d8cc1259acec927afeb83f01b6c90c94ccd19f6a13fce31ec2a7c3b55d1f9dc866790b8f775639ad5201410453f1137ac30a0328d2c875a23d9ade2f0327db3a2c97825b1186589315552842a0f1600e32f97963810017d13f6f14e754e510cb39a8f508e5beb43b247377806b1f398ef688aefbe93703b56eee6ded502ab250ac5caccceacb9ed0a8b5d9a0515ee215052721562ee9f2f384c4a57b3e11c592ba1e0adf198b49af7f0599a1b63a742acf3cf4e2d426144d341090724c74e7a7be3f7a38add8cf164fdc2eab72df73419d3b76e0cce76d6cb25866e140fb1e83f602030bb30658b55a5acd9f89412df3549e56603f7a426b1ae025b6e7d8444a8d41532df3007ce85b1b35e47050a48fab4ff1d41181300097f8748997cf35337acc83ea25fa64b279c19b7e73a510098c640a23f2e47d57bc9189d54827cedefb9df1e1ab4dd4bc8ea60c68a66e211e1311b75a3386f1dd3c679426b34d3a9107b25f36b30e4e061d94d19eac175ea5fb5ace37b84322e88f748f1677cadd77819399f1a8206975c764918b858deba0d843284c8ac4111ec79779460279de5523222b3a289acf5dbd78b355cdd7585d07d9a07b489892b268b933ff2311ee556da77023343197b762325efea77b8f76cbdf4354c9d435b6d103f189488c638046bc571c668a132cd7b1ac50a07148a2bf55e63db7093e763c257497b2fc661929cc3e77cf5125be4a6e0b2f6fe99b9da274989bc642575082e030379becf803bd9ae5a42f29df76d6fe2c56d2c715d8f0a1cc1fff6766a27531fcc9e028646a43e2ab992c437fe858da8491529cb06eda3af70ec41bae72e4bc084217eee1f9ea357b5436c601f0956b795aefcfd1f762971c6323a62d00bde15a3eae39dfc52f06da359de1e084f9d078e3078b35a08194bc6cba1dc2a700959394a350c818385aae39c2e3572663efda1a476288015eac85bc4a307bfeccd250184aeea282060ce2963a0cd3b725e0499f1e5ca0e4ee0c93596a47e70695c01fbf1969cc3bd368ac3e1068b4ee6cbab452d82a9168b7681285f6697da7e17d2cda727613f2b0ba24ffc8f0b8bd7bc5c72ac2271735461eaf029de3ae59deead04794478149cd1cad36749558a73ca19ba3070f2e954f347ba29b9c8681df3ddf6d41e15b0beaf3ad8f26582cc10d32c1761b1e1bb9089a52db036ebe9ad87e917c79a6e73db03d68fa1f30f4099e1a9088a2bc7e8d39dc099cd576c6a9f909f5012a25035cb3f671326d9858a6c2496fddd3be335c29293acd2a1b499d1673a5c10ad66a213e737657aa9eda514d1cfe3a02d47eeb29efb4d1c0c4b0939e08069d5771f38fb3add348ba88369993ae60fc2f9984adecc4349ad95cf5633bb4f6c169ebd4327887fe3b79d3bdae6b274ba54d050a948efbb536f221778c75e5f0b6dcb67fc49ad2a23b10b5b73b10a4c2fab1dac32bdc61357d885bb32176afc4fa4cb08c74dcb641e334359b009c3de987b323be4d291061771aaa4c39ab3e2ad42f6a9f7551a640e22cbec95e437b8e8fee9a840a51c131548854ce58e671ca8472812745753712123c392d0908e3adf156153499b248c92f3c669186f9ce522c659ac02c281f8038b6b4ed9d981550c7d8300df3fe80067099c44acdd8cf134ff63828874ed4b26710aa039277ab15085dcb45446c35724a635911bf0d556f1628e4ce5910a533eb97d2c5460f0752f66d39796626d00106eee788e47aeddd0f360f5ea3a4c709c27cb9e1ef33b4a80e4c9f8c55c734e4b8494c7ace43fecbfef6151d32ff2d25881a5957eb6c5000481954b7ce71209efc6b9cb4740d70bd1de9546cc928cef76f7a6c12e901b04ed346ed957a81600fac2b1b3c20c0abecf2e18f5f81b5c54e81efdf88b8e46f81030ec0d356ed642c474baa66badb6055f0f6029d44c486b0fa5541124a1ebdac9cab99b66d642449bff5da82fbf3e92b3238e75f01b65f8f3db4950dce388571593b94301f60a3c21bd54d36cccb7782a2b9234be8f7ac1f2cd8b68548009a452e6e11f1212191afc5d5df34dc0109278eaf34f8f571c52f917b6752afc9adee01d2977208351a3219525e7cbe5ff4087d2b60863d5c98027e9f378e5b3deabbb0cd796b87dcef8423edb6570862e975b2d4b6c0cac94d9c9f47139db7eb4238cec374f04712a3fef64ccaece5e372fd67ba1ce47b7c54695974a22648127e7ceca76df2499d6d59c0cc7fcf5eae0871b8bf2b101df28f9b897fe8c9a7481c513a07fc23de7d7afc30a3675c0e9ee5166dc97e956e299f9f4cfd02d5876fae6b07dbc92e69a5f9f44956186288f9d3a7e94d381e8323a6178de590db1f29dd70ee65e734881227d699d800ceb8fc6369a0b3db1981b5a185feda9eab7a385a07713d4d2dadba39009771a71f6bc", &(0x7f0000001540)="7af8557666833b3dbfef2d83dbfaf0a8d93e3ceab3e3ae46bf81cee5c7e1bca53ac92c39a27b552f8ce4ffc14d3a0cbe0bd296484cd6318ac32da05572a413ab1f8f5f0aa5c8f46a4cde158dea377e1c37e19fb2cf04b880fe858d2ab1d5a5851b391ce00ec569f96c90210ebed46695a9133730b4b7d5b48310d96a135ff8da2ec0611a700973fd68aae5ef3034606ce584b70e752e747e4d5eab71d96141b474f152f230ba2f30699fb42b85e9f2d2fb2814d068ec88c0ad9b186e2f81cbc445c38825738ad597ea578f1744948b6fed6e2b29fe3334232a921b1abcb16d0527dc578ea4d50a9b67960b", 0x1, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 666.228507ms ago: executing program 1 (id=1489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) 643.711657ms ago: executing program 4 (id=1490): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 532.062078ms ago: executing program 0 (id=1491): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 497.926968ms ago: executing program 1 (id=1492): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x81, 0x0, 0x6, [0x2, 0x9, 0xfffffffa, 0x4]}]}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x802, 0x1, 0xffffffff}}}}}, 0x0) 483.612828ms ago: executing program 2 (id=1493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2f, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x3d5653a0b35cd406}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x6, 0x8, 0x1, 0xc}, {0x3, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x80000000, 0x20003, 0x99}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 368.174299ms ago: executing program 1 (id=1494): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 208.409869ms ago: executing program 2 (id=1495): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) sendmmsg$inet(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 208.20431ms ago: executing program 4 (id=1496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) 150.69337ms ago: executing program 1 (id=1497): syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") syz_emit_ethernet(0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="716255c47b46aaaaaaaaaabb86dd60"], 0x0) 0s ago: executing program 2 (id=1498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3(vlan2) entered disabled state [ 54.380404][ T4264] device vlan2 entered promiscuous mode [ 54.400005][ T4264] device bond0 entered promiscuous mode [ 54.401313][ T4264] device bond_slave_0 entered promiscuous mode [ 54.424155][ T4264] device bond_slave_1 entered promiscuous mode [ 54.440503][ T4264] bridge0: port 3(vlan2) entered blocking state [ 54.442048][ T4264] bridge0: port 3(vlan2) entered forwarding state [ 54.556137][ T4280] IPv6: Can't replace route, no match found [ 54.577838][ T4282] Invalid ELF header magic: != ELF [ 54.593363][ T4276] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 55.255475][ T26] kauditd_printk_skb: 209 callbacks suppressed [ 55.255489][ T26] audit: type=1326 audit(55.230:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.267093][ T26] audit: type=1326 audit(55.240:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.277646][ T26] audit: type=1326 audit(55.250:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.293986][ T26] audit: type=1326 audit(55.250:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.321814][ T26] audit: type=1326 audit(55.250:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.339918][ T26] audit: type=1326 audit(55.250:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.355028][ T26] audit: type=1326 audit(55.250:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.371502][ T26] audit: type=1326 audit(55.250:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=140 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.387707][ T26] audit: type=1326 audit(55.250:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 55.611949][ T4067] usb 11-1: device descriptor read/8, error -110 [ 55.683362][ T4337] loop2: detected capacity change from 0 to 512 [ 55.726034][ T26] audit: type=1326 audit(55.700:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 55.750447][ T4337] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 55.760032][ T4337] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 55.763200][ T4337] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 55.765977][ T4337] EXT4-fs (loop2): 1 truncate cleaned up [ 55.767274][ T4337] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 55.813748][ T4339] loop0: detected capacity change from 0 to 512 [ 55.901218][ T4339] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.031981][ T4067] usb usb11-port1: Cannot enable. Maybe the USB cable is bad? [ 56.033862][ T4067] usb usb11-port1: attempt power cycle [ 56.201013][ T4326] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.372729][ T4067] usb usb11-port1: Cannot enable. Maybe the USB cable is bad? [ 56.374196][ T4374] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.460136][ T4377] loop3: detected capacity change from 0 to 512 [ 56.502363][ T4377] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.505191][ T4377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.535916][ T4377] EXT4-fs (loop3): 1 truncate cleaned up [ 56.537218][ T4377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.655516][ T4390] loop1: detected capacity change from 0 to 256 [ 56.675740][ T4067] usb usb11-port1: Cannot enable. Maybe the USB cable is bad? [ 56.677617][ T4067] usb usb11-port1: unable to enumerate USB device [ 56.772606][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 56.812164][ T25] usb 5-1: device descriptor read/8, error -110 [ 56.836487][ T4397] loop0: detected capacity change from 0 to 164 [ 56.882745][ T4397] Unable to read rock-ridge attributes [ 56.898526][ T4397] Unable to read rock-ridge attributes [ 57.242606][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 57.244446][ T25] usb usb5-port1: attempt power cycle [ 57.592671][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 57.628562][ T4422] process 'syz.1.122' launched '/dev/fd/-1' with NULL argv: empty string added [ 57.726452][ T4426] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 57.726452][ T4426] The task syz.0.121 (4426) triggered the difference, watch for misbehavior. [ 57.902058][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 57.904264][ T25] usb usb5-port1: unable to enumerate USB device [ 57.918375][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 58.146282][ T4405] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.019349][ T4456] loop4: detected capacity change from 0 to 8192 [ 59.029416][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 59.412640][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 59.903829][ T4482] mmap: syz.2.144 (4482) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 59.940632][ T4485] loop1: detected capacity change from 0 to 512 [ 59.974898][ T4485] EXT4-fs (loop1): Ignoring removed oldalloc option [ 60.000144][ T4485] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.146: Parent and EA inode have the same ino 15 [ 60.007732][ T4485] EXT4-fs (loop1): Remounting filesystem read-only [ 60.009492][ T4485] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.024784][ T4485] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.146: Parent and EA inode have the same ino 15 [ 60.033246][ T4485] EXT4-fs (loop1): Remounting filesystem read-only [ 60.036512][ T4485] EXT4-fs (loop1): 1 orphan inode deleted [ 60.042443][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 60.309167][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 60.309179][ T26] audit: type=1326 audit(60.280:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.328580][ T26] audit: type=1326 audit(60.300:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.349011][ T26] audit: type=1326 audit(60.320:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.363859][ T26] audit: type=1326 audit(60.320:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.380086][ T26] audit: type=1326 audit(60.320:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.396361][ T26] audit: type=1326 audit(60.320:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.411148][ T4476] delete_channel: no stack [ 60.413260][ T26] audit: type=1326 audit(60.320:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.430550][ T26] audit: type=1326 audit(60.320:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.454276][ T26] audit: type=1326 audit(60.320:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.471988][ T26] audit: type=1326 audit(60.320:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 60.565175][ T4518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.162'. [ 60.778546][ T4531] loop2: detected capacity change from 0 to 2048 [ 60.852927][ T4531] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 60.944041][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 61.117875][ T4549] loop4: detected capacity change from 0 to 2048 [ 61.192725][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.058235][ T4577] loop2: detected capacity change from 0 to 1024 [ 62.281865][ T4577] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000005,dioread_lock,,errors=continue. Quota mode: none. [ 62.313186][ T4583] loop4: detected capacity change from 0 to 512 [ 62.320502][ T4577] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2746: inode #15: comm syz.2.186: corrupted in-inode xattr [ 62.417947][ T4583] EXT4-fs (loop4): too many log groups per flexible block group [ 62.419964][ T4583] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 62.421631][ T4583] EXT4-fs (loop4): mount failed [ 62.697110][ T4599] loop2: detected capacity change from 0 to 128 [ 62.750119][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.783001][ T4608] loop1: detected capacity change from 0 to 256 [ 62.904827][ T4608] netlink: 47 bytes leftover after parsing attributes in process `syz.1.199'. [ 62.933351][ T4612] loop0: detected capacity change from 0 to 2048 [ 63.104236][ T4612] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 63.108497][ T4627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.205'. [ 63.136932][ T4627] bridge0: port 3(vlan2) entered blocking state [ 63.147084][ T4627] bridge0: port 3(vlan2) entered disabled state [ 63.429176][ T4638] loop2: detected capacity change from 0 to 1024 [ 63.498453][ T4638] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 63.500912][ T4638] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 63.513555][ T4638] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #5: comm syz.2.209: unexpected bad inode w/o EXT4_IGET_BAD [ 63.528863][ T4638] EXT4-fs (loop2): no journal found [ 63.530080][ T4638] EXT4-fs (loop2): can't get journal size [ 63.536160][ T4638] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,mb_optimize_scan=0x0000000000000001,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 63.549870][ T4638] EXT4-fs error (device loop2): ext4_remount:5855: comm syz.2.209: Abort forced by user [ 63.716389][ T4649] loop4: detected capacity change from 0 to 2048 [ 63.799875][ T4649] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 63.872860][ T4651] Falling back ldisc for ttyS3. [ 63.910970][ T4649] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.930262][ T4649] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 1 with error 28 [ 63.947550][ T4649] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.947550][ T4649] [ 63.949662][ T4649] EXT4-fs (loop4): Total free blocks count 0 [ 63.951130][ T4649] EXT4-fs (loop4): Free/Dirty block details [ 63.985118][ T4649] EXT4-fs (loop4): free_blocks=2415919104 [ 63.986520][ T4649] EXT4-fs (loop4): dirty_blocks=32 [ 63.987655][ T4649] EXT4-fs (loop4): Block reservation details [ 63.989011][ T4649] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 64.045979][ T1811] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.048772][ T1811] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.048772][ T1811] [ 64.203613][ T4659] udc-core: couldn't find an available UDC or it's busy [ 64.205170][ T4659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.271165][ T4675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.810745][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 64.917114][ T4703] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 64.927031][ T4692] team0 (unregistering): Port device team_slave_0 removed [ 65.009312][ T4692] team0 (unregistering): Port device team_slave_1 removed [ 65.066484][ T4708] loop2: detected capacity change from 0 to 2048 [ 65.152664][ T4708] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 65.200613][ T4714] 9pnet: Insufficient options for proto=fd [ 65.247293][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 65.453856][ T4726] loop3: detected capacity change from 0 to 512 [ 65.460773][ T4722] device veth0_to_team entered promiscuous mode [ 65.484104][ T4726] EXT4-fs (loop3): Ignoring removed nobh option [ 65.514207][ T4726] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 65.549575][ T4726] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 65.647988][ T4738] loop2: detected capacity change from 0 to 2048 [ 65.751801][ T4738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.802838][ T4738] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.810784][ T4738] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 25 with max blocks 1 with error 28 [ 65.838946][ T4738] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.838946][ T4738] [ 65.841047][ T4738] EXT4-fs (loop2): Total free blocks count 0 [ 65.849081][ T4738] EXT4-fs (loop2): Free/Dirty block details [ 65.850509][ T4738] EXT4-fs (loop2): free_blocks=2415919504 [ 65.867144][ T26] kauditd_printk_skb: 127 callbacks suppressed [ 65.867154][ T26] audit: type=1326 audit(65.842:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 65.881820][ T26] audit: type=1326 audit(65.842:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 65.892858][ T4738] EXT4-fs (loop2): dirty_blocks=16 [ 65.902283][ T4738] EXT4-fs (loop2): Block reservation details [ 65.911991][ T26] audit: type=1326 audit(65.882:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 65.916737][ T4738] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 65.919676][ T4750] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 10 with error 28 [ 65.920928][ T4751] loop0: detected capacity change from 0 to 512 [ 65.954305][ T26] audit: type=1326 audit(65.882:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 65.958896][ T26] audit: type=1326 audit(65.882:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 65.968809][ T4750] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.968809][ T4750] [ 65.972598][ T4754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.254'. [ 65.980690][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.019040][ T26] audit: type=1326 audit(65.882:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 66.024866][ T26] audit: type=1326 audit(65.882:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 66.030446][ T26] audit: type=1326 audit(65.882:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 66.036052][ T4757] qrtr: Invalid version 164 [ 66.038464][ T26] audit: type=1326 audit(65.882:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 66.044866][ T26] audit: type=1326 audit(65.882:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 66.207368][ T4741] infiniband syz1: set active [ 66.228478][ T4741] infiniband syz1: added bond_slave_1 [ 66.275067][ T4741] RDS/IB: syz1: added [ 66.277730][ T4741] smc: adding ib device syz1 with port count 1 [ 66.280506][ T4741] smc: ib device syz1 port 1 has pnetid [ 66.397046][ T4772] loop0: detected capacity change from 0 to 128 [ 66.486894][ T4780] netlink: 44 bytes leftover after parsing attributes in process `syz.3.270'. [ 66.508784][ T4778] loop2: detected capacity change from 0 to 8192 [ 66.526560][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 66.557143][ T4778] loop2: p1 p2 p3 p4 [ 66.558620][ T4778] loop2: p1 start 51379968 is beyond EOD, truncated [ 66.569430][ T4778] loop2: p3 size 100663552 extends beyond EOD, truncated [ 66.573178][ T4778] loop2: p4 size 81920 extends beyond EOD, truncated [ 66.611520][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.692553][ T3642] loop2: p1 p2 p3 p4 [ 66.693714][ T3642] loop2: p1 start 51379968 is beyond EOD, truncated [ 66.696401][ T3642] loop2: p3 size 100663552 extends beyond EOD, truncated [ 66.711965][ T3642] loop2: p4 size 81920 extends beyond EOD, truncated [ 66.925515][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 67.004527][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 67.042644][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 67.186882][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 67.198923][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 67.211631][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 67.269795][ T4821] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.287455][ T4819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.288'. [ 67.298433][ T4823] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 67.308737][ T4823] bridge0: port 3(vlan2) entered disabled state [ 67.310225][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.312595][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.369080][ T4823] bridge0: port 3(vlan2) entered blocking state [ 67.370500][ T4823] bridge0: port 3(vlan2) entered forwarding state [ 67.372806][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.374413][ T4823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.376364][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.378017][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.443024][ T4823] bridge0: port 3(vlan2) entered disabled state [ 67.444643][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.446297][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.463236][ T4825] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 67.494347][ T4825] team0: Device hsr_slave_0 failed to register rx_handler [ 67.532580][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 67.551300][ T4828] device vlan2 left promiscuous mode [ 67.553515][ T4828] device bond0 left promiscuous mode [ 67.558529][ T4828] device bond_slave_0 left promiscuous mode [ 67.560199][ T4828] device bond_slave_1 left promiscuous mode [ 67.563716][ T4828] bridge0: port 3(vlan2) entered disabled state [ 67.604683][ T4828] device bridge_slave_1 left promiscuous mode [ 67.610623][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.674687][ T4828] device bridge_slave_0 left promiscuous mode [ 67.676493][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.803209][ T4847] atomic_op 00000000e8b33920 conn xmit_atomic 0000000000000000 [ 67.903399][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 67.978218][ T4859] loop0: detected capacity change from 0 to 128 [ 68.204870][ T4874] loop4: detected capacity change from 0 to 512 [ 68.296977][ T4874] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.299587][ T4874] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.310637][ T4874] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.311: Failed to acquire dquot type 1 [ 68.327334][ T4874] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.311: bg 0: block 40: padding at end of block bitmap is not set [ 68.340264][ T4874] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 68.351391][ T4874] EXT4-fs (loop4): 1 truncate cleaned up [ 68.363318][ T4874] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.469020][ T4949] loop0: detected capacity change from 0 to 128 [ 69.508409][ T4948] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 69.617442][ T7] cfg80211: failed to load regulatory.db [ 69.623897][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.625333][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.751415][ T4970] 9pnet: Insufficient options for proto=fd [ 69.880248][ T4976] loop2: detected capacity change from 0 to 1024 [ 70.029789][ T4976] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 70.747816][ T5002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 70.749782][ T5002] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 70.804708][ T4998] loop1: detected capacity change from 0 to 4096 [ 70.873176][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 70.873189][ T26] audit: type=1326 audit(70.852:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 70.879930][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 70.901951][ T5007] device bridge_slave_1 left promiscuous mode [ 70.903454][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.911611][ T4998] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.982146][ T5007] device bridge_slave_0 left promiscuous mode [ 70.984052][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.241581][ T5018] loop0: detected capacity change from 0 to 1024 [ 71.246119][ T5022] loop1: detected capacity change from 0 to 512 [ 71.247911][ T26] audit: type=1326 audit(71.222:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 71.298230][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 71.311012][ T26] audit: type=1326 audit(71.282:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.322731][ T26] audit: type=1326 audit(71.282:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.351836][ T26] audit: type=1326 audit(71.282:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.356489][ T26] audit: type=1326 audit(71.282:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.392566][ T5018] EXT4-fs (loop0): Ignoring removed orlov option [ 71.393983][ T5018] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 71.450156][ T26] audit: type=1326 audit(71.282:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.455955][ T26] audit: type=1326 audit(71.282:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.465623][ T26] audit: type=1326 audit(71.282:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.470858][ T26] audit: type=1326 audit(71.282:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 71.484648][ T5018] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 71.633667][ T5041] loop3: detected capacity change from 0 to 128 [ 71.710374][ T5040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.383'. [ 71.776812][ T5051] netlink: 'syz.4.383': attribute type 10 has an invalid length. [ 71.816640][ T5051] team0: Device hsr_slave_0 failed to register rx_handler [ 72.872124][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 72.900648][ T5093] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.902910][ T5093] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 72.936569][ T5096] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 72.945510][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.947436][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.007861][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.009564][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.011307][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.012970][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.091901][ T5096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 73.110129][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 73.124870][ T5099] device bridge_slave_1 left promiscuous mode [ 73.142647][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.176170][ T5107] netlink: 268 bytes leftover after parsing attributes in process `syz.1.407'. [ 73.246157][ T5099] device bridge_slave_0 left promiscuous mode [ 73.250043][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.351193][ T5099] bond0: (slave bridge0): Releasing backup interface [ 73.711458][ T5130] loop3: detected capacity change from 0 to 128 [ 73.730315][ T5132] loop4: detected capacity change from 0 to 164 [ 74.053862][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 74.060063][ T5148] loop2: detected capacity change from 0 to 128 [ 74.829660][ T5186] loop2: detected capacity change from 0 to 8192 [ 74.865222][ T4117] loop2: p1 < > p3 < > p4 [ 74.894848][ T4117] loop2: partition table partially beyond EOD, truncated [ 74.896590][ T4117] loop2: p1 start 4294967040 is beyond EOD, truncated [ 74.917953][ T5188] loop0: detected capacity change from 0 to 512 [ 74.945198][ T4117] loop2: p4 size 50331776 extends beyond EOD, truncated [ 74.966456][ T5186] loop2: p1 < > p3 < > p4 [ 74.967473][ T5186] loop2: partition table partially beyond EOD, truncated [ 74.969171][ T5186] loop2: p1 start 4294967040 is beyond EOD, truncated [ 74.971402][ T5186] loop2: p4 size 50331776 extends beyond EOD, truncated [ 74.984470][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 74.993936][ T5188] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 75.079557][ T5199] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 75.081238][ T5199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.085492][ T5199] vhci_hcd vhci_hcd.0: Device attached [ 75.092573][ T5200] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 75.094706][ T9] vhci_hcd: stop threads [ 75.095749][ T9] vhci_hcd: release socket [ 75.096717][ T9] vhci_hcd: disconnect device [ 75.150275][ T5044] udevd[5044]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 75.157215][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.171021][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.198114][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 75.206897][ T5203] loop2: detected capacity change from 0 to 512 [ 75.293799][ T5203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.681101][ T5222] capability: warning: `syz.4.455' uses deprecated v2 capabilities in a way that may be insecure [ 75.717294][ T5222] loop4: detected capacity change from 0 to 256 [ 75.811125][ T5230] loop3: detected capacity change from 0 to 1024 [ 75.845426][ T5230] EXT4-fs (loop3): Ignoring removed oldalloc option [ 75.868965][ T5222] FAT-fs (loop4): Directory bread(block 64) failed [ 75.870748][ T5222] FAT-fs (loop4): Directory bread(block 65) failed [ 75.878355][ T5230] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 75.888326][ T5222] FAT-fs (loop4): Directory bread(block 66) failed [ 75.889734][ T5222] FAT-fs (loop4): Directory bread(block 67) failed [ 75.891241][ T5222] FAT-fs (loop4): Directory bread(block 68) failed [ 75.898423][ T5222] FAT-fs (loop4): Directory bread(block 69) failed [ 75.899614][ T5235] loop0: detected capacity change from 0 to 512 [ 75.899844][ T5222] FAT-fs (loop4): Directory bread(block 70) failed [ 75.916085][ T5222] FAT-fs (loop4): Directory bread(block 71) failed [ 75.917521][ T5222] FAT-fs (loop4): Directory bread(block 72) failed [ 75.933550][ T5222] FAT-fs (loop4): Directory bread(block 73) failed [ 76.034626][ T5235] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.037167][ T5235] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.039872][ T5235] __quota_error: 197 callbacks suppressed [ 76.039885][ T5235] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 76.045468][ T5235] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 76.051192][ T5235] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.461: Failed to acquire dquot type 1 [ 76.064206][ T5235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.461: bg 0: block 40: padding at end of block bitmap is not set [ 76.071343][ T5235] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 76.078525][ T5235] EXT4-fs (loop0): 1 truncate cleaned up [ 76.088447][ T5235] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.383286][ T5258] loop0: detected capacity change from 0 to 512 [ 76.427189][ T5258] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 76.588327][ T5271] loop1: detected capacity change from 0 to 512 [ 76.624588][ T26] audit: type=1326 audit(76.602:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.649906][ T26] audit: type=1326 audit(76.622:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.665048][ T26] audit: type=1326 audit(76.632:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.680310][ T26] audit: type=1326 audit(76.632:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.696960][ T26] audit: type=1326 audit(76.632:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.741950][ T5278] loop0: detected capacity change from 0 to 2048 [ 76.818446][ T26] audit: type=1326 audit(76.632:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.829428][ T26] audit: type=1326 audit(76.632:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.864597][ T26] audit: type=1326 audit(76.632:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 76.893225][ T5271] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000004000,minixdf,,errors=continue. Quota mode: writeback. [ 77.677626][ T5278] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,,errors=continue. Quota mode: none. [ 77.813266][ T5292] tc_dump_action: action bad kind [ 77.950400][ T5296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.481'. [ 78.001655][ T5300] loop0: detected capacity change from 0 to 512 [ 78.014503][ T5304] loop3: detected capacity change from 0 to 512 [ 78.028964][ T5296] netlink: 'syz.4.481': attribute type 8 has an invalid length. [ 78.040705][ T5304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.041748][ T5300] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.075365][ T5300] EXT4-fs (loop0): 1 truncate cleaned up [ 78.076643][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.100871][ T5304] EXT4-fs (loop3): 1 orphan inode deleted [ 78.102262][ T5304] EXT4-fs (loop3): 1 truncate cleaned up [ 78.103462][ T5304] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 78.118756][ T5311] tipc: Started in network mode [ 78.159750][ T5311] tipc: Node identity b677f918eb06, cluster identity 4711 [ 78.190742][ T5311] tipc: Enabled bearer , priority 7 [ 78.214966][ T5312] ªªªªªª: renamed from syzkaller0 [ 78.235879][ T5304] EXT4-fs (loop3): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 78.273909][ T5312] tipc: Disabling bearer [ 78.370485][ T5316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.465714][ T5323] loop0: detected capacity change from 0 to 2048 [ 78.505115][ T5323] Alternate GPT is invalid, using primary GPT. [ 78.506541][ T5323] loop0: p1 p2 p3 [ 78.540758][ T5316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.626894][ T5316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.630995][ T5334] loop2: detected capacity change from 0 to 128 [ 78.726327][ T5316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.978976][ T5316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.986014][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 79.005886][ T5044] udevd[5044]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 79.014609][ T5316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029656][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 79.053234][ T5316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.077869][ T5316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.094374][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 79.114676][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 79.138233][ T5044] udevd[5044]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 79.139006][ T5358] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.510' sets config #1 [ 79.324846][ T5375] x_tables: duplicate underflow at hook 2 [ 79.335462][ T5377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 79.582574][ T5405] raw_sendmsg: syz.2.528 forgot to set AF_INET. Fix it! [ 79.584205][ T5404] loop1: detected capacity change from 0 to 512 [ 79.649428][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 79.750192][ T5414] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 79.858174][ T5424] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 80.381540][ T5455] loop4: detected capacity change from 0 to 128 [ 81.344495][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.429146][ T26] kauditd_printk_skb: 193 callbacks suppressed [ 81.429159][ T26] audit: type=1326 audit(81.402:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.443943][ T26] audit: type=1326 audit(81.402:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.448377][ T26] audit: type=1326 audit(81.402:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff84420904 code=0x7ffc0000 [ 81.475976][ T26] audit: type=1326 audit(81.402:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff84420904 code=0x7ffc0000 [ 81.505770][ T26] audit: type=1326 audit(81.402:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.521846][ T26] audit: type=1326 audit(81.402:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.529697][ T5465] device syzkaller0 entered promiscuous mode [ 81.538913][ T26] audit: type=1326 audit(81.412:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.565269][ T26] audit: type=1326 audit(81.412:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.572454][ T26] audit: type=1326 audit(81.412:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 81.577600][ T26] audit: type=1326 audit(81.412:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=61 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 83.121701][ C0] sched: RT throttling activated [ 83.411374][ T5496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.497012][ T5500] loop4: detected capacity change from 0 to 256 [ 83.533084][ T5496] loop0: detected capacity change from 0 to 2048 [ 83.598930][ T5500] FAT-fs (loop4): Directory bread(block 64) failed [ 83.600691][ T5500] FAT-fs (loop4): Directory bread(block 65) failed [ 83.617669][ T5500] FAT-fs (loop4): Directory bread(block 66) failed [ 83.624186][ T5496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.631492][ T5500] FAT-fs (loop4): Directory bread(block 67) failed [ 83.640128][ T5500] FAT-fs (loop4): Directory bread(block 68) failed [ 83.651266][ T5500] FAT-fs (loop4): Directory bread(block 69) failed [ 83.660114][ T5500] FAT-fs (loop4): Directory bread(block 70) failed [ 83.668349][ T5500] FAT-fs (loop4): Directory bread(block 71) failed [ 83.678252][ T5500] FAT-fs (loop4): Directory bread(block 72) failed [ 83.680003][ T5500] FAT-fs (loop4): Directory bread(block 73) failed [ 83.709542][ T5506] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 84.304909][ T5204] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.310577][ T5204] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.324333][ T5204] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.324333][ T5204] [ 84.355365][ T5204] EXT4-fs (loop0): Total free blocks count 0 [ 84.356772][ T5204] EXT4-fs (loop0): Free/Dirty block details [ 84.358004][ T5204] EXT4-fs (loop0): free_blocks=2415919104 [ 84.359298][ T5204] EXT4-fs (loop0): dirty_blocks=2800 [ 84.360450][ T5204] EXT4-fs (loop0): Block reservation details [ 84.361645][ T5204] EXT4-fs (loop0): i_reserved_data_blocks=175 [ 84.410934][ T5204] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 84.434738][ T5512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.454928][ T5204] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.454928][ T5204] [ 84.467929][ T5513] netlink: 152 bytes leftover after parsing attributes in process `syz.2.573'. [ 84.491719][ T5516] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1109 [ 84.496348][ T5513] tc_dump_action: action bad kind [ 84.570121][ T5512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.665854][ T5512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.733415][ T5512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.934927][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 85.927960][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 85.930361][ T25] usb usb5-port1: attempt power cycle [ 85.981366][ T5512] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.044559][ T5512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.058208][ T5512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.067193][ T5512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.291568][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 86.329247][ T5568] loop4: detected capacity change from 0 to 128 [ 86.531050][ T5576] loop2: detected capacity change from 0 to 256 [ 86.608133][ T25] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 86.610201][ T25] usb usb5-port1: unable to enumerate USB device [ 86.969781][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 86.969794][ T26] audit: type=1326 audit(86.942:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 86.993120][ T26] audit: type=1326 audit(86.972:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 86.999881][ T26] audit: type=1326 audit(86.972:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.038724][ T26] audit: type=1326 audit(86.972:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.051900][ T26] audit: type=1326 audit(86.972:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.056633][ T26] audit: type=1326 audit(86.972:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.096816][ T26] audit: type=1326 audit(86.972:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.122041][ T26] audit: type=1326 audit(86.972:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.134637][ T26] audit: type=1326 audit(86.972:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.169919][ T26] audit: type=1326 audit(86.972:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 87.244436][ T5614] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 87.299839][ T5614] batman_adv: batadv0: Adding interface: team0 [ 87.301166][ T5614] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.362773][ T5614] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 87.412622][ T5621] netlink: 'syz.3.621': attribute type 3 has an invalid length. [ 88.129730][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.155222][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.157063][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.174264][ T5653] device bridge_slave_0 left promiscuous mode [ 88.175761][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.311642][ T5653] device bridge_slave_1 left promiscuous mode [ 88.316640][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.358120][ T5653] bond0: (slave bond_slave_0): Releasing backup interface [ 88.458126][ T5653] bond0: (slave bond_slave_1): Releasing backup interface [ 88.516037][ T5681] loop1: detected capacity change from 0 to 128 [ 88.536928][ T5653] team0: Port device team_slave_0 removed [ 88.544785][ T5653] team0: Port device team_slave_1 removed [ 88.547731][ T5653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.549626][ T5653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.559293][ T5653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.561109][ T5653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.577116][ T5653] device vlan0 left promiscuous mode [ 88.578693][ T5653] bridge0: port 3(vlan0) entered disabled state [ 88.647143][ T5683] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 88.678975][ T5683] batman_adv: batadv0: Adding interface: team0 [ 88.708291][ T5683] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.724130][ T5683] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 89.094117][ T5702] loop4: detected capacity change from 0 to 1024 [ 89.150279][ T5710] loop3: detected capacity change from 0 to 512 [ 89.228332][ T5702] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000005,dioread_lock,,errors=continue. Quota mode: none. [ 89.290028][ T5702] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2746: inode #15: comm syz.4.658: corrupted in-inode xattr [ 89.303044][ T5710] EXT4-fs (loop3): Ignoring removed orlov option [ 89.359151][ T5710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 89.382148][ T5710] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.661: bg 0: block 248: padding at end of block bitmap is not set [ 89.394863][ T5710] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.661: Failed to acquire dquot type 1 [ 89.419519][ T5710] EXT4-fs (loop3): 1 truncate cleaned up [ 89.470980][ T5710] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 89.561936][ T5710] EXT4-fs (loop3): Ignoring removed orlov option [ 89.563522][ T5710] EXT4-fs error (device loop3): ext4_remount:5855: comm syz.3.661: Abort forced by user [ 90.141888][ T5744] tipc: Enabling of bearer rejected, failed to enable media [ 90.217452][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 90.285022][ T5759] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.319810][ T5762] bond0: ARP monitoring cannot be used with MII monitoring [ 90.335327][ T5763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.354166][ T5762] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 90.384244][ T5762] bond0: (slave netdevsim0): no link monitoring support [ 90.387571][ T5762] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 90.405511][ T5762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.750105][ T5794] loop0: detected capacity change from 0 to 512 [ 90.859134][ T5794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.693: inode #1: comm syz.0.693: iget: illegal inode # [ 90.879828][ T5794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.693: error while reading EA inode 1 err=-117 [ 90.889676][ T5794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.693: inode #1: comm syz.0.693: iget: illegal inode # [ 90.901348][ T5807] loop4: detected capacity change from 0 to 128 [ 90.904258][ T5794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.693: error while reading EA inode 1 err=-117 [ 90.908676][ T5794] EXT4-fs (loop0): 1 orphan inode deleted [ 90.911376][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 90.971988][ T5807] EXT4-fs (loop4): Ignoring removed nobh option [ 91.026942][ T5807] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 91.114888][ T5816] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.116938][ T5816] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.522633][ T5834] loop4: detected capacity change from 0 to 1024 [ 91.535438][ T5834] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 91.555819][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noquota,barrier=0x0000000000000000,jqfmt=vfsv1,block_validity,mblk_io_submit,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 91.804517][ T5844] loop0: detected capacity change from 0 to 128 [ 91.922910][ T5848] xt_connbytes: Forcing CT accounting to be enabled [ 91.924579][ T5848] Cannot find add_set index 0 as target [ 92.043162][ T5853] xt_hashlimit: max too large, truncated to 1048576 [ 92.608978][ T5868] loop3: detected capacity change from 0 to 1024 [ 92.699438][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.169048][ T5889] loop4: detected capacity change from 0 to 736 [ 93.859954][ T26] kauditd_printk_skb: 78 callbacks suppressed [ 93.859966][ T26] audit: type=1326 audit(93.832:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 93.881942][ T26] audit: type=1326 audit(93.852:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 93.888637][ T26] audit: type=1326 audit(93.852:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 93.965677][ T26] audit: type=1326 audit(93.852:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 93.996087][ T5923] loop2: detected capacity change from 0 to 128 [ 94.001860][ T26] audit: type=1326 audit(93.852:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 94.022213][ T26] audit: type=1326 audit(93.852:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 94.040294][ T26] audit: type=1326 audit(93.852:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 94.057839][ T26] audit: type=1326 audit(93.852:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 94.076503][ T5929] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.078609][ T5929] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 94.085537][ T26] audit: type=1326 audit(93.852:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 94.100306][ T26] audit: type=1326 audit(93.852:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 94.174875][ T5936] loop4: detected capacity change from 0 to 128 [ 94.294426][ T5936] attempt to access beyond end of device [ 94.294426][ T5936] loop4: rw=2051, want=1041, limit=128 [ 94.445540][ T5944] loop1: detected capacity change from 0 to 1024 [ 94.535850][ T5944] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 94.617804][ T5952] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.753: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 94.630625][ T5952] EXT4-fs (loop1): Remounting filesystem read-only [ 95.104885][ T5973] netlink: 'syz.4.762': attribute type 39 has an invalid length. [ 95.140609][ T5975] loop0: detected capacity change from 0 to 128 [ 95.505119][ T5987] 9pnet: Could not find request transport: 0xffffffffffffffff [ 95.695572][ T5997] loop2: detected capacity change from 0 to 128 [ 96.444847][ T6022] loop0: detected capacity change from 0 to 1024 [ 96.494950][ T6022] EXT4-fs (loop0): Ignoring removed oldalloc option [ 96.509844][ T6022] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 96.706201][ T6029] loop1: detected capacity change from 0 to 1024 [ 96.715656][ T6029] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 96.741341][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,stripe=0x0000000000000006,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 97.075856][ T6039] loop1: detected capacity change from 0 to 512 [ 97.149651][ T6039] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 97.151531][ T6039] System zones: 0-2, 18-18, 34-34 [ 97.269497][ T6039] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.790: bg 0: block 248: padding at end of block bitmap is not set [ 97.278984][ T6042] loop4: detected capacity change from 0 to 128 [ 97.303692][ T6039] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.790: Failed to acquire dquot type 1 [ 97.394303][ T6042] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 97.456580][ T6039] EXT4-fs (loop1): 1 truncate cleaned up [ 97.460268][ T6039] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 97.563560][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.793'. [ 97.586883][ T6037] attempt to access beyond end of device [ 97.586883][ T6037] loop4: rw=3, want=6952, limit=128 [ 97.599599][ T6037] attempt to access beyond end of device [ 97.599599][ T6037] loop4: rw=2051, want=7894, limit=128 [ 97.805250][ T6056] loop4: detected capacity change from 0 to 512 [ 97.873049][ T6056] EXT4-fs (loop4): too many log groups per flexible block group [ 97.874949][ T6056] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 97.876489][ T6056] EXT4-fs (loop4): mount failed [ 98.011290][ T6065] tipc: Started in network mode [ 98.021575][ T6066] loop2: detected capacity change from 0 to 2048 [ 98.021801][ T6065] tipc: Node identity 36baaef6dbb, cluster identity 4711 [ 98.045017][ T6065] tipc: Enabled bearer , priority 7 [ 98.065653][ T6066] loop2: p2 < > [ 98.067036][ T6065] ªªªªªª: renamed from syzkaller0 [ 98.116934][ T3642] loop2: p2 < > [ 98.124063][ T6065] tipc: Disabling bearer [ 98.200180][ T6072] loop4: detected capacity change from 0 to 512 [ 98.264362][ T6076] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 98.275902][ T6077] loop2: detected capacity change from 0 to 128 [ 98.327167][ T6076] team0: Port device netdevsim0 added [ 98.343952][ T6081] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 98.374115][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 98.388398][ T6081] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 98.431097][ T6083] loop1: detected capacity change from 0 to 1024 [ 98.433612][ T6072] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.801: inode #1: comm syz.4.801: iget: illegal inode # [ 98.438015][ T6072] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.801: error while reading EA inode 1 err=-117 [ 98.442857][ T6072] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.801: inode #1: comm syz.4.801: iget: illegal inode # [ 98.450719][ T6072] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.801: error while reading EA inode 1 err=-117 [ 98.461916][ T6072] EXT4-fs (loop4): 1 orphan inode deleted [ 98.463113][ T6072] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 98.507040][ T6081] team0: Failed to send options change via netlink (err -105) [ 98.508820][ T6081] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 98.539175][ T6081] team0: Port device netdevsim0 removed [ 98.553875][ T6083] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000005,dioread_lock,,errors=continue. Quota mode: none. [ 98.569802][ T6081] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.818740][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 98.943126][ T6099] hub 6-0:1.0: USB hub found [ 98.944659][ T6099] hub 6-0:1.0: 8 ports detected [ 99.125265][ T6110] loop0: detected capacity change from 0 to 512 [ 99.181527][ T6110] EXT4-fs (loop0): Ignoring removed oldalloc option [ 99.215878][ T6110] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.816: Parent and EA inode have the same ino 15 [ 99.224541][ T6110] EXT4-fs (loop0): Remounting filesystem read-only [ 99.242498][ T6110] EXT4-fs (loop0): 1 orphan inode deleted [ 99.247326][ T6110] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,max_dir_size_kb=0x00000000000001ff,block_validity,bsdgroups,oldalloc,resuid=0x0000000000000000,. Quota mode: none. [ 99.378725][ T6123] tipc: New replicast peer: 100.1.1.1 [ 99.380222][ T6123] tipc: Enabled bearer , priority 10 [ 99.393278][ T6126] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 99.398239][ T6126] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 99.667397][ T6144] loop0: detected capacity change from 0 to 512 [ 99.732243][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.732778][ T6152] loop2: detected capacity change from 0 to 512 [ 99.756889][ T6144] EXT4-fs warning (device loop0): ext4_group_extend:1823: can't shrink FS - resize aborted [ 99.789076][ T6158] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 99.799911][ T6158] bond0: (slave netdevsim0): Releasing backup interface [ 99.831553][ T26] kauditd_printk_skb: 321 callbacks suppressed [ 99.831565][ T26] audit: type=1326 audit(99.802:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.837771][ T26] audit: type=1326 audit(99.802:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.849296][ T26] audit: type=1326 audit(99.802:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.856720][ T26] audit: type=1326 audit(99.802:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.862721][ T6158] team0: Port device netdevsim0 added [ 99.864370][ T26] audit: type=1326 audit(99.802:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.869057][ T26] audit: type=1326 audit(99.812:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=143 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.870348][ T6162] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 99.888737][ T6152] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.889346][ T26] audit: type=1326 audit(99.812:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.907539][ T6152] EXT4-fs (loop2): 1 truncate cleaned up [ 99.908823][ T6152] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.911806][ T26] audit: type=1326 audit(99.812:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 99.922264][ T6162] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 99.978307][ T6162] team0: Failed to send options change via netlink (err -105) [ 99.980249][ T6162] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.004018][ T6162] team0: Port device netdevsim0 removed [ 100.005538][ T6162] bond0: (slave netdevsim0): no link monitoring support [ 100.008777][ T6162] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 100.014868][ T6162] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.091237][ T6171] siw: device registration error -23 [ 100.122259][ T6175] loop3: detected capacity change from 0 to 128 [ 100.220281][ T6179] xt_CT: No such helper "snmp" [ 100.459384][ T26] audit: type=1326 audit(100.432:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 100.480898][ T26] audit: type=1326 audit(100.452:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 100.501955][ T4070] tipc: Node number set to 3976900342 [ 100.599058][ T6199] netlink: 'syz.4.850': attribute type 10 has an invalid length. [ 100.623196][ T6201] loop0: detected capacity change from 0 to 512 [ 100.629551][ T6199] team0: Port device netdevsim0 added [ 100.640743][ T6204] netlink: 'syz.4.850': attribute type 10 has an invalid length. [ 100.643367][ T6204] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.664851][ T6204] team0: Failed to send options change via netlink (err -105) [ 100.666639][ T6204] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.669353][ T6204] team0: Port device netdevsim0 removed [ 100.674186][ T6204] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.772432][ T6208] tipc: Enabled bearer , priority 7 [ 100.779332][ T6208] ªªªªªª: renamed from syzkaller0 [ 100.807596][ T6201] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.810405][ T6201] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.851: bg 0: block 248: padding at end of block bitmap is not set [ 100.824028][ T6208] tipc: Disabling bearer [ 100.840626][ T6201] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.851: Failed to acquire dquot type 1 [ 100.857892][ T6201] EXT4-fs (loop0): 1 truncate cleaned up [ 100.911628][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 101.094994][ T6223] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.252380][ T6223] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.336878][ T6223] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.400728][ T6223] bond0: (slave netdevsim0): Releasing backup interface [ 101.444316][ T6223] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.445339][ T6245] loop3: detected capacity change from 0 to 512 [ 101.453148][ T6245] EXT4-fs (loop3): Unrecognized mount option "journal_ioprio=0x0000000000000000.nouid32" or missing value [ 101.524255][ T6247] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.608751][ T6223] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.615637][ T6223] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.622760][ T6223] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.629128][ T6223] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.819721][ T6261] loop3: detected capacity change from 0 to 512 [ 101.830300][ T6266] loop4: detected capacity change from 0 to 128 [ 101.904870][ T6261] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 101.907518][ T6261] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.917367][ T6261] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #16: comm syz.3.876: iget: immutable or append flags not allowed on symlinks [ 101.942041][ T6261] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.876: couldn't read orphan inode 16 (err -117) [ 101.947544][ T6261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.446295][ T6280] loop3: detected capacity change from 0 to 4096 [ 102.505573][ T6280] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.658837][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.660694][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.690843][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.700971][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.709856][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.712232][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.713856][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.715413][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.716992][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.718584][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.751841][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.759533][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.761214][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.774346][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.774880][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 102.777854][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.779437][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.780934][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.784762][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 102.810217][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.814001][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.822399][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.824014][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.825579][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.832949][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.834694][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.836185][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.851812][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.853518][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.855264][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.856722][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.867910][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.869641][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.871304][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.873067][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.874651][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.876175][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.877755][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.879305][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.901262][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.906393][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.908020][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.909505][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.911111][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.937041][ T4067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.947427][ T4067] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.416008][ T6341] loop3: detected capacity change from 0 to 512 [ 103.458539][ T6341] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.477395][ T6346] sctp: [Deprecated]: syz.4.907 (pid 6346) Use of int in max_burst socket option deprecated. [ 103.477395][ T6346] Use struct sctp_assoc_value instead [ 103.502878][ T6341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.625060][ T6351] loop4: detected capacity change from 0 to 512 [ 103.660838][ T6351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.663061][ T6351] System zones: 0-2, 18-18, 34-34 [ 103.666579][ T6351] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.909: bg 0: block 248: padding at end of block bitmap is not set [ 103.695116][ T6351] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.909: Failed to acquire dquot type 1 [ 103.726535][ T6351] EXT4-fs (loop4): 1 truncate cleaned up [ 103.735106][ T6351] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 104.074793][ T6374] IPv4: Oversized IP packet from 127.202.26.0 [ 104.155366][ T6378] loop3: detected capacity change from 0 to 128 [ 104.751591][ T6397] device pim6reg1 entered promiscuous mode [ 104.927443][ T6401] netlink: 'syz.4.927': attribute type 21 has an invalid length. [ 104.929395][ T6401] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 104.941230][ T6401] netlink: 144 bytes leftover after parsing attributes in process `syz.4.927'. [ 105.143725][ T6411] loop1: detected capacity change from 0 to 512 [ 105.158800][ T6412] loop3: detected capacity change from 0 to 1764 [ 105.167585][ T6414] loop4: detected capacity change from 0 to 512 [ 105.216732][ T6411] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value [ 105.288839][ T6414] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.294126][ T6414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.931: bg 0: block 248: padding at end of block bitmap is not set [ 105.299293][ T6414] __quota_error: 129 callbacks suppressed [ 105.299307][ T6414] Quota error (device loop4): write_blk: dquota write failed [ 105.315898][ T6414] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 105.318072][ T6414] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.931: Failed to acquire dquot type 1 [ 105.323112][ T6414] EXT4-fs (loop4): 1 truncate cleaned up [ 105.324948][ T6414] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 105.471012][ T6423] netlink: 9 bytes leftover after parsing attributes in process `syz.3.936'. [ 105.481849][ T6423] device gretap0 entered promiscuous mode [ 105.571603][ T6429] udc-core: couldn't find an available UDC or it's busy [ 105.573706][ T6429] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.590790][ T6425] loop4: detected capacity change from 0 to 512 [ 105.648534][ T6425] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 105.650869][ T6425] EXT4-fs (loop4): inline encryption not supported [ 105.652512][ T6425] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.683552][ T6425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.933: bg 0: block 64: padding at end of block bitmap is not set [ 105.690115][ T6425] EXT4-fs (loop4): Remounting filesystem read-only [ 105.694034][ T6425] Quota error (device loop4): write_blk: dquota write failed [ 105.696987][ T6425] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 105.707712][ T6425] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.933: Failed to acquire dquot type 0 [ 105.712941][ T6425] EXT4-fs (loop4): Remounting filesystem read-only [ 105.717044][ T6425] EXT4-fs (loop4): 1 truncate cleaned up [ 105.717652][ T6438] loop0: detected capacity change from 0 to 128 [ 105.718494][ T6425] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,delalloc,jqfmt=vfsv1,inlinecrypt,errors=remount-ro,grpquota,resgid=0x0000000000000000,grpquota,. Quota mode: writeback. [ 106.178052][ T6464] usb usb4: usbfs: process 6464 (syz.3.943) did not claim interface 0 before use [ 106.349785][ T6478] loop4: detected capacity change from 0 to 512 [ 106.439109][ T6478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 106.444511][ T6478] EXT4-fs (loop4): failed to initialize system zone (-117) [ 106.448660][ T6478] EXT4-fs (loop4): mount failed [ 106.656975][ T6488] device syzkaller0 entered promiscuous mode [ 107.170588][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 107.255619][ T6523] loop1: detected capacity change from 0 to 128 [ 107.317251][ T6525] loop0: detected capacity change from 0 to 512 [ 107.416063][ T6525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.963: inode #1: comm syz.0.963: iget: illegal inode # [ 107.419720][ T6525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.963: error while reading EA inode 1 err=-117 [ 107.461263][ T6525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.963: inode #1: comm syz.0.963: iget: illegal inode # [ 107.473565][ T6525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.963: error while reading EA inode 1 err=-117 [ 107.491545][ T6525] EXT4-fs (loop0): 1 orphan inode deleted [ 107.494453][ T6525] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 107.821305][ T6549] netlink: 'syz.2.971': attribute type 10 has an invalid length. [ 107.830409][ T6549] netlink: 'syz.2.971': attribute type 10 has an invalid length. [ 107.848908][ T6550] netlink: 196 bytes leftover after parsing attributes in process `syz.0.972'. [ 108.042058][ T26] audit: type=1326 audit(108.012:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 108.046783][ T26] audit: type=1326 audit(108.012:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 108.051568][ T26] audit: type=1326 audit(108.012:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 108.368913][ T6579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.370699][ T6579] IPv6: NLM_F_CREATE should be set when creating new route [ 108.726471][ T26] audit: type=1326 audit(108.692:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 108.733464][ T26] audit: type=1326 audit(108.692:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 108.738361][ T26] audit: type=1326 audit(108.712:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 108.898939][ T6602] loop0: detected capacity change from 0 to 128 [ 109.241511][ T6620] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1001'. [ 109.399092][ T6629] Invalid ELF header magic: != ELF [ 109.489342][ T6635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1008'. [ 109.900286][ T6658] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.929117][ T6658] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 110.034246][ T6663] loop4: detected capacity change from 0 to 1024 [ 110.208438][ T6663] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,errors=remount-ro,. Quota mode: none. [ 111.170869][ T6673] loop3: detected capacity change from 0 to 512 [ 111.289888][ T6673] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.297358][ T6673] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 111.318750][ T6673] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 111.320599][ T6673] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.1020: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.357442][ T6673] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1020: couldn't read orphan inode 13 (err -117) [ 111.371582][ T6673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.484708][ T6690] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 111.518826][ T6690] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 111.645994][ T6694] loop0: detected capacity change from 0 to 512 [ 111.707596][ T6696] loop4: detected capacity change from 0 to 2048 [ 111.903061][ T6694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1026: inode #1: comm syz.0.1026: iget: illegal inode # [ 111.927382][ T6694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1026: error while reading EA inode 1 err=-117 [ 111.937846][ T6694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1026: inode #1: comm syz.0.1026: iget: illegal inode # [ 112.102139][ T6705] ip6t_rpfilter: unknown options [ 112.278950][ T6694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1026: error while reading EA inode 1 err=-117 [ 112.557572][ T6696] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.595054][ T6694] EXT4-fs (loop0): 1 orphan inode deleted [ 112.596427][ T6694] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 112.751971][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 112.754197][ T6713] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 112.756163][ T6713] netdevsim netdevsim3 netdevsim0: Failed to get key data for SA table [ 112.804420][ T1349] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.819541][ T1349] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 112.835299][ T1349] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.835299][ T1349] [ 112.837574][ T1349] EXT4-fs (loop4): Total free blocks count 0 [ 112.838869][ T1349] EXT4-fs (loop4): Free/Dirty block details [ 112.851978][ T6715] loop3: detected capacity change from 0 to 128 [ 112.871807][ T1349] EXT4-fs (loop4): free_blocks=2415919104 [ 112.872993][ T1349] EXT4-fs (loop4): dirty_blocks=16 [ 112.874164][ T1349] EXT4-fs (loop4): Block reservation details [ 112.875442][ T1349] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 112.899799][ T6718] loop2: detected capacity change from 0 to 1024 [ 112.969991][ T6718] EXT4-fs (loop2): Ignoring removed oldalloc option [ 113.042359][ T6718] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 113.299877][ T6739] netlink: 'syz.0.1041': attribute type 153 has an invalid length. [ 113.325265][ T6739] rdma_rxe: rxe_register_device failed with error -23 [ 113.346145][ T6739] rdma_rxe: failed to add geneve0 [ 113.844231][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 113.844244][ T26] audit: type=1326 audit(113.822:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 113.852607][ T26] audit: type=1326 audit(113.822:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 113.878127][ T6757] device pim6reg1 entered promiscuous mode [ 113.883972][ T26] audit: type=1326 audit(113.822:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 113.913347][ T26] audit: type=1326 audit(113.842:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 113.956402][ T26] audit: type=1326 audit(113.842:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 114.004866][ T26] audit: type=1326 audit(113.842:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 114.010000][ T26] audit: type=1326 audit(113.842:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 114.028701][ T26] audit: type=1326 audit(113.842:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 114.046397][ T26] audit: type=1326 audit(113.852:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 114.072489][ T26] audit: type=1326 audit(113.852:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.1047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 114.166653][ T6773] loop1: detected capacity change from 0 to 1024 [ 114.177504][ T6773] EXT4-fs (loop1): Ignoring removed oldalloc option [ 114.230213][ T6773] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 114.451285][ T6791] capability: warning: `syz.2.1056' uses 32-bit capabilities (legacy support in use) [ 115.127688][ T6826] loop1: detected capacity change from 0 to 1024 [ 115.153850][ T6826] EXT4-fs (loop1): Ignoring removed oldalloc option [ 115.194880][ T6826] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 115.251327][ T6832] loop4: detected capacity change from 0 to 128 [ 115.610823][ T6844] loop3: detected capacity change from 0 to 512 [ 115.663774][ T6844] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.668915][ T6844] EXT4-fs (loop3): mount failed [ 116.471259][ T6908] batman_adv: batadv0: Removing interface: team0 [ 116.497909][ T6908] team0 (unregistering): Port device team_slave_0 removed [ 116.531356][ T6908] team0 (unregistering): Port device team_slave_1 removed [ 116.626876][ T6918] loop3: detected capacity change from 0 to 128 [ 116.631530][ T6916] netlink: 'syz.1.1100': attribute type 10 has an invalid length. [ 116.686430][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.690693][ T6916] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.828163][ T6926] netlink: 'syz.1.1103': attribute type 21 has an invalid length. [ 117.117874][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'. [ 117.914719][ T6993] loop1: detected capacity change from 0 to 128 [ 117.958345][ T6993] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.151601][ T7017] loop2: detected capacity change from 0 to 128 [ 118.166509][ T7014] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.601604][ T7035] loop4: detected capacity change from 0 to 512 [ 119.168441][ T7035] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 119.251314][ T7035] EXT4-fs (loop4): invalid journal inode [ 119.252688][ T7035] EXT4-fs (loop4): can't get journal size [ 119.316830][ T7035] EXT4-fs (loop4): 1 truncate cleaned up [ 119.318113][ T7035] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 119.360858][ T7041] loop3: detected capacity change from 0 to 512 [ 119.518918][ T7014] loop1: detected capacity change from 0 to 164 [ 119.664126][ T7041] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1144: bg 0: block 248: padding at end of block bitmap is not set [ 119.682712][ T7041] __quota_error: 101 callbacks suppressed [ 119.682726][ T7041] Quota error (device loop3): write_blk: dquota write failed [ 119.685690][ T7041] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 119.721978][ T7041] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1144: Failed to acquire dquot type 1 [ 119.762530][ T7041] EXT4-fs (loop3): 1 truncate cleaned up [ 119.763878][ T7041] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,nodelalloc,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 119.926858][ T7067] loop4: detected capacity change from 0 to 512 [ 119.946943][ T7066] loop3: detected capacity change from 0 to 512 [ 120.006194][ T7066] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #17: comm syz.3.1152: iget: bogus i_mode (0) [ 120.018868][ T7066] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1152: couldn't read orphan inode 17 (err -117) [ 120.059702][ T7066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.106200][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000001000,minixdf,,errors=continue. Quota mode: writeback. [ 120.123161][ T7066] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1152: bg 0: block 7: invalid block bitmap [ 120.557703][ T7099] loop0: detected capacity change from 0 to 8192 [ 121.400826][ T7099] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.645186][ T7120] tipc: New replicast peer: 255.255.255.255 [ 121.655367][ T7120] tipc: Enabled bearer , priority 10 [ 121.667520][ T7124] loop3: detected capacity change from 0 to 128 [ 122.783691][ T4068] tipc: Node number set to 1567750424 [ 123.268953][ T7164] loop2: detected capacity change from 0 to 128 [ 123.348674][ T7164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.381140][ T26] audit: type=1326 audit(123.352:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.404513][ T26] audit: type=1326 audit(123.382:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.416813][ T26] audit: type=1326 audit(123.392:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.449561][ T26] audit: type=1326 audit(123.392:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.477614][ T26] audit: type=1326 audit(123.392:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.1190" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.760347][ T26] audit: type=1326 audit(123.732:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.770479][ T26] audit: type=1326 audit(123.732:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.778475][ T26] audit: type=1326 audit(123.732:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 123.931333][ T7207] loop3: detected capacity change from 0 to 128 [ 123.964368][ T7211] loop2: detected capacity change from 0 to 256 [ 124.108991][ T7211] FAT-fs (loop2): Directory bread(block 64) failed [ 124.113026][ T7211] FAT-fs (loop2): Directory bread(block 65) failed [ 124.116472][ T7211] FAT-fs (loop2): Directory bread(block 66) failed [ 124.117877][ T7211] FAT-fs (loop2): Directory bread(block 67) failed [ 124.119876][ T7211] FAT-fs (loop2): Directory bread(block 68) failed [ 124.121298][ T7211] FAT-fs (loop2): Directory bread(block 69) failed [ 124.122880][ T7211] FAT-fs (loop2): Directory bread(block 70) failed [ 124.124306][ T7211] FAT-fs (loop2): Directory bread(block 71) failed [ 124.125828][ T7211] FAT-fs (loop2): Directory bread(block 72) failed [ 124.127165][ T7211] FAT-fs (loop2): Directory bread(block 73) failed [ 124.151040][ T7211] attempt to access beyond end of device [ 124.151040][ T7211] loop2: rw=0, want=1772, limit=256 [ 124.379385][ T7224] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 124.389121][ T7224] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 124.679663][ T7238] loop0: detected capacity change from 0 to 128 [ 124.719509][ T7241] loop4: detected capacity change from 0 to 512 [ 124.786781][ T7241] __quota_error: 60 callbacks suppressed [ 124.786795][ T7241] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 124.797974][ T7241] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 124.800260][ T7241] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1221: Failed to acquire dquot type 1 [ 124.838365][ T7241] EXT4-fs (loop4): 1 truncate cleaned up [ 124.839714][ T7241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.160609][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 125.603144][ T7281] loop1: detected capacity change from 0 to 128 [ 125.635236][ T7287] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1235'. [ 125.791097][ T7299] Restarting kernel threads ... done. [ 125.969510][ T7298] loop0: detected capacity change from 0 to 8192 [ 126.770602][ T26] audit: type=1326 audit(126.742:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 126.777322][ T26] audit: type=1326 audit(126.742:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 126.796275][ T26] audit: type=1326 audit(126.762:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=272 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 126.813781][ T26] audit: type=1326 audit(126.762:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 126.830005][ T26] audit: type=1326 audit(126.762:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 126.960672][ T26] audit: type=1326 audit(126.922:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 126.966799][ T26] audit: type=1326 audit(126.932:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 126.982025][ T26] audit: type=1326 audit(126.932:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab023368 code=0x7ffc0000 [ 127.002603][ T7336] loop2: detected capacity change from 0 to 128 [ 127.186653][ T7348] loop0: detected capacity change from 0 to 128 [ 127.222070][ T7348] EXT4-fs (loop0): Ignoring removed nobh option [ 127.238818][ T7348] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 127.497744][ T7367] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1261'. [ 128.230689][ T7393] loop3: detected capacity change from 0 to 128 [ 128.256904][ T7398] loop4: detected capacity change from 0 to 1024 [ 128.278530][ T7398] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 128.303701][ T7399] loop1: detected capacity change from 0 to 512 [ 128.480652][ T7398] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 128.511934][ T7399] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.859018][ T7417] loop1: detected capacity change from 0 to 1024 [ 128.905279][ T7417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.429946][ T7433] loop2: detected capacity change from 0 to 512 [ 129.542466][ T7433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.929482][ T7433] EXT4-fs (loop2): 1 truncate cleaned up [ 129.930997][ T7433] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,minixdf,discard,quota,,errors=continue. Quota mode: writeback. [ 130.225271][ T7439] netlink: 'syz.1.1285': attribute type 13 has an invalid length. [ 130.363526][ T7444] loop4: detected capacity change from 0 to 764 [ 130.908705][ T4133] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0 [ 130.910296][ T4133] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0 [ 130.923369][ T4133] hid-generic 0000:0D17:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 131.062876][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.248067][ T7474] loop4: detected capacity change from 0 to 512 [ 131.341977][ T7474] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.1298: corrupted xattr block 95 [ 131.360716][ T7474] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1298: bg 0: block 7: invalid block bitmap [ 131.409867][ T7474] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 131.427973][ T7474] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.1298: corrupted xattr block 95 [ 131.469333][ T7474] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 131.474867][ T7474] EXT4-fs (loop4): 1 orphan inode deleted [ 131.480763][ T7474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.496604][ T7479] loop2: detected capacity change from 0 to 128 [ 131.741110][ T26] kauditd_printk_skb: 90 callbacks suppressed [ 131.741123][ T26] audit: type=1326 audit(131.712:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 131.751754][ T26] audit: type=1326 audit(131.722:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 131.756410][ T26] audit: type=1326 audit(131.722:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=92 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 131.801924][ T26] audit: type=1326 audit(131.722:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 131.806555][ T26] audit: type=1326 audit(131.722:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 132.083377][ T7497] tipc: Started in network mode [ 132.084578][ T7497] tipc: Node identity ac1414aa, cluster identity 4711 [ 132.086442][ T7497] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.088228][ T7497] tipc: Enabled bearer , priority 10 [ 132.222016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.361910][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.501863][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.641837][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.781878][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.921855][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.062041][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.202103][ T4113] tipc: Node number set to 2886997162 [ 133.341884][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.432341][ T26] audit: type=1326 audit(133.412:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 133.479064][ T26] audit: type=1326 audit(133.452:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 133.484707][ T26] audit: type=1326 audit(133.462:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 133.511788][ T26] audit: type=1326 audit(133.462:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb171e368 code=0x7ffc0000 [ 133.612409][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.628162][ T7534] loop1: detected capacity change from 0 to 512 [ 133.711314][ T7537] loop2: detected capacity change from 0 to 128 [ 133.748594][ T7534] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 133.751554][ T7534] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.773651][ T7534] EXT4-fs (loop1): mount failed [ 134.440258][ T7563] loop4: detected capacity change from 0 to 164 [ 134.458878][ T7560] loop1: detected capacity change from 0 to 2048 [ 134.522434][ T7563] Unable to read rock-ridge attributes [ 134.579672][ T7560] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.919631][ T7578] loop4: detected capacity change from 0 to 512 [ 134.954242][ T7578] EXT4-fs (loop4): inline encryption not supported [ 134.988667][ T7578] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 135.025229][ T7578] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.1335: corrupted inode contents [ 135.059616][ T7578] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.1335: mark_inode_dirty error [ 135.084977][ T7578] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.1335: corrupted inode contents [ 135.107070][ T7586] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.1335: corrupted inode contents [ 135.261912][ T7586] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.1335: mark_inode_dirty error [ 135.264974][ T7586] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.1335: corrupted inode contents [ 135.267666][ T7586] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1335: mark_inode_dirty error [ 135.279058][ T7586] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.1335: corrupted inode contents [ 135.316452][ T7586] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.1335: mark_inode_dirty error [ 135.328937][ T7589] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.1335: corrupted inode contents [ 135.796873][ T7608] loop1: detected capacity change from 0 to 1024 [ 135.841925][ T7608] EXT4-fs (loop1): Ignoring removed orlov option [ 135.843269][ T7608] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 135.873683][ T7608] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 135.889358][ T7616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1343'. [ 135.923711][ T7618] loop4: detected capacity change from 0 to 128 [ 136.313082][ T7626] loop1: detected capacity change from 0 to 1024 [ 136.401141][ T7626] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.684312][ T7634] loop1: detected capacity change from 0 to 4096 [ 136.773739][ T7634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.188457][ T7645] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1354'. [ 137.301828][ C1] net_ratelimit: 3 callbacks suppressed [ 137.301843][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.481779][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.483680][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.537115][ T7656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.791393][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 137.791407][ T26] audit: type=1326 audit(2697.767:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 137.798028][ T26] audit: type=1326 audit(2697.777:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 137.832630][ T26] audit: type=1326 audit(2697.777:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 137.843261][ T7651] Falling back ldisc for ttyS3. [ 137.874230][ T7665] loop4: detected capacity change from 0 to 128 [ 137.892404][ T26] audit: type=1326 audit(2697.777:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 137.897284][ T26] audit: type=1326 audit(2697.777:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 137.924476][ T26] audit: type=1326 audit(2697.777:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 137.949173][ T26] audit: type=1326 audit(2697.777:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 138.313904][ T7682] loop3: detected capacity change from 0 to 1024 [ 138.331905][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.377442][ T7682] EXT4-fs (loop3): Ignoring removed orlov option [ 138.378935][ T7682] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 138.452551][ T7682] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 138.503604][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 138.516434][ T26] audit: type=1326 audit(2698.497:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 138.522049][ T26] audit: type=1326 audit(2698.497:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 138.570391][ T26] audit: type=1326 audit(2698.507:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94367368 code=0x7ffc0000 [ 138.616734][ T7694] netlink: 'syz.3.1369': attribute type 3 has an invalid length. [ 139.381834][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.921261][ T7744] loop3: detected capacity change from 0 to 128 [ 140.411995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.907101][ T7769] loop4: detected capacity change from 0 to 512 [ 141.033328][ T7769] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nobarrier,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 141.441605][ T7803] loop0: detected capacity change from 0 to 128 [ 141.461882][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.611311][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 142.491834][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.733602][ T7849] loop1: detected capacity change from 0 to 512 [ 142.788323][ T7849] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 142.798540][ T7849] EXT4-fs (loop1): invalid journal inode [ 142.799842][ T7849] EXT4-fs (loop1): can't get journal size [ 142.831928][ T7849] EXT4-fs (loop1): 1 truncate cleaned up [ 142.833169][ T7849] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 143.121321][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 143.121333][ T26] audit: type=1326 audit(2703.097:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc31b368 code=0x7ffc0000 [ 143.230618][ T7874] loop4: detected capacity change from 0 to 128 [ 143.542017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.735448][ T7879] loop3: detected capacity change from 0 to 512 [ 143.825244][ T7879] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 144.396821][ T7906] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1451'. [ 144.444701][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 144.581978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.870999][ T26] audit: type=1326 audit(2704.847:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 144.888884][ T26] audit: type=1326 audit(2704.857:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 144.942681][ T26] audit: type=1326 audit(2704.887:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 144.957826][ T26] audit: type=1326 audit(2704.887:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 144.970240][ T7939] loop2: detected capacity change from 0 to 128 [ 144.982969][ T26] audit: type=1326 audit(2704.887:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 145.004142][ T26] audit: type=1326 audit(2704.917:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 145.023756][ T26] audit: type=1326 audit(2704.917:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 145.028660][ T26] audit: type=1326 audit(2704.927:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 145.080023][ T26] audit: type=1326 audit(2704.927:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=104 compat=0 ip=0xffff84422368 code=0x7ffc0000 [ 145.259078][ T7961] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.612017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.699822][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 145.703335][ T7974] batman_adv: batadv0: Removing interface: team0 [ 145.707880][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.719092][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.725147][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.730360][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.792244][ T7976] loop0: detected capacity change from 0 to 512 [ 145.836065][ T7976] EXT4-fs (loop0): Ignoring removed oldalloc option [ 145.848463][ T7976] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1480: bad orphan inode 4294967295 [ 145.851495][ T7976] EXT4-fs (loop0): Remounting filesystem read-only [ 145.853660][ T7976] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 146.053947][ T7987] loop0: detected capacity change from 0 to 256 [ 146.065078][ T7984] loop4: detected capacity change from 0 to 512 [ 146.115117][ T7987] FAT-fs (loop0): Directory bread(block 64) failed [ 146.116724][ T7987] FAT-fs (loop0): Directory bread(block 65) failed [ 146.118384][ T7987] FAT-fs (loop0): Directory bread(block 66) failed [ 146.119961][ T7987] FAT-fs (loop0): Directory bread(block 67) failed [ 146.121454][ T7987] FAT-fs (loop0): Directory bread(block 68) failed [ 146.131266][ T7984] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #17: comm syz.4.1484: iget: bogus i_mode (0) [ 146.134351][ T7984] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1484: couldn't read orphan inode 17 (err -117) [ 146.142071][ T7984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.148297][ T7987] FAT-fs (loop0): Directory bread(block 69) failed [ 146.149785][ T7987] FAT-fs (loop0): Directory bread(block 70) failed [ 146.151255][ T7987] FAT-fs (loop0): Directory bread(block 71) failed [ 146.171432][ T7987] FAT-fs (loop0): Directory bread(block 72) failed [ 146.183287][ T7994] loop3: detected capacity change from 0 to 128 [ 146.184880][ T7987] FAT-fs (loop0): Directory bread(block 73) failed [ 146.292850][ T7987] attempt to access beyond end of device [ 146.292850][ T7987] loop0: rw=0, want=1820, limit=256 [ 146.305820][ T7987] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 326) [ 146.307698][ T7987] FAT-fs (loop0): Filesystem has been set read-only [ 146.309152][ T7987] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 326) [ 146.391484][ T8000] loop4: detected capacity change from 0 to 512 [ 146.476471][ T8006] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 146.526877][ T8000] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 146.529311][ T8000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.546928][ T8000] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1490: Failed to acquire dquot type 1 [ 146.584496][ T8000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1490: bg 0: block 40: padding at end of block bitmap is not set [ 146.612387][ T8000] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 146.641336][ T8000] EXT4-fs (loop4): 1 truncate cleaned up [ 146.648139][ T8000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.661989][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.851397][ T8018] loop1: detected capacity change from 0 to 2048 [ 146.924459][ T8018] loop1: p3 < > p4 < > [ 146.925437][ T8018] loop1: partition table partially beyond EOD, truncated [ 146.927143][ T8018] loop1: p3 start 4284289 is beyond EOD, truncated [ 146.983470][ T8020] [ 146.983997][ T8020] ====================================================== [ 146.985522][ T8020] WARNING: possible circular locking dependency detected [ 146.987095][ T8020] 5.15.173-syzkaller #0 Not tainted [ 146.988325][ T8020] ------------------------------------------------------ [ 146.989899][ T8020] syz.4.1496/8020 is trying to acquire lock: [ 146.991222][ T8020] ffff0000c8f14b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 146.993536][ T8020] [ 146.993536][ T8020] but task is already holding lock: [ 146.995169][ T8020] ffff0000c8f14ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 146.997228][ T8020] [ 146.997228][ T8020] which lock already depends on the new lock. [ 146.997228][ T8020] [ 146.999508][ T8020] [ 146.999508][ T8020] the existing dependency chain (in reverse order) is: [ 147.001401][ T8020] [ 147.001401][ T8020] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 147.003097][ T8020] __mutex_lock_common+0x194/0x2154 [ 147.004492][ T8020] mutex_lock_nested+0xa4/0xf8 [ 147.005656][ T8020] hci_dev_do_close+0x64/0x1060 [ 147.006868][ T8020] hci_rfkill_set_block+0xdc/0x1d0 [ 147.008104][ T8020] rfkill_set_block+0x18c/0x37c [ 147.009223][ T8020] rfkill_fop_write+0x594/0x750 [ 147.010382][ T8020] do_iter_write+0x33c/0x66c [ 147.011498][ T8020] do_writev+0x220/0x3ec [ 147.012549][ T8020] __arm64_sys_writev+0x80/0x94 [ 147.013723][ T8020] invoke_syscall+0x98/0x2b8 [ 147.014803][ T8020] el0_svc_common+0x138/0x258 [ 147.015980][ T8020] do_el0_svc+0x58/0x14c [ 147.017045][ T8020] el0_svc+0x7c/0x1f0 [ 147.018036][ T8020] el0t_64_sync_handler+0x84/0xe4 [ 147.019321][ T8020] el0t_64_sync+0x1a0/0x1a4 [ 147.020444][ T8020] [ 147.020444][ T8020] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 147.022342][ T8020] __mutex_lock_common+0x194/0x2154 [ 147.023631][ T8020] mutex_lock_nested+0xa4/0xf8 [ 147.024733][ T8020] rfkill_register+0x44/0x7a4 [ 147.025864][ T8020] hci_register_dev+0x3e0/0x880 [ 147.027019][ T8020] vhci_create_device+0x2c4/0x568 [ 147.028246][ T8020] vhci_write+0x318/0x3b8 [ 147.029293][ T8020] vfs_write+0x884/0xb44 [ 147.030407][ T8020] ksys_write+0x15c/0x26c [ 147.031461][ T8020] __arm64_sys_write+0x7c/0x90 [ 147.032820][ T8020] invoke_syscall+0x98/0x2b8 [ 147.033997][ T8020] el0_svc_common+0x138/0x258 [ 147.035202][ T8020] do_el0_svc+0x58/0x14c [ 147.036281][ T8020] el0_svc+0x7c/0x1f0 [ 147.037259][ T8020] el0t_64_sync_handler+0x84/0xe4 [ 147.038427][ T8020] el0t_64_sync+0x1a0/0x1a4 [ 147.039524][ T8020] [ 147.039524][ T8020] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 147.041366][ T8020] __mutex_lock_common+0x194/0x2154 [ 147.042724][ T8020] mutex_lock_nested+0xa4/0xf8 [ 147.043878][ T8020] vhci_send_frame+0x8c/0x10c [ 147.045046][ T8020] hci_send_frame+0x194/0x2f0 [ 147.046249][ T8020] hci_tx_work+0x9ac/0x16cc [ 147.047437][ T8020] process_one_work+0x790/0x11b8 [ 147.048681][ T8020] worker_thread+0x910/0x1034 [ 147.049807][ T8020] kthread+0x37c/0x45c [ 147.050830][ T8020] ret_from_fork+0x10/0x20 [ 147.052006][ T8020] [ 147.052006][ T8020] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 147.053998][ T8020] __lock_acquire+0x32d4/0x7638 [ 147.055172][ T8020] lock_acquire+0x240/0x77c [ 147.056375][ T8020] __flush_work+0xf8/0x1c0 [ 147.057554][ T8020] flush_work+0x24/0x38 [ 147.058721][ T8020] hci_dev_do_close+0x16c/0x1060 [ 147.059925][ T8020] hci_rfkill_set_block+0xdc/0x1d0 [ 147.061207][ T8020] rfkill_set_block+0x18c/0x37c [ 147.062391][ T8020] rfkill_fop_write+0x594/0x750 [ 147.063574][ T8020] do_iter_write+0x33c/0x66c [ 147.064725][ T8020] do_writev+0x220/0x3ec [ 147.065789][ T8020] __arm64_sys_writev+0x80/0x94 [ 147.066985][ T8020] invoke_syscall+0x98/0x2b8 [ 147.068092][ T8020] el0_svc_common+0x138/0x258 [ 147.069223][ T8020] do_el0_svc+0x58/0x14c [ 147.070286][ T8020] el0_svc+0x7c/0x1f0 [ 147.071297][ T8020] el0t_64_sync_handler+0x84/0xe4 [ 147.072587][ T8020] el0t_64_sync+0x1a0/0x1a4 [ 147.073662][ T8020] [ 147.073662][ T8020] other info that might help us debug this: [ 147.073662][ T8020] [ 147.076090][ T8020] Chain exists of: [ 147.076090][ T8020] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 147.076090][ T8020] [ 147.079388][ T8020] Possible unsafe locking scenario: [ 147.079388][ T8020] [ 147.081109][ T8020] CPU0 CPU1 [ 147.082261][ T8020] ---- ---- [ 147.083392][ T8020] lock(&hdev->req_lock); [ 147.084355][ T8020] lock(rfkill_global_mutex); [ 147.086052][ T8020] lock(&hdev->req_lock); [ 147.087590][ T8020] lock((work_completion)(&hdev->tx_work)); [ 147.088892][ T8020] [ 147.088892][ T8020] *** DEADLOCK *** [ 147.088892][ T8020] [ 147.090666][ T8020] 2 locks held by syz.4.1496/8020: [ 147.091911][ T8020] #0: ffff800016e77268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 147.094112][ T8020] #1: ffff0000c8f14ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 147.096246][ T8020] [ 147.096246][ T8020] stack backtrace: [ 147.097602][ T8020] CPU: 0 PID: 8020 Comm: syz.4.1496 Not tainted 5.15.173-syzkaller #0 [ 147.099442][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 147.101660][ T8020] Call trace: [ 147.102426][ T8020] dump_backtrace+0x0/0x530 [ 147.103400][ T8020] show_stack+0x2c/0x3c [ 147.104381][ T8020] dump_stack_lvl+0x108/0x170 [ 147.105392][ T8020] dump_stack+0x1c/0x58 [ 147.106277][ T8020] print_circular_bug+0x150/0x1b8 [ 147.107391][ T8020] check_noncircular+0x2cc/0x378 [ 147.108484][ T8020] __lock_acquire+0x32d4/0x7638 [ 147.109453][ T8020] lock_acquire+0x240/0x77c [ 147.110365][ T8020] __flush_work+0xf8/0x1c0 [ 147.111359][ T8020] flush_work+0x24/0x38 [ 147.112279][ T8020] hci_dev_do_close+0x16c/0x1060 [ 147.113423][ T8020] hci_rfkill_set_block+0xdc/0x1d0 [ 147.114581][ T8020] rfkill_set_block+0x18c/0x37c [ 147.115651][ T8020] rfkill_fop_write+0x594/0x750 [ 147.116694][ T8020] do_iter_write+0x33c/0x66c [ 147.117728][ T8020] do_writev+0x220/0x3ec [ 147.118703][ T8020] __arm64_sys_writev+0x80/0x94 [ 147.119749][ T8020] invoke_syscall+0x98/0x2b8 [ 147.120736][ T8020] el0_svc_common+0x138/0x258 [ 147.121725][ T8020] do_el0_svc+0x58/0x14c [ 147.122757][ T8020] el0_svc+0x7c/0x1f0 [ 147.123650][ T8020] el0t_64_sync_handler+0x84/0xe4 [ 147.124681][ T8020] el0t_64_sync+0x1a0/0x1a4 [ 147.125754][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.150196][ T3642] loop1: p3 < > p4 < > [ 147.151184][ T3642] loop1: partition table partially beyond EOD, truncated [ 147.153111][ T3642] loop1: p3 start 4284289 is beyond EOD, truncated [ 147.691987][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.597282][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 148.633566][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 148.732002][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.771970][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.811974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.851950][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.891983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.931937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.971988][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.011960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available