last executing test programs: 3m22.605119228s ago: executing program 4 (id=135): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m21.485295017s ago: executing program 4 (id=137): mmap(&(0x7f000064a000/0x4000)=nil, 0x4000, 0x300000f, 0x50, 0xffffffffffffffff, 0x3000) socket$can_bcm(0x1d, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff0001}]}) set_mempolicy(0x4005, &(0x7f0000000240)=0x7e, 0x2) 3m20.562280526s ago: executing program 4 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m19.846790545s ago: executing program 4 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000) 3m19.12729741s ago: executing program 4 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000324000e800c00028005000cff2100e8ff13000180080001"], 0x88}}, 0x0) 3m18.57957367s ago: executing program 4 (id=147): socket$inet_tcp(0x2, 0x1, 0x0) getuid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc31fe0863365904) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m2.967413959s ago: executing program 32 (id=147): socket$inet_tcp(0x2, 0x1, 0x0) getuid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc31fe0863365904) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m46.06473218s ago: executing program 1 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m45.198841016s ago: executing program 1 (id=240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 2m44.377492192s ago: executing program 1 (id=242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@loopback, 0x0, 0xfffc, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8003}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) 2m40.61556991s ago: executing program 1 (id=254): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0xfffffffffffffcfd, 0xffffffffffffffff}) 2m39.634634486s ago: executing program 1 (id=257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0x0) 2m38.790918086s ago: executing program 1 (id=259): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x24008844) sendmmsg(r1, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001300)="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", 0x594}], 0x1}}], 0x1, 0x8000) sendto$inet(r1, 0x0, 0x0, 0x32000800, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x1cc) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0), 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, 0x0, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r5, 0xc2f, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) 2m23.186770296s ago: executing program 33 (id=259): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x24008844) sendmmsg(r1, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001300)="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", 0x594}], 0x1}}], 0x1, 0x8000) sendto$inet(r1, 0x0, 0x0, 0x32000800, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x1cc) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0), 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, 0x0, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r5, 0xc2f, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) 1m49.255586026s ago: executing program 3 (id=400): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) 1m48.490410364s ago: executing program 3 (id=402): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfffc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m43.186106893s ago: executing program 3 (id=418): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x6, 0x0, {0x0, 0x1, 0x5, 0x0, 0x9}, 0x8}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x4, @empty, 0x165}, @in={0x2, 0x4e21, @multicast2}], 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m39.675114244s ago: executing program 6 (id=297): unshare(0x2000080) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x80}, &(0x7f0000000040), 0x0, 0x0) 1m38.904765151s ago: executing program 6 (id=431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000280)="0f", 0x1}, {&(0x7f0000000340)="ad", 0x1}, {&(0x7f00000003c0)="d0d6", 0x2}, {&(0x7f0000000440)="e5", 0x1}], 0x5, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 1m37.899418498s ago: executing program 3 (id=434): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002600)='blkio.bfq.time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 1m37.774647138s ago: executing program 6 (id=435): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m37.123300267s ago: executing program 6 (id=437): unshare(0x8040480) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, 0x0) 1m36.298875649s ago: executing program 6 (id=440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 1m35.721534598s ago: executing program 3 (id=443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffffb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m35.406027174s ago: executing program 6 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m34.423092497s ago: executing program 3 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcd83, 0xfffffffffffffec0, &(0x7f0000000140)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.53785498s ago: executing program 34 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcd83, 0xfffffffffffffec0, &(0x7f0000000140)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.034687075s ago: executing program 35 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 22.020552261s ago: executing program 5 (id=611): socket$vsock_stream(0x28, 0x1, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0xe}) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 20.339578881s ago: executing program 5 (id=616): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x80000000) 19.600509412s ago: executing program 5 (id=618): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e1f00000008ff010000000000000000000000000001dfab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077d3e9110000000000000000000000000000000000000100000001"], 0x110) 18.769776541s ago: executing program 5 (id=622): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002600)='blkio.bfq.time\x00', 0x275a, 0x0) 17.223902567s ago: executing program 5 (id=628): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000300)=""/143) 15.773649751s ago: executing program 0 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) 14.83907331s ago: executing program 5 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x4, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 12.015213049s ago: executing program 36 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x4, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 10.725825744s ago: executing program 8 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r3, 0x0, 0xfffc80) 10.659057863s ago: executing program 2 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000100)="99", 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff06, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000000c0)={0x17, 0x7b7, 0xfffffffc}) 9.790658635s ago: executing program 7 (id=643): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x8, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) 9.558900498s ago: executing program 0 (id=644): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x509, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 8.281832462s ago: executing program 7 (id=645): recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000040) 7.918444601s ago: executing program 8 (id=646): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.467958274s ago: executing program 0 (id=647): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 7.372840809s ago: executing program 7 (id=648): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) r2 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0x18) 6.385254448s ago: executing program 7 (id=649): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6.372951043s ago: executing program 0 (id=650): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0xfe, 0x2, 0x200}) 6.223893549s ago: executing program 8 (id=651): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8614d7, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 5.736003379s ago: executing program 0 (id=652): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5.704657545s ago: executing program 2 (id=653): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback, 0xffffffffffffffff, 0x1a, 0x1}, 0x20) 5.193848467s ago: executing program 8 (id=654): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 4.776246266s ago: executing program 7 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100000001000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xbcaabb7723c63eff}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x3e8) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x84, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x4e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}]}}}}}}, 0x0) 4.739153991s ago: executing program 2 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3.391927436s ago: executing program 8 (id=657): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 3.373653573s ago: executing program 2 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f00000002c0)="d7eb323c667953d201cc3bca46ec7bb5fe63cfc539fb7226297b18f704063c82b5903b4cb1eabd69586339050d177a0b9a6184de35ce541cf0a89fe0516e1ba1b22e", &(0x7f0000000340)=""/82}, 0x20) 2.799479197s ago: executing program 2 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x24, 0x11, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000000080)=""/25, 0x19) 2.676706958s ago: executing program 8 (id=660): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = io_uring_setup(0xd9d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 96.841416ms ago: executing program 2 (id=661): socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 83.260979ms ago: executing program 0 (id=670): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 0s ago: executing program 7 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): fs (loop4): initial error at time 1781602210: ext4_orphan_get:1423 [ 208.557212][ C0] EXT4-fs (loop4): last error at time 1781602210: ext4_orphan_get:1423 [ 208.565027][ T5601] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.602939][ T5915] ext4_test_bit(bit=14, block=5) = 0 [ 208.725697][ T5915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.380291][ T5937] loop3: detected capacity change from 0 to 512 [ 210.455733][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.047771][ T5587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.443693][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.386670][ T24] IPVS: starting estimator thread 0... [ 212.496506][ T5961] IPVS: using max 192 ests per chain, 9600 per kthread [ 213.156670][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 213.902842][ T5975] loop4: detected capacity change from 0 to 512 [ 213.970070][ T5975] EXT4-fs: Ignoring removed orlov option [ 213.982136][ T5978] loop1: detected capacity change from 0 to 512 [ 214.030019][ T5978] EXT4-fs: Ignoring removed i_version option [ 214.032439][ T5975] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.074551][ T5978] EXT4-fs: Ignoring removed bh option [ 214.123014][ T5975] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.48: corrupted in-inode xattr: e_value size too large [ 214.198759][ T5975] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.200392][ T5975] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.48: couldn't read orphan inode 15 (err -117) [ 214.210057][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 214.210150][ C0] EXT4-fs (loop4): initial error at time 1781602216: ext4_iget_extra_inode:5128: inode 15 [ 214.210307][ C0] EXT4-fs (loop4): last error at time 1781602216: ext4_iget_extra_inode:5128: inode 15 [ 214.279015][ T5975] loop4: lost filesystem error report for type 5 error -117 [ 214.310135][ T5978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.349908][ T5975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.383801][ T5978] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.920135][ T5588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.506051][ T5989] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET) [ 216.299151][ T5685] IPVS: starting estimator thread 0... [ 216.437820][ T5998] IPVS: using max 240 ests per chain, 12000 per kthread [ 216.869404][ T6000] loop3: detected capacity change from 0 to 1024 [ 216.898774][ T6000] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.943236][ T6000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.983349][ T6000] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.066720][ T6000] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.58: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 217.105065][ T6000] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.108531][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.58: couldn't read orphan inode 11 (err -117) [ 217.118656][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 217.118747][ C0] EXT4-fs (loop3): initial error at time 1781602219: ext4_ext_check_inode:521: inode 11 [ 217.118903][ C0] EXT4-fs (loop3): last error at time 1781602219: ext4_ext_check_inode:521: inode 11 [ 217.277586][ T6000] loop3: lost filesystem error report for type 5 error -117 [ 217.312578][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.535772][ T6000] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.58: Invalid block bitmap block 0 in block_group 0 [ 217.597452][ T6000] Quota error (device loop3): write_blk: dquota write failed [ 217.627287][ T6000] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 217.713500][ T6000] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.58: Failed to acquire dquot type 0 [ 217.804311][ T6007] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.58: Invalid inode table block 8589934593 in block_group 0 [ 217.952915][ T6012] loop1: detected capacity change from 0 to 512 [ 218.017360][ T6012] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.62: inode has both inline data and extents flags [ 218.034783][ T6012] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.035695][ T6012] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.62: couldn't read orphan inode 15 (err -117) [ 218.045441][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 218.045531][ C1] EXT4-fs (loop1): initial error at time 1781602220: ext4_orphan_get:1397: inode 15 [ 218.045693][ C1] EXT4-fs (loop1): last error at time 1781602220: ext4_orphan_get:1397: inode 15 [ 218.131958][ T6012] loop1: lost filesystem error report for type 5 error -117 [ 218.174136][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.248408][ T5587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.286290][ T6012] EXT4-fs (loop1): shut down requested (2) [ 218.300605][ T1170] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm kworker/u8:10: Invalid inode table block 8589934593 in block_group 0 [ 218.378723][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.640359][ T5588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.730804][ T6038] loop1: detected capacity change from 0 to 64 [ 220.853575][ T6038] syz.1.72: attempt to access beyond end of device [ 220.853575][ T6038] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 220.868894][ T6038] Buffer I/O error on dev loop1, logical block 512, async page read [ 220.887465][ T6038] syz.1.72: attempt to access beyond end of device [ 220.887465][ T6038] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 220.991617][ T6038] Buffer I/O error on dev loop1, logical block 56576, async page read [ 221.353493][ T29] audit: type=1326 audit(1781602223.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.481674][ T29] audit: type=1326 audit(1781602223.728:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.575612][ T29] audit: type=1326 audit(1781602223.728:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.622795][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'. [ 221.667521][ T29] audit: type=1326 audit(1781602223.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.736218][ T29] audit: type=1326 audit(1781602223.728:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.767151][ T29] audit: type=1326 audit(1781602223.728:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.797367][ T29] audit: type=1326 audit(1781602223.728:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 221.823447][ T29] audit: type=1326 audit(1781602223.728:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.76" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 222.381528][ T6056] loop2: detected capacity change from 0 to 1024 [ 222.427515][ T6056] EXT4-fs: Ignoring removed orlov option [ 222.531550][ T6056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.001028][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.064805][ T24] IPVS: starting estimator thread 0... [ 223.165180][ T6065] IPVS: using max 240 ests per chain, 12000 per kthread [ 223.860172][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 223.901448][ T6067] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 223.955419][ T6072] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 224.006082][ T6077] loop0: detected capacity change from 0 to 64 [ 224.026382][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.049454][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 224.074387][ T6067] bond0: (slave team0): Enslaving as an active interface with an up link [ 224.153832][ T6077] syz.0.89: attempt to access beyond end of device [ 224.153832][ T6077] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 224.192996][ T6077] Buffer I/O error on dev loop0, logical block 512, async page read [ 224.232072][ T6077] syz.0.89: attempt to access beyond end of device [ 224.232072][ T6077] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 224.263780][ T6077] Buffer I/O error on dev loop0, logical block 56576, async page read [ 225.855203][ T6096] loop0: detected capacity change from 0 to 1024 [ 225.897692][ T6096] EXT4-fs: Ignoring removed orlov option [ 226.070679][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.332707][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 226.332790][ T29] audit: type=1804 audit(1781602228.708:12): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.95" name="/newroot/24/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 226.536245][ T24] IPVS: starting estimator thread 0... [ 226.674734][ T6105] IPVS: using max 192 ests per chain, 9600 per kthread [ 226.747582][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.219754][ T6111] loop3: detected capacity change from 0 to 64 [ 227.407233][ T6111] syz.3.102: attempt to access beyond end of device [ 227.407233][ T6111] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 227.489280][ T6111] Buffer I/O error on dev loop3, logical block 512, async page read [ 227.522790][ T6111] syz.3.102: attempt to access beyond end of device [ 227.522790][ T6111] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 227.541923][ T6111] Buffer I/O error on dev loop3, logical block 56576, async page read [ 228.261511][ T6126] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 228.268278][ T6126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.309189][ T6126] vhci_hcd vhci_hcd.0: Device attached [ 228.372791][ T6129] vhci_hcd: connection closed [ 228.374467][ T1170] vhci_hcd vhci_hcd.4: stop threads [ 228.440367][ T1170] vhci_hcd vhci_hcd.4: release socket [ 228.467968][ T1170] vhci_hcd vhci_hcd.4: disconnect device [ 229.003657][ T6139] loop2: detected capacity change from 0 to 1024 [ 229.058236][ T6139] EXT4-fs: Ignoring removed orlov option [ 229.171415][ T6142] loop1: detected capacity change from 0 to 128 [ 229.225350][ T6139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.251794][ T6142] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 229.673094][ T6128] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 229.680206][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 229.717851][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.859624][ T6128] syzkaller0: entered promiscuous mode [ 229.888763][ T6128] syzkaller0: entered allmulticast mode [ 230.000893][ T6151] loop1: detected capacity change from 0 to 64 [ 230.190985][ T6151] syz.1.118: attempt to access beyond end of device [ 230.190985][ T6151] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 230.250877][ T6151] Buffer I/O error on dev loop1, logical block 512, async page read [ 230.292702][ T6151] syz.1.118: attempt to access beyond end of device [ 230.292702][ T6151] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 230.355401][ T6151] Buffer I/O error on dev loop1, logical block 56576, async page read [ 231.750730][ T6171] loop2: detected capacity change from 0 to 2048 [ 231.903375][ T24] IPVS: starting estimator thread 0... [ 232.006353][ T6182] IPVS: using max 240 ests per chain, 12000 per kthread [ 232.057896][ T6171] loop2: p2 p3 p7 [ 232.525358][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 232.621717][ T6185] loop3: detected capacity change from 0 to 1024 [ 232.660565][ T6185] EXT4-fs: Ignoring removed orlov option [ 232.768565][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.830070][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 232.860947][ T5924] udevd[5924]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 232.871654][ T6194] loop2: detected capacity change from 0 to 64 [ 232.878858][ T5870] udevd[5870]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 232.980633][ T6194] syz.2.130: attempt to access beyond end of device [ 232.980633][ T6194] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 233.085239][ T6194] Buffer I/O error on dev loop2, logical block 512, async page read [ 233.162062][ T6194] syz.2.130: attempt to access beyond end of device [ 233.162062][ T6194] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 233.253051][ T6194] Buffer I/O error on dev loop2, logical block 56576, async page read [ 233.438273][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.930781][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 234.210176][ T6203] sock: sock_timestamping_bind_phc: sock not bind to device [ 234.416998][ T6206] loop4: detected capacity change from 0 to 128 [ 235.220776][ T6210] loop2: detected capacity change from 0 to 512 [ 235.466318][ T6210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.575677][ T6210] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.119659][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.402158][ T6228] loop3: detected capacity change from 0 to 1024 [ 237.491556][ T6228] EXT4-fs: Ignoring removed orlov option [ 237.597885][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.745719][ T6235] netlink: 7 bytes leftover after parsing attributes in process `syz.4.145'. [ 238.163047][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.167626][ T6237] loop1: detected capacity change from 0 to 512 [ 238.193845][ T6230] loop2: detected capacity change from 0 to 1764 [ 238.232141][ T6230] iso9660: Bad value for 'sbsector' [ 238.261816][ T6237] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 238.867821][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 239.069147][ T14] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 240.098622][ T6246] loop0: detected capacity change from 0 to 512 [ 240.196495][ T6246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.209596][ T6246] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.238254][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 241.007259][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.878332][ T6268] Zero length message leads to an empty skb [ 241.937629][ T6270] loop1: detected capacity change from 0 to 128 [ 242.010128][ T6270] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.035116][ T6270] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.473485][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 243.062865][ T5588] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.860016][ T6287] loop0: detected capacity change from 0 to 512 [ 244.968267][ T6287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.137898][ T6287] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.167032][ T6293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'. [ 245.216020][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 245.609902][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.799743][ T6297] netlink: 'syz.2.169': attribute type 2 has an invalid length. [ 245.852942][ T6297] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 247.111957][ T6306] vlan2: entered promiscuous mode [ 247.271159][ T6306] virt_wifi0: entered promiscuous mode [ 247.321419][ T6306] vlan2: entered allmulticast mode [ 247.426982][ T6306] virt_wifi0: entered allmulticast mode [ 247.569608][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 248.147087][ T6307] hsr_slave_0: left promiscuous mode [ 248.209398][ T6307] hsr_slave_1: left promiscuous mode [ 248.807256][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 249.422464][ T6322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 249.441619][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 249.478134][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 249.840354][ T6324] loop0: detected capacity change from 0 to 512 [ 249.980337][ T6324] EXT4-fs: inline encryption not supported [ 250.095597][ T6324] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.178: bad orphan inode 15 [ 250.212407][ T6329] loop2: detected capacity change from 0 to 512 [ 250.270946][ T6324] loop0: lost filesystem error report for type 5 error -117 [ 250.274103][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 250.288444][ C0] EXT4-fs (loop0): initial error at time 1781602252: ext4_orphan_get:1423 [ 250.297455][ C0] EXT4-fs (loop0): last error at time 1781602252: ext4_orphan_get:1423 [ 250.299938][ T6324] ext4_test_bit(bit=14, block=5) = 0 [ 250.365300][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.452810][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.519243][ T6329] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.947406][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.429508][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.957594][ T6342] loop1: detected capacity change from 0 to 512 [ 253.116395][ T6342] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.186: bad orphan inode 13 [ 253.250990][ T6342] loop1: lost filesystem error report for type 5 error -117 [ 253.253413][ T6342] ext4_test_bit(bit=12, block=4) = 1 [ 253.261259][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 253.261347][ C1] EXT4-fs (loop1): initial error at time 1781602255: ext4_orphan_get:1423 [ 253.261461][ C1] EXT4-fs (loop1): last error at time 1781602255: ext4_orphan_get:1423 [ 253.568831][ T6342] is_bad_inode(inode)=0 [ 253.629162][ T6239] Set syz1 is full, maxelem 65536 reached [ 253.635391][ T6342] NEXT_ORPHAN(inode)=0 [ 253.654624][ T6342] max_ino=32 [ 253.665651][ T6342] i_nlink=1 [ 253.712498][ T6342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.797664][ T6342] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.186: Hash code is SIPHASH, but hash not in dirent [ 253.909550][ T6342] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.186: Corrupt directory, running e2fsck is recommended [ 254.013509][ T6342] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.186: Hash code is SIPHASH, but hash not in dirent [ 254.108450][ T6342] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.186: Corrupt directory, running e2fsck is recommended [ 254.356189][ T6355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.190'. [ 254.362237][ T6342] tipc: Failed to remove unknown binding: 66,0,0/0:207237697/207237699 [ 254.380760][ T6354] loop3: detected capacity change from 0 to 512 [ 254.419305][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 254.429325][ T6342] tipc: Failed to remove unknown binding: 66,0,0/0:207237697/207237698 [ 254.547110][ T6354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.685227][ T6354] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.850208][ T4877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.865903][ T4877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.887006][ T4877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.906796][ T4877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.931802][ T4877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.132425][ T5588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.262434][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 255.272214][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.097939][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 256.603353][ T6380] loop3: detected capacity change from 0 to 512 [ 256.747972][ T6380] EXT4-fs: inline encryption not supported [ 256.956170][ T6380] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.195: bad orphan inode 15 [ 257.045078][ T5591] Bluetooth: hci5: command tx timeout [ 257.213646][ T6380] loop3: lost filesystem error report for type 5 error -117 [ 257.214159][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 257.228808][ C0] EXT4-fs (loop3): initial error at time 1781602259: ext4_orphan_get:1423 [ 257.237945][ C0] EXT4-fs (loop3): last error at time 1781602259: ext4_orphan_get:1423 [ 257.310155][ T6380] ext4_test_bit(bit=14, block=5) = 0 [ 257.389664][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.867030][ T6395] tipc: Failed to remove unknown binding: 66,1,1/0:2870630731/2870630733 [ 258.506089][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 259.135332][ T5591] Bluetooth: hci5: command tx timeout [ 259.139135][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 259.582320][ T738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.599292][ T6413] loop1: detected capacity change from 0 to 512 [ 259.714743][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.773634][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.787992][ T6413] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.881059][ T738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.078379][ T738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.107041][ T5588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.485564][ T738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.702591][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 260.919779][ T6425] syzkaller0: entered promiscuous mode [ 260.977626][ T6425] syzkaller0: entered allmulticast mode [ 261.135299][ T6420] tipc: Started in network mode [ 261.145786][ T6420] tipc: Node identity 6a18333ec712, cluster identity 4711 [ 261.184451][ T6420] tipc: Enabled bearer , priority 0 [ 261.217306][ T5591] Bluetooth: hci5: command tx timeout [ 261.235374][ T6419] tipc: Resetting bearer [ 261.303496][ T6419] tipc: Disabling bearer [ 261.923845][ T738] bridge_slave_1: left allmulticast mode [ 261.978222][ T738] bridge_slave_1: left promiscuous mode [ 262.055930][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.160540][ T6443] tipc: Failed to remove unknown binding: 66,1,1/0:2796170346/2796170348 [ 262.225321][ T738] bridge_slave_0: left allmulticast mode [ 262.278649][ T738] bridge_slave_0: left promiscuous mode [ 262.321335][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.806989][ T6441] tipc: Failed to remove unknown binding: 66,1,1/0:2796170346/2796170348 [ 262.858074][ T6441] tipc: Failed to remove unknown binding: 66,1,1/0:2796170346/2796170348 [ 262.875592][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'. [ 263.289336][ T5591] Bluetooth: hci5: command tx timeout [ 263.757831][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 264.007700][ T738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.047143][ T6456] loop2: detected capacity change from 0 to 512 [ 264.155704][ T738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.161869][ T6456] EXT4-fs: inline encryption not supported [ 264.262382][ T738] bond0 (unregistering): Released all slaves [ 264.295013][ T6456] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.215: bad orphan inode 15 [ 264.419365][ T6456] loop2: lost filesystem error report for type 5 error -117 [ 264.424205][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 264.441531][ C0] EXT4-fs (loop2): initial error at time 1781602266: ext4_orphan_get:1423 [ 264.450658][ C0] EXT4-fs (loop2): last error at time 1781602266: ext4_orphan_get:1423 [ 264.503036][ T6456] ext4_test_bit(bit=14, block=5) = 0 [ 264.534499][ T6456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.717651][ T6460] loop0: detected capacity change from 0 to 512 [ 264.877587][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 264.928205][ T6460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.971787][ T6460] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.341226][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.029399][ T738] hsr_slave_0: left promiscuous mode [ 266.090771][ T738] hsr_slave_1: left promiscuous mode [ 266.137886][ T738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.194866][ T738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.253238][ T738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.273672][ T738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.388877][ T738] veth1_macvtap: left promiscuous mode [ 266.404768][ T738] veth0_macvtap: left promiscuous mode [ 266.427144][ T738] veth1_vlan: left promiscuous mode [ 266.461943][ T738] veth0_vlan: left promiscuous mode [ 266.500923][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.524063][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.860173][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 268.149740][ T6504] loop0: detected capacity change from 0 to 512 [ 268.295405][ T6504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.365979][ T6504] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.410685][ T738] team0 (unregistering): Port device team_slave_1 removed [ 268.551455][ T738] team0 (unregistering): Port device team_slave_0 removed [ 268.693380][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.070347][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 269.299620][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 269.507862][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.291157][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.321454][ T738] IPVS: stop unused estimator thread 0... [ 270.341705][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.376136][ T6360] bridge_slave_0: entered allmulticast mode [ 270.433829][ T6360] bridge_slave_0: entered promiscuous mode [ 270.531929][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.577209][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.616345][ T6360] bridge_slave_1: entered allmulticast mode [ 270.666591][ T6360] bridge_slave_1: entered promiscuous mode [ 270.932019][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'. [ 271.153429][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.309509][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.962905][ T6360] team0: Port device team_slave_0 added [ 272.068932][ T6360] team0: Port device team_slave_1 added [ 272.402160][ T6549] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.513684][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.561551][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.737914][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.765947][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 272.845146][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.848449][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 272.859442][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.911361][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.053044][ T6558] loop1: detected capacity change from 0 to 512 [ 273.170292][ T6558] EXT4-fs: inline encryption not supported [ 273.406891][ T6558] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.242: bad orphan inode 15 [ 273.499522][ T6558] loop1: lost filesystem error report for type 5 error -117 [ 273.504068][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 273.518545][ C1] EXT4-fs (loop1): initial error at time 1781602275: ext4_orphan_get:1423 [ 273.527378][ C1] EXT4-fs (loop1): last error at time 1781602275: ext4_orphan_get:1423 [ 273.543363][ T6558] ext4_test_bit(bit=14, block=5) = 0 [ 273.634735][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.012434][ T6360] hsr_slave_0: entered promiscuous mode [ 274.094251][ T6360] hsr_slave_1: entered promiscuous mode [ 274.133241][ T6360] debugfs: 'hsr0' already exists in 'hsr' [ 274.172960][ T6360] Cannot create hsr debugfs directory [ 274.340941][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 274.355758][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'. [ 274.818297][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.001076][ T6575] loop0: detected capacity change from 0 to 164 [ 275.112907][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 275.970712][ T5588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.837015][ T6360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.973648][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.031395][ T6360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.156705][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 277.171773][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.214752][ T6360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.330402][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.407463][ T6360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.505945][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.404722][ T6608] gre0 speed is unknown, defaulting to 1000 [ 278.490215][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 278.494181][ T6608] gre0 speed is unknown, defaulting to 1000 [ 278.536573][ T6615] loop2: detected capacity change from 0 to 128 [ 278.608315][ T6615] /dev/loop2: Can't open blockdev [ 278.616138][ T6608] gre0 speed is unknown, defaulting to 1000 [ 279.022658][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.318299][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.394774][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 279.458196][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.465791][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.550836][ T6623] loop3: detected capacity change from 0 to 512 [ 279.620133][ T6623] EXT4-fs: inline encryption not supported [ 279.660483][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.668167][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.782015][ T6623] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.263: bad orphan inode 15 [ 279.811701][ T6623] loop3: lost filesystem error report for type 5 error -117 [ 279.812912][ T6623] ext4_test_bit(bit=14, block=5) = 0 [ 279.820691][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 279.820777][ C0] EXT4-fs (loop3): initial error at time 1781602282: ext4_orphan_get:1423 [ 279.820894][ C0] EXT4-fs (loop3): last error at time 1781602282: ext4_orphan_get:1423 [ 279.857755][ T6623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.239183][ T6630] loop0: detected capacity change from 0 to 2048 [ 280.372637][ T6630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 280.461033][ T6630] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.265: inline data xattr refers to an external xattr inode [ 280.546659][ T6630] EXT4-fs (loop0): Remounting filesystem read-only [ 280.797804][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.003070][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 281.512854][ T6645] capability: warning: `syz.0.268' uses deprecated v2 capabilities in a way that may be insecure [ 281.638040][ T6646] loop0: detected capacity change from 0 to 512 [ 281.658432][ T6608] infiniband syz1: set active [ 281.666603][ T5688] gre0 speed is unknown, defaulting to 1000 [ 281.712882][ T6608] infiniband syz1: added gre0 [ 281.730523][ T5232] 8021q: adding VLAN 0 to HW filter on device eth3 [ 281.771453][ T6608] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 281.827785][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.866610][ T6646] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.889402][ T6608] infiniband syz1: Couldn't open port 1 [ 281.897430][ T6652] netlink: 76 bytes leftover after parsing attributes in process `syz.2.269'. [ 281.937394][ T6608] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 282.047607][ T6608] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 282.140865][ T6608] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 282.414871][ T6608] RDS/IB: syz1: added [ 282.447309][ T6608] smc: adding ib device syz1 with port count 1 [ 282.481169][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.483118][ T6608] smc: ib device syz1 port 1 has no pnetid [ 282.601064][ T40] gre0 speed is unknown, defaulting to 1000 [ 282.639425][ T6608] gre0 speed is unknown, defaulting to 1000 [ 282.866520][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 284.477876][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 284.978803][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.027520][ T6608] gre0 speed is unknown, defaulting to 1000 [ 285.182376][ T6687] loop0: detected capacity change from 0 to 512 [ 285.218640][ T6687] journal_path: Non-blockdev passed as './file1' [ 285.259678][ T6687] EXT4-fs: error: could not find journal device path [ 287.058588][ T6705] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 287.097388][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 287.305360][ T5232] 8021q: adding VLAN 0 to HW filter on device eth4 [ 288.110169][ T6608] gre0 speed is unknown, defaulting to 1000 [ 288.483006][ T6360] veth0_vlan: entered promiscuous mode [ 288.669267][ T6360] veth1_vlan: entered promiscuous mode [ 288.942229][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 289.140255][ T6721] loop0: detected capacity change from 0 to 512 [ 289.197388][ T6721] EXT4-fs: inline encryption not supported [ 289.276287][ T6721] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.287: bad orphan inode 15 [ 289.293503][ T6360] veth0_macvtap: entered promiscuous mode [ 289.317884][ T6360] veth1_macvtap: entered promiscuous mode [ 289.318724][ T6721] loop0: lost filesystem error report for type 5 error -117 [ 289.401085][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.427292][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 289.434208][ C0] EXT4-fs (loop0): initial error at time 1781602291: ext4_orphan_get:1423 [ 289.443000][ C0] EXT4-fs (loop0): last error at time 1781602291: ext4_orphan_get:1423 [ 289.508174][ T6721] ext4_test_bit(bit=14, block=5) = 0 [ 289.530456][ T6721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.597334][ T6728] loop3: detected capacity change from 0 to 512 [ 289.638832][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.699564][ T6728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.743447][ T6728] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 289.838265][ T6728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 289.917072][ T6728] System zones: 1-12 [ 289.972693][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.000181][ T6728] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.057654][ T1155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.067850][ T6728] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.289: Block bitmap for bg 0 marked uninitialized [ 290.129766][ T6728] loop3: lost filesystem error report for type 5 error -117 [ 290.131340][ T6728] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.289: Block bitmap for bg 0 marked uninitialized [ 290.139117][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 290.139203][ C1] EXT4-fs (loop3): initial error at time 1781602292: ext4_read_block_bitmap_nowait:517 [ 290.139318][ C1] EXT4-fs (loop3): last error at time 1781602292: ext4_read_block_bitmap_nowait:517 [ 290.189796][ T1155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.249264][ T1170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.267044][ T6728] loop3: lost filesystem error report for type 5 error -117 [ 290.268455][ T6728] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.289: Block bitmap for bg 0 marked uninitialized [ 290.344297][ T6728] loop3: lost filesystem error report for type 5 error -117 [ 290.371221][ T6728] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.289: Block bitmap for bg 0 marked uninitialized [ 290.486705][ T6728] loop3: lost filesystem error report for type 5 error -117 [ 290.491821][ T6728] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.289: Block bitmap for bg 0 marked uninitialized [ 290.624863][ T6728] loop3: lost filesystem error report for type 5 error -117 [ 290.625479][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.662692][ T6728] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.289: Block bitmap for bg 0 marked uninitialized [ 290.766075][ T6728] loop3: lost filesystem error report for type 5 error -117 [ 290.779009][ T6728] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 290.883456][ T6728] EXT4-fs (loop3): 1 truncate cleaned up [ 290.933512][ T6728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.093349][ T6728] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (35405!=33349) [ 291.390809][ T6742] loop0: detected capacity change from 0 to 512 [ 291.452074][ T6742] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.509129][ T6742] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 291.528556][ T6608] gre0 speed is unknown, defaulting to 1000 [ 291.567884][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.643470][ T6742] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 291.792931][ T6742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 291.802974][ T6742] System zones: 0-2, 18-18, 34-35 [ 291.871533][ T6742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.064811][ T6742] EXT4-fs (loop0): shut down requested (1) [ 292.125730][ T6742] fscrypt (loop0, inode 12): Error -5 getting encryption context [ 292.557982][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.201178][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 294.097868][ T6766] loop3: detected capacity change from 0 to 512 [ 294.226993][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 294.336575][ T6766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.409506][ T6766] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.529131][ T6769] loop0: detected capacity change from 0 to 512 [ 294.612054][ T6769] EXT4-fs: inline encryption not supported [ 294.682454][ T6769] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.300: bad orphan inode 15 [ 294.706172][ T6769] loop0: lost filesystem error report for type 5 error -117 [ 294.707367][ T6769] ext4_test_bit(bit=14, block=5) = 0 [ 294.715047][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 294.715136][ C0] EXT4-fs (loop0): initial error at time 1781602297: ext4_orphan_get:1423 [ 294.715250][ C0] EXT4-fs (loop0): last error at time 1781602297: ext4_orphan_get:1423 [ 294.754989][ T6769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.976862][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.078699][ T6608] gre0 speed is unknown, defaulting to 1000 [ 295.146069][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.459414][ T4877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.479924][ T4877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.509173][ T4877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.534372][ T4877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.561207][ T4877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.294726][ T6794] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 297.687301][ T6806] Bluetooth: hci2: command tx timeout [ 298.914864][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 299.035263][ T6826] loop3: detected capacity change from 0 to 512 [ 299.111838][ T6826] EXT4-fs: inline encryption not supported [ 299.236694][ T6826] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.310: bad orphan inode 15 [ 299.285830][ T6806] Bluetooth: hci1: command 0x0406 tx timeout [ 299.293345][ T6806] Bluetooth: hci4: command 0x0406 tx timeout [ 299.294997][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 299.299750][ T6806] Bluetooth: hci0: command 0x0406 tx timeout [ 299.420034][ T6826] loop3: lost filesystem error report for type 5 error -117 [ 299.422582][ T6826] ext4_test_bit(bit=14, block=5) = 0 [ 299.430525][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 299.430614][ C0] EXT4-fs (loop3): initial error at time 1781602301: ext4_orphan_get:1423 [ 299.430731][ C0] EXT4-fs (loop3): last error at time 1781602301: ext4_orphan_get:1423 [ 299.502150][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.767667][ T4877] Bluetooth: hci2: command tx timeout [ 300.114298][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.087516][ T6784] gre0 speed is unknown, defaulting to 1000 [ 301.108442][ T5708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.153695][ T5708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.524117][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.572623][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.688074][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 301.848695][ T4877] Bluetooth: hci2: command tx timeout [ 303.924399][ T4877] Bluetooth: hci2: command tx timeout [ 303.935883][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.322'. [ 304.167579][ T6869] loop5: detected capacity change from 0 to 512 [ 304.243143][ T6869] EXT4-fs: inline encryption not supported [ 304.362508][ T6869] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.322: bad orphan inode 15 [ 304.385155][ T6869] loop5: lost filesystem error report for type 5 error -117 [ 304.391814][ T6869] ext4_test_bit(bit=14, block=5) = 0 [ 304.399650][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 304.399741][ C0] EXT4-fs (loop5): initial error at time 1781602306: ext4_orphan_get:1423 [ 304.399856][ C0] EXT4-fs (loop5): last error at time 1781602306: ext4_orphan_get:1423 [ 304.465022][ T6869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.911559][ T6877] loop3: detected capacity change from 0 to 512 [ 305.076440][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.187589][ T6877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.251717][ T6877] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.876379][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 305.998129][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.172491][ T6891] loop5: detected capacity change from 0 to 2048 [ 306.348504][ T6891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.168514][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.556626][ T6923] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 308.563378][ T6923] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 308.603634][ T6923] vhci_hcd vhci_hcd.0: Device attached [ 308.669449][ T6925] vhci_hcd: connection closed [ 308.673501][ T57] vhci_hcd vhci_hcd.3: stop threads [ 308.723695][ T6924] loop2: detected capacity change from 0 to 512 [ 308.758137][ T57] vhci_hcd vhci_hcd.3: release socket [ 308.781906][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 308.804666][ T5688] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 308.815862][ T6924] EXT4-fs: inline encryption not supported [ 308.919061][ T6924] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.335: bad orphan inode 15 [ 309.015836][ T6924] loop2: lost filesystem error report for type 5 error -117 [ 309.019509][ T6924] ext4_test_bit(bit=14, block=5) = 0 [ 309.027312][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 309.027398][ C1] EXT4-fs (loop2): initial error at time 1781602311: ext4_orphan_get:1423 [ 309.027513][ C1] EXT4-fs (loop2): last error at time 1781602311: ext4_orphan_get:1423 [ 309.041845][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.134943][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.157149][ T6784] bridge_slave_0: entered allmulticast mode [ 309.192157][ T6924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.196017][ T6784] bridge_slave_0: entered promiscuous mode [ 309.341525][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.387992][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.449906][ T6784] bridge_slave_1: entered allmulticast mode [ 309.510637][ T6784] bridge_slave_1: entered promiscuous mode [ 309.771373][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.828643][ T6939] loop0: detected capacity change from 0 to 512 [ 309.975740][ T6939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.032391][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.096587][ T6939] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.193793][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.547202][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.684809][ T6784] team0: Port device team_slave_0 added [ 310.788566][ T6784] team0: Port device team_slave_1 added [ 311.239457][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.273461][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.414809][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.503317][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.536422][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.604244][ T6964] loop2: detected capacity change from 0 to 128 [ 311.700369][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.812135][ T6964] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.935484][ T6964] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.031454][ T29] audit: type=1800 audit(1781602314.408:13): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.345" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 312.273757][ T6970] loop3: detected capacity change from 0 to 128 [ 312.316442][ T6784] hsr_slave_0: entered promiscuous mode [ 312.373569][ T6784] hsr_slave_1: entered promiscuous mode [ 312.420115][ T6784] debugfs: 'hsr0' already exists in 'hsr' [ 312.450508][ T6784] Cannot create hsr debugfs directory [ 313.023794][ T5586] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.075763][ T6976] loop5: detected capacity change from 0 to 512 [ 313.162482][ T6976] EXT4-fs: inline encryption not supported [ 313.237368][ T6976] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.350: bad orphan inode 15 [ 313.299149][ T6976] loop5: lost filesystem error report for type 5 error -117 [ 313.304036][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 313.318271][ C1] EXT4-fs (loop5): initial error at time 1781602315: ext4_orphan_get:1423 [ 313.327153][ C1] EXT4-fs (loop5): last error at time 1781602315: ext4_orphan_get:1423 [ 313.343185][ T6976] ext4_test_bit(bit=14, block=5) = 0 [ 313.379750][ T6976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.407050][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 313.825209][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.559623][ T6990] loop5: detected capacity change from 0 to 512 [ 314.660923][ T6990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.661280][ T6990] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.177167][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.464892][ T6784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 315.546362][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.553179][ T6784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.590570][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 315.646510][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.667572][ T6784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.839825][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.857715][ T6784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 315.957341][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.893335][ T7017] syzkaller1: entered promiscuous mode [ 316.921972][ T7017] syzkaller1: entered allmulticast mode [ 317.298687][ T7022] loop3: detected capacity change from 0 to 512 [ 317.365763][ T7022] EXT4-fs: inline encryption not supported [ 317.472156][ T7022] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.362: bad orphan inode 15 [ 317.490705][ T7022] loop3: lost filesystem error report for type 5 error -117 [ 317.492330][ T7022] ext4_test_bit(bit=14, block=5) = 0 [ 317.500022][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 317.500113][ C1] EXT4-fs (loop3): initial error at time 1781602319: ext4_orphan_get:1423 [ 317.500293][ C1] EXT4-fs (loop3): last error at time 1781602319: ext4_orphan_get:1423 [ 317.576237][ T7022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.876281][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 317.966163][ T7025] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 318.116111][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.129648][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.399615][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.441662][ T7033] loop2: detected capacity change from 0 to 512 [ 318.522672][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.530388][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.591834][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.367'. [ 318.627453][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.694978][ T7033] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.766449][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.774116][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.229653][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.675070][ T7048] loop2: detected capacity change from 0 to 7 [ 319.722168][ T7048] Dev loop2: unable to read RDB block 7 [ 319.757629][ T7048] loop2: AHDI p1 p2 p3 [ 319.771130][ T7048] loop2: partition table partially beyond EOD, truncated [ 319.800698][ T7048] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.849242][ T7048] loop2: p2 start 1702059890 is beyond EOD, truncated [ 320.766336][ T7061] tipc: Started in network mode [ 320.771410][ T7061] tipc: Node identity 5, cluster identity 4711 [ 320.778043][ T7061] tipc: Node number set to 5 [ 320.783404][ T7061] tipc: Cannot configure node identity twice [ 320.803358][ T7062] loop0: detected capacity change from 0 to 512 [ 320.848362][ T7062] EXT4-fs: inline encryption not supported [ 320.922647][ T7062] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.375: bad orphan inode 15 [ 320.988239][ T7062] loop0: lost filesystem error report for type 5 error -117 [ 320.989455][ T7062] ext4_test_bit(bit=14, block=5) = 0 [ 320.997245][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 320.997327][ C0] EXT4-fs (loop0): initial error at time 1781602323: ext4_orphan_get:1423 [ 320.997435][ C0] EXT4-fs (loop0): last error at time 1781602323: ext4_orphan_get:1423 [ 321.108832][ T7062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.644622][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.000529][ T7078] loop5: detected capacity change from 0 to 512 [ 322.182074][ T7078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.239310][ T7078] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.688803][ T7089] loop3: detected capacity change from 0 to 512 [ 322.744589][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.843616][ T7089] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.383: bg 0: block 127: padding at end of block bitmap is not set [ 322.877747][ T7089] loop3: lost filesystem error report for type 5 error -117 [ 322.884065][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 322.898231][ C1] EXT4-fs (loop3): initial error at time 1781602325: ext4_validate_block_bitmap:441 [ 322.907929][ C1] EXT4-fs (loop3): last error at time 1781602325: ext4_validate_block_bitmap:441 [ 322.953461][ T7089] ------------[ cut here ]------------ [ 322.967192][ T7089] EA inode 11 i_nlink=0 [ 322.967295][ T7089] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x7a2/0x880, CPU#1: syz.3.383/7089 [ 322.984979][ T7089] Modules linked in: [ 322.989121][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT(lazy) [ 322.998661][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.009086][ T7089] RIP: 0010:ext4_xattr_inode_update_ref+0x81c/0x880 [ 323.020945][ T7089] Code: 06 00 00 44 89 ab 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 f6 75 46 45 85 ff 75 55 48 8b 7d c0 48 8b 75 d0 8b 55 b8 <67> 48 0f b9 3a e9 d3 fc ff ff 44 89 e7 e8 12 da 52 ff 89 c7 e8 2b [ 323.042280][ T7089] RSP: 0018:ffff88809b1d3128 EFLAGS: 00010246 [ 323.049982][ T7089] RAX: 0000000000000000 RBX: ffff8880560f8bd8 RCX: 0000000000aa97f9 [ 323.058643][ T7089] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff92d43000 [ 323.067014][ T7089] RBP: ffff88809b1d31b0 R08: ffffea000000000f R09: 0000000000000000 [ 323.075293][ T7089] R10: ffff88809a9d3070 R11: 00000000abcd0100 R12: 0000000000000000 [ 323.083515][ T7089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.091893][ T7089] FS: 0000000000000000(0000) GS:ffff8881aa710000(0063) knlGS:00000000f547db40 [ 323.101237][ T7089] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 323.108233][ T7089] CR2: 00007f7c68619a10 CR3: 0000000054af6000 CR4: 00000000003526f0 [ 323.120790][ T7089] Call Trace: [ 323.125468][ T7089] [ 323.128596][ T7089] ext4_xattr_inode_dec_ref_all+0x1011/0x17b0 [ 323.135910][ T7089] ? errseq_check+0x6f/0xd0 [ 323.140682][ T7089] ext4_xattr_delete_inode+0xd14/0x14c0 [ 323.146862][ T7089] ? __ext4_mark_inode_dirty+0x72e/0x9a0 [ 323.152892][ T7089] ext4_evict_inode+0x202b/0x2730 [ 323.158370][ T7089] ? __pfx_ext4_evict_inode+0x10/0x10 [ 323.164103][ T7089] evict+0x69b/0xc90 [ 323.168309][ T7089] ? kmsan_get_metadata+0xf1/0x160 [ 323.173681][ T7089] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 323.180503][ T7089] iput+0x84b/0xca0 [ 323.184707][ T7089] ext4_process_orphan+0x49a/0x520 [ 323.190119][ T7089] ext4_orphan_cleanup+0x108a/0x1e10 [ 323.195822][ T7089] ext4_fill_super+0xa699/0xafa0 [ 323.201159][ T7089] ? sb_set_blocksize+0x24e/0x390 [ 323.207722][ T7089] get_tree_bdev_flags+0x6e6/0x920 [ 323.213109][ T7089] ? __pfx_ext4_fill_super+0x10/0x10 [ 323.223118][ T7089] ? __pfx_ext4_fill_super+0x10/0x10 [ 323.230033][ T7089] ? __pfx_ext4_get_tree+0x10/0x10 [ 323.235630][ T7089] get_tree_bdev+0x38/0x50 [ 323.240319][ T7089] ext4_get_tree+0x35/0x40 [ 323.245085][ T7089] vfs_get_tree+0xb3/0x5d0 [ 323.249778][ T7089] do_new_mount+0x885/0x1dd0 [ 323.254815][ T7089] ? apparmor_capable+0x2a2/0x380 [ 323.260068][ T7089] ? kmsan_get_metadata+0xf1/0x160 [ 323.265591][ T7089] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.271767][ T7089] path_mount+0x7a2/0x20b0 [ 323.276591][ T7089] ? user_path_at+0x1fc/0x330 [ 323.281524][ T7089] __se_sys_mount+0x704/0x7f0 [ 323.286744][ T7089] __ia32_sys_mount+0xe2/0x150 [ 323.291746][ T7089] ia32_sys_call+0x27fe/0x4360 [ 323.297081][ T7089] __do_fast_syscall_32+0x195/0x470 [ 323.302631][ T7089] do_fast_syscall_32+0x37/0x80 [ 323.307826][ T7089] do_SYSENTER_32+0x1f/0x30 [ 323.312572][ T7089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.324261][ T7089] RIP: 0023:0xf708f01c [ 323.329816][ T7089] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 323.349893][ T7089] RSP: 002b:00000000f547d360 EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 323.358750][ T7089] RAX: ffffffffffffffda RBX: 00000000f547d3c0 RCX: 0000000080000000 [ 323.367313][ T7089] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 00000000f547d400 [ 323.375645][ T7089] RBP: 00000000f547d3c0 R08: 0000000000000000 R09: 0000000000000000 [ 323.383860][ T7089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.392244][ T7089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.400597][ T7089] [ 323.403769][ T7089] ---[ end trace 0000000000000000 ]--- [ 323.478848][ T7089] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.383: bit already cleared for inode 11 [ 323.531408][ T7089] loop3: lost filesystem error report for type 5 error -117 [ 323.532810][ T7089] EXT4-fs (loop3): 1 orphan inode deleted [ 323.582334][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.719878][ T7089] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 324.082014][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.268526][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.814859][ T7110] loop3: detected capacity change from 0 to 512 [ 324.913402][ T7110] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.389: bad orphan inode 13 [ 324.927412][ T7110] loop3: lost filesystem error report for type 5 error -117 [ 324.929792][ T7110] ext4_test_bit(bit=12, block=4) = 1 [ 324.937494][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 324.937586][ C1] EXT4-fs (loop3): initial error at time 1781602327: ext4_orphan_get:1423 [ 324.937705][ C1] EXT4-fs (loop3): last error at time 1781602327: ext4_orphan_get:1423 [ 324.972477][ T7110] is_bad_inode(inode)=0 [ 324.977097][ T7110] NEXT_ORPHAN(inode)=0 [ 324.981293][ T7110] max_ino=32 [ 324.984844][ T7110] i_nlink=1 [ 324.990074][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.138275][ T7113] loop5: detected capacity change from 0 to 512 [ 325.208591][ T5601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.228133][ T7113] EXT4-fs: inline encryption not supported [ 325.302026][ T7113] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.390: bad orphan inode 15 [ 325.326222][ T7113] loop5: lost filesystem error report for type 5 error -117 [ 325.331239][ T7113] ext4_test_bit(bit=14, block=5) = 0 [ 325.339170][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 325.339255][ C1] EXT4-fs (loop5): initial error at time 1781602327: ext4_orphan_get:1423 [ 325.339371][ C1] EXT4-fs (loop5): last error at time 1781602327: ext4_orphan_get:1423 [ 325.490894][ T7113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.853294][ T7126] loop3: detected capacity change from 0 to 128 [ 325.915517][ T7126] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 326.123788][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.405374][ T55] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 326.718289][ T7132] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.787812][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 326.845133][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.592255][ T6784] veth0_vlan: entered promiscuous mode [ 327.773776][ T6784] veth1_vlan: entered promiscuous mode [ 327.954261][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.961149][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.204770][ T6784] veth0_macvtap: entered promiscuous mode [ 328.386115][ T6784] veth1_macvtap: entered promiscuous mode [ 328.634486][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.762587][ T7151] loop2: detected capacity change from 0 to 512 [ 328.792506][ T7151] EXT4-fs: inline encryption not supported [ 328.806832][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.875368][ T7151] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.404: bad orphan inode 15 [ 328.899191][ T7151] loop2: lost filesystem error report for type 5 error -117 [ 328.901240][ T7151] ext4_test_bit(bit=14, block=5) = 0 [ 328.909065][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 328.909254][ C1] EXT4-fs (loop2): initial error at time 1781602331: ext4_orphan_get:1423 [ 328.909371][ C1] EXT4-fs (loop2): last error at time 1781602331: ext4_orphan_get:1423 [ 329.027874][ T7151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.049262][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.109075][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.173775][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.218083][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.481852][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.786926][ T7166] loop0: detected capacity change from 0 to 512 [ 330.963318][ T7166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.408: bg 0: block 127: padding at end of block bitmap is not set [ 331.019072][ T7166] loop0: lost filesystem error report for type 5 error -117 [ 331.024121][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 331.038466][ C0] EXT4-fs (loop0): initial error at time 1781602333: ext4_validate_block_bitmap:441 [ 331.048270][ C0] EXT4-fs (loop0): last error at time 1781602333: ext4_validate_block_bitmap:441 [ 331.061527][ T7166] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 331.119621][ T7166] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.408: bit already cleared for inode 11 [ 331.148063][ T7166] loop0: lost filesystem error report for type 5 error -117 [ 331.152528][ T7166] EXT4-fs (loop0): 1 orphan inode deleted [ 331.233375][ T7166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.752320][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.028970][ T7188] loop0: detected capacity change from 0 to 512 [ 333.197947][ T7188] EXT4-fs: inline encryption not supported [ 333.282783][ T7188] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.415: bad orphan inode 15 [ 333.324577][ T7188] loop0: lost filesystem error report for type 5 error -117 [ 333.325826][ T7188] ext4_test_bit(bit=14, block=5) = 0 [ 333.339016][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 333.339105][ C0] EXT4-fs (loop0): initial error at time 1781602335: ext4_orphan_get:1423 [ 333.339223][ C0] EXT4-fs (loop0): last error at time 1781602335: ext4_orphan_get:1423 [ 333.501264][ T7188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.011064][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.020158][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.081659][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.368076][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.408398][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.408624][ T7229] loop0: detected capacity change from 0 to 512 [ 337.532050][ T7229] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.429: bad orphan inode 13 [ 337.586267][ T7229] loop0: lost filesystem error report for type 5 error -117 [ 337.589774][ T7229] ext4_test_bit(bit=12, block=4) = 1 [ 337.597599][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 337.597689][ C1] EXT4-fs (loop0): initial error at time 1781602339: ext4_orphan_get:1423 [ 337.597805][ C1] EXT4-fs (loop0): last error at time 1781602339: ext4_orphan_get:1423 [ 337.629532][ T7229] is_bad_inode(inode)=0 [ 337.633850][ T7229] NEXT_ORPHAN(inode)=0 [ 337.638331][ T7229] max_ino=32 [ 337.641933][ T7229] i_nlink=1 [ 337.647426][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.781969][ T7233] loop2: detected capacity change from 0 to 512 [ 337.793444][ T7229] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.429: Hash code is SIPHASH, but hash not in dirent [ 337.876379][ T7233] EXT4-fs: inline encryption not supported [ 337.882723][ T7229] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.429: Corrupt directory, running e2fsck is recommended [ 337.938624][ T7229] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.429: Hash code is SIPHASH, but hash not in dirent [ 337.980556][ T7233] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.430: bad orphan inode 15 [ 338.034967][ T7229] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.429: Corrupt directory, running e2fsck is recommended [ 338.051022][ T7233] loop2: lost filesystem error report for type 5 error -117 [ 338.053393][ T7233] ext4_test_bit(bit=14, block=5) = 0 [ 338.061177][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 338.061272][ C0] EXT4-fs (loop2): initial error at time 1781602340: ext4_orphan_get:1423 [ 338.061379][ C0] EXT4-fs (loop2): last error at time 1781602340: ext4_orphan_get:1423 [ 338.108841][ T7233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.128504][ T7229] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.429: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 338.489847][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.610639][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.160463][ T7246] loop3: detected capacity change from 0 to 512 [ 339.242891][ T7246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.350803][ T7246] EXT4-fs (loop3): 1 truncate cleaned up [ 339.429153][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.768307][ T7246] loop3: detected capacity change from 512 to 0 [ 339.820785][ C1] I/O error, dev loop3, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 339.831630][ T7253] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.434: reading directory lblock 0 [ 339.885303][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 339.937279][ T7255] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #18: block 9: comm syz.3.434: unable to read itable block [ 339.992796][ T7253] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 340.049116][ T7253] EXT4-fs (loop3): I/O error while writing superblock [ 340.082222][ T7255] EXT4-fs (loop3): previous I/O error to superblock detected [ 340.139852][ T7255] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 340.186129][ T7255] EXT4-fs (loop3): I/O error while writing superblock [ 340.229251][ T7255] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: IO failure [ 340.288580][ T7255] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 340.340744][ T7255] EXT4-fs (loop3): I/O error while writing superblock [ 340.363326][ T7255] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #18: comm syz.3.434: mark_inode_dirty error [ 340.392839][ T7255] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 340.452266][ T7255] EXT4-fs (loop3): I/O error while writing superblock [ 340.795077][ T5601] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 340.818834][ T5601] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block [ 340.886413][ T5601] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 340.939842][ T5601] EXT4-fs (loop3): I/O error while writing superblock [ 340.974087][ T5601] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: IO failure [ 341.013841][ T5601] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 341.056227][ T5601] EXT4-fs (loop3): I/O error while writing superblock [ 341.087413][ T5601] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz-executor: mark_inode_dirty error [ 341.127765][ T5601] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 341.148031][ T5601] EXT4-fs (loop3): I/O error while writing superblock [ 341.384913][ T7271] loop0: detected capacity change from 0 to 512 [ 341.394302][ T738] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5008: inode #18: block 9: comm kworker/u8:6: unable to read itable block [ 341.437273][ T7271] EXT4-fs: inline encryption not supported [ 341.466576][ T738] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 341.496820][ T738] EXT4-fs (loop3): I/O error while writing superblock [ 341.521924][ T738] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:6: unable to read itable block [ 341.537084][ T7274] loop2: detected capacity change from 0 to 256 [ 341.567251][ T7271] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.442: bad orphan inode 15 [ 341.588032][ T738] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 341.589114][ T7271] loop0: lost filesystem error report for type 5 error -117 [ 341.598977][ T7274] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.653803][ T7271] ext4_test_bit(bit=14, block=5) = 0 [ 341.654018][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 341.666419][ C1] EXT4-fs (loop0): initial error at time 1781602344: ext4_orphan_get:1423 [ 341.675220][ C1] EXT4-fs (loop0): last error at time 1781602344: ext4_orphan_get:1423 [ 341.710924][ T5601] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 341.771278][ T7271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.244983][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.701204][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 344.189493][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 345.198253][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.214981][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.230553][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.258130][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.272430][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.425127][ T7304] gre0 speed is unknown, defaulting to 1000 [ 346.648502][ T7316] loop0: detected capacity change from 0 to 512 [ 346.695330][ T7316] EXT4-fs: inline encryption not supported [ 346.785427][ T7316] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.460: bad orphan inode 15 [ 346.849608][ T7316] loop0: lost filesystem error report for type 5 error -117 [ 346.851083][ T7316] ext4_test_bit(bit=14, block=5) = 0 [ 346.858797][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 346.858887][ C1] EXT4-fs (loop0): initial error at time 1781602349: ext4_orphan_get:1423 [ 346.859091][ C1] EXT4-fs (loop0): last error at time 1781602349: ext4_orphan_get:1423 [ 346.901570][ T7316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.984523][ T7319] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 347.241445][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.365248][ T5594] Bluetooth: hci3: command tx timeout [ 349.090526][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.100088][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.444685][ T5594] Bluetooth: hci3: command tx timeout [ 349.474657][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.463'. [ 349.997559][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.089777][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.122624][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.132603][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.158053][ T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.194281][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.494715][ T7307] gre0 speed is unknown, defaulting to 1000 [ 351.528615][ T5594] Bluetooth: hci3: command tx timeout [ 352.730148][ T7335] loop5: detected capacity change from 0 to 8192 [ 353.255897][ T7339] loop2: detected capacity change from 0 to 1024 [ 353.319488][ T7339] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 353.366538][ T7339] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 353.420758][ T7339] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 353.484774][ T7339] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 353.549299][ T7339] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 353.549299][ T7339] [ 353.604662][ T5594] Bluetooth: hci3: command tx timeout [ 353.664251][ T7339] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 353.760848][ T7339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.160071][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.750575][ T7348] loop2: detected capacity change from 0 to 512 [ 354.807227][ T7348] EXT4-fs: inline encryption not supported [ 354.905465][ T7348] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.470: bad orphan inode 15 [ 354.976700][ T7348] loop2: lost filesystem error report for type 5 error -117 [ 354.984016][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 354.998276][ C1] EXT4-fs (loop2): initial error at time 1781602357: ext4_orphan_get:1423 [ 355.007062][ C1] EXT4-fs (loop2): last error at time 1781602357: ext4_orphan_get:1423 [ 355.023391][ T7348] ext4_test_bit(bit=14, block=5) = 0 [ 355.096720][ T7348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.538075][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.960715][ T7361] capability: warning: `syz.2.474' uses 32-bit capabilities (legacy support in use) [ 356.844186][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 357.602113][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 357.702403][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.734835][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.776378][ T7307] bridge_slave_0: entered allmulticast mode [ 357.832380][ T7307] bridge_slave_0: entered promiscuous mode [ 357.914621][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.976794][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.977045][ T4877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.998912][ T4877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.013280][ T4877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.020465][ T7307] bridge_slave_1: entered allmulticast mode [ 358.048433][ T4877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.065273][ T4877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.091480][ T7307] bridge_slave_1: entered promiscuous mode [ 358.152216][ T7384] loop0: detected capacity change from 0 to 164 [ 358.761561][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.872547][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.379918][ T7307] team0: Port device team_slave_0 added [ 359.461467][ T7307] team0: Port device team_slave_1 added [ 359.895304][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.917926][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.998356][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.037677][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.068655][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.164881][ T4877] Bluetooth: hci4: command tx timeout [ 360.203391][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.868211][ T7307] hsr_slave_0: entered promiscuous mode [ 360.920059][ T7307] hsr_slave_1: entered promiscuous mode [ 360.947018][ T7307] debugfs: 'hsr0' already exists in 'hsr' [ 360.974945][ T7307] Cannot create hsr debugfs directory [ 362.246365][ T4877] Bluetooth: hci4: command tx timeout [ 362.260641][ T7410] loop5: detected capacity change from 0 to 512 [ 362.307071][ T7410] vfat: Unknown parameter 'shortnamoEË°C1Foéd' [ 362.407738][ T7410] usb usb5: usbfs: process 7410 (syz.5.491) did not claim interface 0 before use [ 362.595466][ T7381] gre0 speed is unknown, defaulting to 1000 [ 363.351168][ T7414] vlan2: entered allmulticast mode [ 363.404297][ T7414] veth0_to_bond: entered allmulticast mode [ 363.706623][ T7307] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 363.835145][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.887890][ T7307] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 364.019017][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.062456][ T7307] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.186621][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.229724][ T7307] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.322237][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.330236][ T4877] Bluetooth: hci4: command tx timeout [ 364.360881][ T7419] netlink: 144 bytes leftover after parsing attributes in process `syz.5.496'. [ 366.405085][ T4877] Bluetooth: hci4: command tx timeout [ 366.931361][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.546477][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.684365][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.691884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.908776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.916559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.010222][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.033156][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.063799][ T7381] bridge_slave_0: entered allmulticast mode [ 369.118945][ T7381] bridge_slave_0: entered promiscuous mode [ 369.224964][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.261952][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.312398][ T7381] bridge_slave_1: entered allmulticast mode [ 369.359935][ T7381] bridge_slave_1: entered promiscuous mode [ 369.838829][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.934539][ T7450] vlan2: entered allmulticast mode [ 369.946250][ T7450] veth0_to_bond: entered allmulticast mode [ 370.024609][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.465916][ T7454] loop2: detected capacity change from 0 to 256 [ 370.514842][ T7381] team0: Port device team_slave_0 added [ 370.615240][ T7381] team0: Port device team_slave_1 added [ 371.092922][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.115904][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.265992][ T7381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.366802][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.399167][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.483691][ T7381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.122963][ T7381] hsr_slave_0: entered promiscuous mode [ 372.194694][ T7381] hsr_slave_1: entered promiscuous mode [ 372.231034][ T7381] debugfs: 'hsr0' already exists in 'hsr' [ 372.255147][ T7381] Cannot create hsr debugfs directory [ 373.151543][ T7472] loop0: detected capacity change from 0 to 128 [ 373.311578][ T7472] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.477932][ T7472] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 374.554726][ T5582] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.979657][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.757337][ T7381] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 375.929994][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.009349][ T7381] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 376.149539][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.239889][ T7381] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 376.349384][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.398353][ T7381] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 376.419347][ T7484] loop0: detected capacity change from 0 to 256 [ 376.571951][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.383612][ T7488] vlan3: entered allmulticast mode [ 377.413583][ T7488] veth0_to_bond: entered allmulticast mode [ 378.290164][ T7494] loop2: detected capacity change from 0 to 1024 [ 378.359333][ T7494] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 378.522789][ T7494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.597761][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.776469][ T29] audit: type=1800 audit(1781602381.138:14): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 378.962501][ T7381] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.218354][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.287907][ T7307] veth0_vlan: entered promiscuous mode [ 379.397501][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.405103][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.560501][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.568290][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.830785][ T7307] veth1_vlan: entered promiscuous mode [ 379.890117][ T7505] loop5: detected capacity change from 0 to 512 [ 380.985878][ T7307] veth0_macvtap: entered promiscuous mode [ 381.143372][ T7307] veth1_macvtap: entered promiscuous mode [ 381.204711][ T5594] Bluetooth: hci5: command 0x0406 tx timeout [ 381.512714][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.744222][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.975446][ T1155] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.040724][ T1155] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.088177][ T1155] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.178071][ T1155] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.762825][ T7517] loop2: detected capacity change from 0 to 8192 [ 385.639630][ T7553] netlink: 'syz.0.531': attribute type 4 has an invalid length. [ 385.811617][ T7558] netlink: 'syz.0.531': attribute type 4 has an invalid length. [ 385.962704][ T7559] loop2: detected capacity change from 0 to 512 [ 386.282624][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.881092][ T7565] loop5: detected capacity change from 0 to 512 [ 387.038028][ T7565] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 387.140897][ T7565] EXT4-fs (loop5): 1 truncate cleaned up [ 387.188129][ T7565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.429070][ T7573] loop2: detected capacity change from 0 to 512 [ 387.437316][ T7570] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 387.578565][ T7570] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 387.869877][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.378775][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.388064][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.711068][ T7381] veth0_vlan: entered promiscuous mode [ 390.910306][ T7381] veth1_vlan: entered promiscuous mode [ 391.598300][ T7381] veth0_macvtap: entered promiscuous mode [ 391.761087][ T7381] veth1_macvtap: entered promiscuous mode [ 392.221114][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.632354][ T7621] loop5: detected capacity change from 0 to 512 [ 392.716032][ T7621] EXT4-fs: Ignoring removed oldalloc option [ 392.776685][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.793673][ T7621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.912416][ T7621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.945283][ T7621] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.013213][ T5708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.071236][ T5708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.591386][ T7629] syzkaller0: entered promiscuous mode [ 393.786453][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.390479][ T136] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.419802][ T136] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.552737][ T136] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.646664][ T136] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.911814][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.968927][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.131084][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.554'. [ 395.198640][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 395.561737][ T7646] loop2: detected capacity change from 0 to 1024 [ 395.633705][ T7646] EXT4-fs: inline encryption not supported [ 395.850689][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.482309][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.947712][ T7671] loop7: detected capacity change from 0 to 2048 [ 398.157954][ T7671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.736038][ T7307] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.535324][ T7690] netlink: 304 bytes leftover after parsing attributes in process `syz.2.565'. [ 400.762026][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.771857][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.904938][ T7699] bridge0: entered allmulticast mode [ 402.400840][ T7715] loop5: detected capacity change from 0 to 1024 [ 402.501834][ T7715] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 402.801269][ T7715] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.573: lblock 2 mapped to illegal pblock 2 (length 1) [ 402.858242][ T7715] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 402.861122][ T7715] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 402.870618][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 402.870709][ C1] EXT4-fs (loop5): initial error at time 1781602405: ext4_map_blocks:791: inode 3: block 2 [ 402.870896][ C1] EXT4-fs (loop5): last error at time 1781602405: ext4_map_blocks:791: inode 3: block 2 [ 403.110918][ T7715] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.573: lblock 0 mapped to illegal pblock 48 (length 1) [ 403.263468][ T7715] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 403.274620][ T7715] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 403.418445][ T7715] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.573: Failed to acquire dquot type 0 [ 403.515802][ T7728] loop7: detected capacity change from 0 to 512 [ 403.526249][ T7715] loop5: lost filesystem error report for type 5 error -117 [ 403.528632][ T7715] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 403.633052][ T7728] EXT4-fs (loop7): orphan cleanup on readonly fs [ 403.637636][ T7715] loop5: lost filesystem error report for type 5 error -117 [ 403.646888][ T7728] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.577: ea_inode with extended attributes [ 403.721041][ T7715] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.573: mark_inode_dirty error [ 403.747723][ T7728] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 403.754044][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 403.770178][ C0] EXT4-fs (loop7): initial error at time 1781602406: ext4_xattr_inode_iget:441: inode 11 [ 403.780407][ C0] EXT4-fs (loop7): last error at time 1781602406: ext4_xattr_inode_iget:441: inode 11 [ 403.793298][ T7728] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.577: error while reading EA inode 11 err=-117 [ 403.833342][ T7728] loop7: lost filesystem error report for type 5 error -117 [ 403.837339][ T7728] EXT4-fs (loop7): 1 orphan inode deleted [ 403.851825][ T7715] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 403.854362][ T7715] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 403.930365][ T7728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 403.949729][ T7715] EXT4-fs (loop5): 1 orphan inode deleted [ 403.977543][ T12] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 404.033675][ T7715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.080750][ T12] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 404.083630][ T12] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 404.189620][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 404.292962][ T7715] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm syz.5.573: lblock 1 mapped to illegal pblock 1 (length 1) [ 404.427626][ T7715] Quota error (device loop5): find_next_id: Can't read quota tree block 1 [ 404.454112][ T7734] loop0: detected capacity change from 0 to 128 [ 404.617710][ T7307] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.638455][ T7734] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.765743][ T738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.780057][ T7734] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.852830][ T738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.073756][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.113833][ T6360] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 405.187340][ T7734] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.579: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 405.231764][ T6360] loop5: lost filesystem error report for type 5 error -117 [ 405.232572][ T6360] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 405.256579][ T738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.272494][ T738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.309257][ T7734] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 405.318699][ T6360] loop5: lost filesystem error report for type 5 error -117 [ 405.321731][ T6360] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 405.421224][ T6360] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 405.872664][ T5582] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.226189][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.582'. [ 406.802873][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.7.584'. [ 407.858963][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.587'. [ 409.719831][ T7781] loop7: detected capacity change from 0 to 2048 [ 409.781965][ T7784] loop0: detected capacity change from 0 to 512 [ 409.840390][ T7781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.986943][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.597'. [ 410.006592][ T7784] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.596: bad orphan inode 13 [ 410.111558][ T7784] loop0: lost filesystem error report for type 5 error -117 [ 410.113986][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 410.128077][ C1] EXT4-fs (loop0): initial error at time 1781602412: ext4_orphan_get:1423 [ 410.137253][ C1] EXT4-fs (loop0): last error at time 1781602412: ext4_orphan_get:1423 [ 410.147347][ T7784] ext4_test_bit(bit=12, block=4) = 1 [ 410.181623][ T7784] is_bad_inode(inode)=0 [ 410.195098][ T7784] NEXT_ORPHAN(inode)=0 [ 410.219578][ T7784] max_ino=32 [ 410.253656][ T7784] i_nlink=1 [ 410.311695][ T7784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.517436][ T7784] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.596: Hash code is SIPHASH, but hash not in dirent [ 410.612586][ T7784] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.596: Corrupt directory, running e2fsck is recommended [ 410.715899][ T7307] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.727401][ T7784] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.596: Hash code is SIPHASH, but hash not in dirent [ 410.818793][ T7784] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.596: Corrupt directory, running e2fsck is recommended [ 411.329363][ T7791] loop2: detected capacity change from 0 to 8192 [ 411.469519][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.882436][ T7802] loop5: detected capacity change from 0 to 512 [ 411.963258][ T7802] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.068438][ T7802] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 412.138766][ T7802] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.601: attempt to clear invalid blocks 2 len 1 [ 412.216435][ T7802] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 412.224010][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 412.240265][ C0] EXT4-fs (loop5): initial error at time 1781602414: ext4_clear_blocks:876: inode 13 [ 412.250178][ C0] EXT4-fs (loop5): last error at time 1781602414: ext4_clear_blocks:876: inode 13 [ 412.260770][ T7802] EXT4-fs (loop5): Remounting filesystem read-only [ 412.296023][ T7802] EXT4-fs (loop5): 1 truncate cleaned up [ 412.375620][ T7802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.459636][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.843029][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.086973][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.121770][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.186805][ T29] audit: type=1326 audit(1781602415.558:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 413.364813][ T29] audit: type=1326 audit(1781602415.568:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 413.398715][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.523289][ T7813] loop0: detected capacity change from 0 to 512 [ 413.546407][ T29] audit: type=1326 audit(1781602415.638:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 413.711162][ T29] audit: type=1326 audit(1781602415.648:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 413.711758][ T7813] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.606: bad orphan inode 15 [ 413.746325][ T29] audit: type=1326 audit(1781602415.648:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71561ab code=0x7ffc0000 [ 413.777086][ T29] audit: type=1326 audit(1781602415.668:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71561ab code=0x7ffc0000 [ 413.802200][ T29] audit: type=1326 audit(1781602415.668:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 413.848778][ T7813] loop0: lost filesystem error report for type 5 error -117 [ 413.854031][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 413.868283][ C0] EXT4-fs (loop0): initial error at time 1781602416: ext4_orphan_get:1423 [ 413.877257][ C0] EXT4-fs (loop0): last error at time 1781602416: ext4_orphan_get:1423 [ 413.886663][ T7813] ext4_test_bit(bit=14, block=18) = 1 [ 413.892284][ T7813] is_bad_inode(inode)=0 [ 413.973608][ T29] audit: type=1326 audit(1781602415.688:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 413.999690][ T7813] NEXT_ORPHAN(inode)=1023 [ 414.028098][ T7813] max_ino=32 [ 414.078713][ T7813] i_nlink=0 [ 414.094179][ T7813] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.606: corrupted xattr block 19: invalid header [ 414.184853][ T7813] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 414.186270][ T7813] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 414.197719][ T29] audit: type=1326 audit(1781602415.688:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 414.389089][ T7813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 414.470365][ T29] audit: type=1326 audit(1781602415.718:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.2.604" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 414.548163][ T7813] ext4 filesystem being mounted at /168/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 414.892033][ T14] bridge_slave_1: left allmulticast mode [ 414.924955][ T14] bridge_slave_1: left promiscuous mode [ 414.983188][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.087816][ T14] bridge_slave_0: left allmulticast mode [ 415.131068][ T14] bridge_slave_0: left promiscuous mode [ 415.180718][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.710682][ T7832] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 415.803314][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.613'. [ 416.030916][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054905a00: rx timeout, send abort [ 416.531613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054905c00: rx timeout, send abort [ 416.542370][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054905a00: abort rx timeout. Force session deactivation [ 416.942190][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.989736][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.040374][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054905c00: abort rx timeout. Force session deactivation [ 417.063480][ T14] bond0 (unregistering): Released all slaves [ 417.350567][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 417.617546][ T7840] bridge_slave_0: left allmulticast mode [ 417.623422][ T7840] bridge_slave_0: left promiscuous mode [ 417.700364][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.801950][ T7840] bridge_slave_1: left allmulticast mode [ 417.872345][ T7840] bridge_slave_1: left promiscuous mode [ 417.895144][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.030209][ T7840] bond0: (slave bond_slave_0): Releasing backup interface [ 418.210349][ T7853] loop5: detected capacity change from 0 to 512 [ 418.233369][ T7840] bond0: (slave bond_slave_1): Releasing backup interface [ 418.297986][ T7853] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 418.441246][ T7853] EXT4-fs (loop5): 1 truncate cleaned up [ 418.458541][ T7853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.563005][ T7840] team0: Port device team_slave_0 removed [ 418.665767][ T7853] loop5: detected capacity change from 512 to 0 [ 418.667123][ C1] I/O error, dev loop5, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 418.696982][ T7861] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.622: reading directory lblock 0 [ 418.787245][ T7861] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 418.832015][ T7861] EXT4-fs (loop5): I/O error while writing superblock [ 418.855584][ T7840] team0: Port device team_slave_1 removed [ 418.975196][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.020898][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.102982][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 419.103054][ T29] audit: type=1326 audit(1781602421.478:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.139829][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.180235][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.258487][ T6360] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 419.285719][ T7840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.289002][ T29] audit: type=1326 audit(1781602421.538:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.385536][ T6360] EXT4-fs error (device loop5): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block [ 419.401510][ T7865] loop0: detected capacity change from 0 to 128 [ 419.431691][ T29] audit: type=1326 audit(1781602421.538:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.451303][ T6360] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 419.506626][ T29] audit: type=1326 audit(1781602421.538:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.538953][ T7865] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.556160][ T7865] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 419.581185][ T6360] EXT4-fs (loop5): I/O error while writing superblock [ 419.649208][ T6360] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: IO failure [ 419.660896][ T29] audit: type=1326 audit(1781602421.548:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.691690][ T29] audit: type=1326 audit(1781602421.548:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.702253][ T6360] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 419.717914][ T29] audit: type=1326 audit(1781602421.558:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.751004][ T29] audit: type=1326 audit(1781602421.558:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.798263][ T29] audit: type=1326 audit(1781602421.558:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.838435][ T6360] EXT4-fs (loop5): I/O error while writing superblock [ 419.867523][ T6360] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz-executor: mark_inode_dirty error [ 419.930189][ T29] audit: type=1326 audit(1781602421.558:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.625" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 419.958160][ T6360] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 419.992764][ T6360] EXT4-fs (loop5): I/O error while writing superblock [ 420.324230][ T1010] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:7: unable to read itable block [ 420.426514][ T1010] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 420.473446][ T1010] EXT4-fs (loop5): I/O error while writing superblock [ 420.603384][ T6360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.663358][ T6360] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 420.752417][ T6360] EXT4-fs (loop5): I/O error while writing superblock [ 420.868037][ T5582] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.582859][ T14] hsr_slave_0: left promiscuous mode [ 421.639659][ T14] hsr_slave_1: left promiscuous mode [ 421.692086][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.754789][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.799149][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.856742][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.371252][ T14] veth1_macvtap: left promiscuous mode [ 422.485389][ T14] veth0_macvtap: left promiscuous mode [ 422.531330][ T14] veth1_vlan: left promiscuous mode [ 422.579110][ T14] veth0_vlan: left promiscuous mode [ 424.337449][ T14] team0 (unregistering): Port device team_slave_1 removed [ 424.408271][ T14] team0 (unregistering): Port device team_slave_0 removed [ 425.661688][ T5232] 8021q: adding VLAN 0 to HW filter on device eth5 [ 426.317959][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.345279][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.355855][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.372773][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.388973][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.638483][ T7893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.924852][ T7893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.176564][ T7893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.347323][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.370923][ T7921] loop8: detected capacity change from 0 to 4096 [ 427.379582][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.412750][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.453095][ T7893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.453814][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.544730][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.549659][ T7921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.552573][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.589733][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.598208][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.606567][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.615263][ T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 427.645097][ T9] hid-generic 0006:0008:0008.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 427.684141][ T7930] loop0: detected capacity change from 0 to 512 [ 427.714565][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 427.714641][ T29] audit: type=1800 audit(1781602430.078:44): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.641" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 427.935286][ T7930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.055894][ T7930] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.209499][ T7893] bridge_slave_1: left allmulticast mode [ 428.261295][ T7893] bridge_slave_1: left promiscuous mode [ 428.353490][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.490187][ T5594] Bluetooth: hci2: command tx timeout [ 428.508342][ T7893] bridge_slave_0: left allmulticast mode [ 428.582592][ T7893] bridge_slave_0: left promiscuous mode [ 428.636654][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.696305][ T7381] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.911620][ T7937] fido_id[7937]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 429.220798][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.498604][ T7893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.564380][ T5594] Bluetooth: hci2: command tx timeout [ 430.608278][ T7893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.668921][ T7893] bond0 (unregistering): Released all slaves [ 431.331187][ T7969] loop0: detected capacity change from 0 to 256 [ 432.339347][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 432.468009][ T7982] netlink: 56 bytes leftover after parsing attributes in process `syz.2.656'. [ 432.645700][ T5594] Bluetooth: hci2: command tx timeout [ 433.129354][ T7893] hsr_slave_0: left promiscuous mode [ 433.156814][ T7893] hsr_slave_1: left promiscuous mode [ 433.203040][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.254636][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.310929][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.341976][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.496621][ T7893] veth1_macvtap: left promiscuous mode [ 433.526421][ T7893] veth0_macvtap: left promiscuous mode [ 433.550255][ T7893] veth1_vlan: left promiscuous mode [ 433.563575][ T7893] veth0_vlan: left promiscuous mode [ 434.297329][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 434.726471][ T5594] Bluetooth: hci2: command tx timeout [ 435.212252][ T7893] team0 (unregistering): Port device team_slave_1 removed [ 435.302681][ T7893] team0 (unregistering): Port device team_slave_0 removed [ 436.010302][ T7914] gre0 speed is unknown, defaulting to 1000 [ 436.887058][ T5708] ===================================================== [ 436.894346][ T5708] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 436.902883][ T5708] n_tty_receive_buf_standard+0xd32/0xc780 [ 436.909077][ T5708] n_tty_receive_buf_common+0x1a63/0x25a0 [ 436.915146][ T5708] n_tty_receive_buf2+0x4c/0x60 [ 436.920755][ T5708] tty_ldisc_receive_buf+0xc6/0x2c0 [ 436.926389][ T5708] tty_port_default_receive_buf+0xd7/0x1a0 [ 436.932458][ T5708] flush_to_ldisc+0x43e/0xe40 [ 436.937469][ T5708] process_scheduled_works+0xb65/0x1e40 [ 436.943190][ T5708] worker_thread+0xee4/0x1590 [ 436.948520][ T5708] kthread+0x53a/0x5f0 [ 436.952818][ T5708] ret_from_fork+0x20f/0x8d0 [ 436.957659][ T5708] ret_from_fork_asm+0x1a/0x30 [ 436.962591][ T5708] [ 436.965104][ T5708] Uninit was stored to memory at: [ 436.970421][ T5708] n_tty_receive_buf_standard+0xd2b/0xc780 [ 436.976573][ T5708] n_tty_receive_buf_common+0x1a63/0x25a0 [ 436.987957][ T5708] n_tty_receive_buf2+0x4c/0x60 [ 436.994540][ T5708] tty_ldisc_receive_buf+0xc6/0x2c0 [ 437.000195][ T5708] tty_port_default_receive_buf+0xd7/0x1a0 [ 437.006352][ T5708] flush_to_ldisc+0x43e/0xe40 [ 437.011273][ T5708] process_scheduled_works+0xb65/0x1e40 [ 437.017645][ T5708] worker_thread+0xee4/0x1590 [ 437.022943][ T5708] kthread+0x53a/0x5f0 [ 437.027764][ T5708] ret_from_fork+0x20f/0x8d0 [ 437.032514][ T5708] ret_from_fork_asm+0x1a/0x30 [ 437.037902][ T5708] [ 437.040354][ T5708] Uninit was created at: [ 437.044923][ T5708] __kmalloc_noprof+0x482/0x1660 [ 437.049995][ T5708] __tty_buffer_request_room+0x3d4/0x7a0 [ 437.055934][ T5708] __tty_insert_flip_string_flags+0x157/0x6e0 [ 437.062204][ T5708] uart_insert_char+0x368/0x930 [ 437.067447][ T5708] serial8250_read_char+0x1ba/0x670 [ 437.072813][ T5708] serial8250_handle_irq_locked+0x6d4/0xa40 [ 437.078993][ T5708] serial8250_handle_irq+0x189/0x710 [ 437.090399][ T5708] serial8250_default_handle_irq+0x116/0x350 [ 437.097912][ T5708] serial8250_interrupt+0xcb/0x3f0 [ 437.103193][ T5708] __handle_irq_event_percpu+0x118/0xf30 [ 437.109096][ T5708] handle_irq_event+0xe0/0x2a0 [ 437.114093][ T5708] handle_edge_irq+0x2a9/0xaf0 [ 437.118998][ T5708] __common_interrupt+0x9d/0x180 [ 437.124297][ T5708] common_interrupt+0x94/0xb0 [ 437.129150][ T5708] asm_common_interrupt+0x2b/0x40 [ 437.134481][ T5708] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 437.136911][ T5708] CPU: 1 UID: 0 PID: 5708 Comm: kworker/u8:11 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 437.148399][ T5708] Tainted: [W]=WARN [ 437.152343][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.162608][ T5708] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 437.168902][ T5708] ===================================================== [ 437.176059][ T5708] Disabling lock debugging due to kernel taint [ 437.559825][ T8002] syzkaller0: entered promiscuous mode [ 437.593714][ T8002] syzkaller0: entered allmulticast mode [ 437.773728][ T8004] tipc: Started in network mode [ 437.783123][ T8004] tipc: Node identity 7e7d1a42fd58, cluster identity 4711 [ 437.822005][ T8004] tipc: Enabled bearer , priority 0 [ 437.929118][ T8002] tipc: Resetting bearer [ 438.060093][ T5708] Kernel panic - not syncing: kmsan.panic set ... [ 438.066672][ T5708] CPU: 1 UID: 0 PID: 5708 Comm: kworker/u8:11 Tainted: G B W syzkaller #0 PREEMPT(lazy) [ 438.078071][ T5708] Tainted: [B]=BAD_PAGE, [W]=WARN [ 438.083191][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.093390][ T5708] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 438.099610][ T5708] Call Trace: [ 438.102967][ T5708] [ 438.105984][ T5708] __dump_stack+0x26/0x30 [ 438.110476][ T5708] dump_stack_lvl+0x50/0x1c0 [ 438.115222][ T5708] ? dump_stack+0x12/0x25 [ 438.119987][ T5708] dump_stack+0x1e/0x25 [ 438.124309][ T5708] vpanic+0x7b4/0x1430 [ 438.128587][ T5708] panic+0x15d/0x160 [ 438.132714][ T5708] kmsan_report+0x31a/0x320 [ 438.137411][ T5708] ? __msan_warning+0x1b/0x30 [ 438.142344][ T5708] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 438.148501][ T5708] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 438.154557][ T5708] ? n_tty_receive_buf2+0x4c/0x60 [ 438.159808][ T5708] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 438.165348][ T5708] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 438.171531][ T5708] ? flush_to_ldisc+0x43e/0xe40 [ 438.176549][ T5708] ? process_scheduled_works+0xb65/0x1e40 [ 438.182424][ T5708] ? worker_thread+0xee4/0x1590 [ 438.187420][ T5708] ? kthread+0x53a/0x5f0 [ 438.191843][ T5708] ? ret_from_fork+0x20f/0x8d0 [ 438.196744][ T5708] ? ret_from_fork_asm+0x1a/0x30 [ 438.201898][ T5708] ? ret_from_fork_asm+0x1a/0x30 [ 438.207001][ T5708] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 438.213507][ T5708] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 438.219753][ T5708] ? uart_start+0x2aa/0x590 [ 438.224420][ T5708] ? kmsan_get_metadata+0x146/0x160 [ 438.229800][ T5708] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 438.235795][ T5708] ? n_tty_receive_char+0xf83/0x14a0 [ 438.241248][ T5708] ? kmsan_get_metadata+0xf1/0x160 [ 438.246550][ T5708] __msan_warning+0x1b/0x30 [ 438.251226][ T5708] n_tty_receive_buf_standard+0xd32/0xc780 [ 438.257262][ T5708] ? kmsan_get_metadata+0xf1/0x160 [ 438.262556][ T5708] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 438.268555][ T5708] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 438.275058][ T5708] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 438.281318][ T5708] n_tty_receive_buf_common+0x1a63/0x25a0 [ 438.287296][ T5708] n_tty_receive_buf2+0x4c/0x60 [ 438.292298][ T5708] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 438.297989][ T5708] tty_ldisc_receive_buf+0xc6/0x2c0 [ 438.303383][ T5708] tty_port_default_receive_buf+0xd7/0x1a0 [ 438.309386][ T5708] flush_to_ldisc+0x43e/0xe40 [ 438.314252][ T5708] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 438.320887][ T5708] ? __pfx_flush_to_ldisc+0x10/0x10 [ 438.326287][ T5708] process_scheduled_works+0xb65/0x1e40 [ 438.332076][ T5708] worker_thread+0xee4/0x1590 [ 438.336950][ T5708] kthread+0x53a/0x5f0 [ 438.341188][ T5708] ? __pfx_worker_thread+0x10/0x10 [ 438.346472][ T5708] ? __pfx_kthread+0x10/0x10 [ 438.351224][ T5708] ret_from_fork+0x20f/0x8d0 [ 438.355959][ T5708] ? __switch_to+0x573/0x7a0 [ 438.360726][ T5708] ? __pfx_kthread+0x10/0x10 [ 438.365485][ T5708] ret_from_fork_asm+0x1a/0x30 [ 438.370445][ T5708] [ 438.373888][ T5708] Kernel Offset: disabled [ 438.378257][ T5708] Rebooting in 86400 seconds..