last executing test programs: 6m9.470643742s ago: executing program 3 (id=101): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000400)={0x0, 0x8de, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x5) 6m8.746748664s ago: executing program 3 (id=106): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400000000000000", @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r3, &(0x7f0000000780)="fb", 0x1) 6m8.099399401s ago: executing program 3 (id=108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 6m7.070983195s ago: executing program 3 (id=112): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)=0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfa", 0x8f, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 6m1.868480186s ago: executing program 3 (id=129): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x18c6) 6m0.40080715s ago: executing program 3 (id=137): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x7fffffe, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 5m45.216153684s ago: executing program 32 (id=137): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x7fffffe, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2m35.491838099s ago: executing program 1 (id=867): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4dc50, 0x40020}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4850) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2m34.744319684s ago: executing program 1 (id=870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 2m34.191644252s ago: executing program 1 (id=873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 2m33.730417045s ago: executing program 1 (id=877): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$eJzs3U1vG1sZAODXzpeTm3uTW7oABLSUQkFVncRto6oLKCuEUCVElyC1IXGjKHYcxU5pQhfpf0CiEitY8gNYd8WeDYIdm7JA4iMCNZVYGM14kpo0bkKT2CF+Hmk0c+Y4fs+pNefYr+s5AfStyxGxFRHDEfEoIiay87lsi3utLXnc6+1n8zvbz+Zz0Ww++HsurU/ORdvfJD7KnrMQET/4TsSPc+/GrW9sLs9VKuW1VnF0qlFdnapvbN5Yqs4tlhfLK6XS7Mzs9J2bt0sn1tdL1eHs6Iuvfrf1jZ8mzRrPzrT34yS1uj60FycxGBHfO41gPTCQ9We41w3hg+Qj4kJEXEmv/4kYSF9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXDuxhj+Uqt3rj+uLa+stDKlU3GUP7xUqU8neUKJ2Mol5Rn0uO35dK+8s2I+DQifjYympaL87XKQi/f+ABAH/to3/z/r5HW/A8AnHOFXjcAAOg68z8A9B/zPwD0H/M/APQf8z8A9B/zPwD0n8Pm/wPu3wkA/P/6/v37ydbcye5/vfBkY3259uTGQrm+XKyuzxfna2urxcVabTG9Z0/1sOer1GqrM7di/enkN1frjan6xubDam19pfEwva/3w/JQV3oFALzPp5de/jH5eL91dzTdom0tB3M1nG/5XjcA6JmBXjcA6BmrfUH/OsZnfOkBOCcO+y8+hYgY3X+y2Ww2T69JwCm79jn5f+hXbfl/vwKCPiP/D/1L/h/6V7OZO+qa/3HUBwIAZ5scP9Dh+/8L2f7X2ZcDP1rY/4gXp9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONt21/8tZmuBj0c+XyxGfBwRkzGUe7xUKU9HxCcR8YeRoZGkPNPjNgMAx5X/Sy5b/+vaxNXx/bXDuTcj6T4ifvKLBz9/OtdorP0+Of+PvfONF9n5Ui/aDwAcZneeTvdtH+Rfbz+b39262Z6/fjsiCq34O9vDsbMXfzAG030hhiJi7J+5rNySa8tdHMfW84j47EH9z8V4mgNprXy6P34S++Ouxs//V/x8WtfaJ/8WnzmBtkC/eZmMP/cOuv7ycTndH3z9F9IR6viy8S95qvmddAx8G393/BvoMP5dPmqMW7/9buto9N265xGfH4zYjb3TNv7sxs91iH/1iPH/9IUvXelU1/xlxLU4OH57rKlGdXWqvrF5Y6k6t1heLK+USrMzs9N3bt4uTaU56qnOs8Hf7l7/pFNd0v+xDvELh/T/q0fs/6/+/eiHX35P/K9/5aD4+bj4nvjJnPi1I8afG/tNoVNdEn+hQ/8Pe/2vHzH+qz9vvrNsOADQO/WNzeW5SqW81s2D3TcSXQ3q4BwctBIeibPRnvaDb3Ur1nD8T3/VbH5QrE4jxklk3YCzYO+ij4g3vW4MAAAAAAAAAAAAAABwoG78YqnXfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8+k8AAAD//2CSzDE=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x25}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 2m32.273663011s ago: executing program 1 (id=883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 2m31.594198764s ago: executing program 1 (id=886): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) setreuid(0xee01, 0xee01) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xff, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x1000000a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x40001810) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2m28.46601413s ago: executing program 33 (id=886): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) setreuid(0xee01, 0xee01) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xff, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x1000000a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x40001810) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2m9.060083995s ago: executing program 5 (id=946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) setuid(0x0) 2m8.34158352s ago: executing program 5 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x3, 0x3c) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m5.076137303s ago: executing program 5 (id=956): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2m4.217369969s ago: executing program 5 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) 2m3.786552435s ago: executing program 5 (id=961): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), 0x0}, 0x20) writev(r0, 0x0, 0x0) 2m3.169874733s ago: executing program 5 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r2, 0x0, 0x0, 0x24000080, 0x0, 0x0) 1m58.859344194s ago: executing program 6 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1m57.652311612s ago: executing program 6 (id=983): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1m56.489548109s ago: executing program 6 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m55.825812618s ago: executing program 6 (id=987): symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m55.067644018s ago: executing program 6 (id=992): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000480)=@gcm_256={{0x303}, "890abd3e1be1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "3800f9ff", "bc3a20b10f4ad11e"}, 0x38) close(r0) 1m54.282105541s ago: executing program 6 (id=997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1m47.826024567s ago: executing program 34 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r2, 0x0, 0x0, 0x24000080, 0x0, 0x0) 1m38.825761006s ago: executing program 35 (id=997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 8.406167735s ago: executing program 2 (id=1400): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000894) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.93429938s ago: executing program 2 (id=1409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x20000000) 4.802763053s ago: executing program 8 (id=1415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x24044815, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000700)=0x8) 4.775874845s ago: executing program 2 (id=1416): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=@newtfilter={0x3c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 4.376773028s ago: executing program 0 (id=1418): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x0, @private2, 0x9}}, 0x0, 0xfffe}, 0x90) 4.088283572s ago: executing program 8 (id=1419): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000894) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.829389397s ago: executing program 2 (id=1421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x3c, r1, 0x60b, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008051}, 0x8d0) 3.74635079s ago: executing program 0 (id=1422): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f0000001100)=""/4029, 0xfbd}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f0000000240)=""/56, 0x38}], 0x9}, 0x2000) 3.495753116s ago: executing program 8 (id=1424): openat$dir(0xffffffffffffff9c, 0x0, 0x4001, 0x20) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="4535ddc1f792eb8ec5da434ecd56", 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.360574039s ago: executing program 2 (id=1425): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2c}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0xa, "1aef"}, @global=@item_012={0x1, 0x1, 0x1, "b4"}]}}, 0x0}, 0x0) 3.14224946s ago: executing program 4 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) clock_getres(0x6, 0x0) 2.725268551s ago: executing program 4 (id=1428): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000240)=ANY=[], 0x0) 2.565604679s ago: executing program 8 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 2.498554305s ago: executing program 7 (id=1430): close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4e00330080000000fff7ffffffff08021100000050501050505000000000000000000000000000000006020202020202030100040600080000000005030000003c0400000000760600000000000000000400cd53fe816300dabb07c5e284180bc01944dad06966bc8b8665e97e30a478b8d4f8c11be36ffb902f14406ca33574b2afe19152b29af981b5f22c560a025301d9dbce78d362ce688dda48e0f598a0a13b4b864ff367d594985870162dd7d822010454b673cff4de9a187ff7c4d2f2afdfeb92bc7dd812cdb06f9aa6c75166d5b9f49c089816"], 0x70}}, 0x0) 2.44976019s ago: executing program 0 (id=1431): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x21}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2.19494805s ago: executing program 4 (id=1432): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=@newtfilter={0x3c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.045138085s ago: executing program 0 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000008000080000000e1c232979b000400"]) 1.974444558s ago: executing program 8 (id=1434): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000894) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.93048796s ago: executing program 7 (id=1435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x3c, r1, 0x60b, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008051}, 0x8d0) 1.54575685s ago: executing program 4 (id=1436): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 1.386036019s ago: executing program 7 (id=1437): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x68, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 1.201731783s ago: executing program 0 (id=1438): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.193270228s ago: executing program 8 (id=1439): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x9) 855.450545ms ago: executing program 7 (id=1440): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 576.711979ms ago: executing program 4 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x29, 0xb0, 0x0, 0x0, 0x2, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty}, {0x4e1f, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1000, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 573.439672ms ago: executing program 0 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x5, 0x8}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x20000000) 412.878249ms ago: executing program 2 (id=1443): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x4851) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x400c0d1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000005000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/218, 0xda, 0x0, 0x0}, &(0x7f0000000040)=0x40) 222.246393ms ago: executing program 7 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 43.389856ms ago: executing program 7 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4e00330080000000fff7ffffffff08021100000050501050505000000000000000000000000000000006020202020202030100040600080000000005030000003c0400000000760600000000000000000400cd53fe816300dabb07c5e284180bc01944dad06966bc8b8665e97e30a478b8d4f8c11be36ffb902f14406ca33574b2afe19152b29af981b5f22c560a025301d9dbce78d362ce688dda48e0f598a0a13b4b864ff367d594985870162dd7d822010454b673cff4de9a187ff7c4d2f2afdfeb92bc7dd812cdb06f9aa6c75166d5b9f49c089816"], 0x70}}, 0x0) 0s ago: executing program 4 (id=1446): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="75c925cc", 0x1a000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) kernel console output (not intermixed with test programs): cast mode [ 378.957907][ T7211] veth1: entered allmulticast mode [ 378.972499][ T7211] veth0_to_bridge: entered allmulticast mode [ 378.993783][ T7211] veth1_to_bridge: entered allmulticast mode [ 379.021635][ T7211] veth0_to_bond: entered allmulticast mode [ 379.043553][ T7211] veth1_to_bond: entered allmulticast mode [ 379.070995][ T7211] veth0_to_team: entered allmulticast mode [ 379.092112][ T7211] veth1_to_team: entered allmulticast mode [ 379.116781][ T7211] veth0_to_batadv: entered allmulticast mode [ 379.131118][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.142108][ T7211] batadv_slave_0: entered allmulticast mode [ 379.165619][ T7211] veth1_to_batadv: entered allmulticast mode [ 379.179988][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.187981][ T7211] batadv_slave_1: entered allmulticast mode [ 379.201326][ T7211] xfrm0: entered allmulticast mode [ 379.214358][ T7211] veth0_to_hsr: entered allmulticast mode [ 379.228271][ T7211] hsr_slave_0: entered allmulticast mode [ 379.239219][ T7211] veth1_to_hsr: entered allmulticast mode [ 379.263612][ T7211] hsr_slave_1: entered allmulticast mode [ 379.277138][ T7211] hsr0: entered allmulticast mode [ 379.289734][ T7211] veth1_virt_wifi: entered allmulticast mode [ 379.302826][ T7211] veth0_virt_wifi: entered allmulticast mode [ 379.316245][ T7211] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 379.325314][ T7211] veth1_vlan: entered allmulticast mode [ 379.344257][ T7211] veth0_vlan: entered allmulticast mode [ 379.393635][ T7211] vlan0: entered allmulticast mode [ 379.400178][ T7211] vlan1: entered allmulticast mode [ 379.408009][ T7211] macvlan0: entered allmulticast mode [ 379.422774][ T7211] macvlan1: entered allmulticast mode [ 379.437655][ T7211] ipvlan0: entered allmulticast mode [ 379.444587][ T7211] ipvlan1: entered allmulticast mode [ 379.470098][ T7211] veth0_macvtap: entered allmulticast mode [ 379.547589][ T7211] macvtap0: entered allmulticast mode [ 379.561680][ T7211] macsec0: left promiscuous mode [ 379.590274][ T7211] geneve0: entered allmulticast mode [ 379.606262][ T7211] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.617888][ T7211] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.627241][ T7211] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.636686][ T7211] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.647035][ T7211] geneve1: entered allmulticast mode [ 379.660579][ T7211] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 379.685023][ T7211] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 379.716967][ T7211] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 379.730491][ T7211] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 379.779591][ T7211] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 379.818775][ T7211] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 380.844940][ T30] audit: type=1326 audit(1741592496.987:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 380.868188][ T30] audit: type=1326 audit(1741592496.987:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 380.891035][ T30] audit: type=1326 audit(1741592496.997:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 380.915898][ T30] audit: type=1326 audit(1741592496.997:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 380.939807][ T30] audit: type=1326 audit(1741592496.997:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 380.963097][ T30] audit: type=1326 audit(1741592497.017:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 380.985720][ T30] audit: type=1326 audit(1741592497.017:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 381.010879][ T30] audit: type=1326 audit(1741592497.037:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 381.404354][ T30] audit: type=1326 audit(1741592497.207:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 381.429763][ T30] audit: type=1326 audit(1741592497.217:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 381.926782][ T7254] loop1: detected capacity change from 0 to 256 [ 382.127406][ T7254] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 382.138220][ T7254] FAT-fs (loop1): Filesystem has been set read-only [ 382.153845][ T7260] netlink: 300 bytes leftover after parsing attributes in process `syz.5.438'. [ 382.270758][ T7254] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 382.377154][ T7254] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 384.084210][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 384.195433][ T7285] netlink: 'syz.1.443': attribute type 3 has an invalid length. [ 385.774350][ T7307] loop2: detected capacity change from 0 to 256 [ 385.999681][ T7307] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 386.010749][ T7307] FAT-fs (loop2): Filesystem has been set read-only [ 386.090349][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 386.189044][ T7307] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 386.248946][ T7307] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 386.354553][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 387.202786][ T7322] loop5: detected capacity change from 0 to 128 [ 387.380508][ T7322] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.466969][ T7322] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.476201][ T7327] netlink: 'syz.4.460': attribute type 3 has an invalid length. [ 387.691147][ T7322] EXT4-fs error (device loop5): __ext4_find_entry:1652: inode #11: comm syz.5.458: checksumming directory block 0 [ 388.615009][ T6511] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.108311][ T7342] loop1: detected capacity change from 0 to 512 [ 389.120640][ T7342] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.128333][ T7342] EXT4-fs: inline encryption not supported [ 389.181752][ T7342] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.195488][ T7342] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 389.449990][ T7342] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 389.489974][ T7342] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 389.506392][ T7342] System zones: 0-2, 18-18, 34-34 [ 389.517783][ T7342] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.461: couldn't read orphan inode 15 (err -116) [ 389.533259][ T7342] EXT4-fs (loop1): Remounting filesystem read-only [ 389.541992][ T7342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.549402][ T7349] loop0: detected capacity change from 0 to 256 [ 391.446757][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.480050][ T7373] 9pnet: Could not find request transport: 0xffffffffffffffff [ 393.692205][ T7382] loop1: detected capacity change from 0 to 2048 [ 393.967158][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.342944][ T7394] loop9: detected capacity change from 0 to 7 [ 394.391504][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.400523][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.408985][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.422582][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.432434][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.440871][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.449282][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.457520][ T7394] ldm_validate_partition_table(): Disk read failed. [ 394.464542][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.472858][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.481591][ T7394] Buffer I/O error on dev loop9, logical block 0, async page read [ 394.489902][ T7394] Dev loop9: unable to read RDB block 0 [ 394.496155][ T7394] loop9: unable to read partition table [ 394.548061][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.595943][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 394.651370][ T7394] loop9: partition table beyond EOD, truncated [ 394.658165][ T7394] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 394.658165][ T7394] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 394.886743][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.5.483'. [ 395.370000][ T7403] syz.0.485 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 395.543700][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 395.543771][ T30] audit: type=1326 audit(1741592511.687:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 395.668693][ T30] audit: type=1326 audit(1741592511.747:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 395.692129][ T30] audit: type=1326 audit(1741592511.787:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 395.716672][ T30] audit: type=1326 audit(1741592511.787:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 395.739661][ T30] audit: type=1326 audit(1741592511.787:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 396.240642][ T30] audit: type=1326 audit(1741592512.377:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 396.268934][ T30] audit: type=1326 audit(1741592512.387:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 396.293812][ T30] audit: type=1326 audit(1741592512.387:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 396.316805][ T30] audit: type=1326 audit(1741592512.437:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 396.339629][ T30] audit: type=1326 audit(1741592512.447:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 397.058278][ T7424] loop4: detected capacity change from 0 to 128 [ 397.561287][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.497'. [ 399.036422][ T7456] bridge_slave_0: left promiscuous mode [ 399.043423][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.180384][ T7456] bridge_slave_1: left promiscuous mode [ 399.191761][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.391200][ T7456] bond0: (slave bond_slave_0): Releasing backup interface [ 399.578957][ T7456] bond0: (slave bond_slave_1): Releasing backup interface [ 399.688364][ T7456] team0: Port device team_slave_0 removed [ 399.729445][ T7462] loop5: detected capacity change from 0 to 1024 [ 399.754585][ T7464] loop0: detected capacity change from 0 to 128 [ 399.758054][ T7456] team0: Port device team_slave_1 removed [ 399.769482][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.810800][ T7464] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 399.828707][ T7462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.836329][ T7462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.848137][ T7462] ext4: Unknown parameter 'audit' [ 399.863109][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.938945][ T7464] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 400.058524][ T7464] ext2 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 400.335057][ T7464] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.508: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 401.015923][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.209828][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 401.265928][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'. [ 401.279731][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 404.116054][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 404.359538][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'. [ 404.368889][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 406.804329][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 407.340792][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 407.340864][ T30] audit: type=1326 audit(1741592523.487:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.370414][ T30] audit: type=1326 audit(1741592523.487:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.393205][ T30] audit: type=1326 audit(1741592523.517:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.633309][ T7573] loop4: detected capacity change from 0 to 512 [ 407.637338][ T30] audit: type=1326 audit(1741592523.577:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.662945][ T30] audit: type=1326 audit(1741592523.587:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.685769][ T30] audit: type=1326 audit(1741592523.587:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.695379][ T7566] loop0: detected capacity change from 0 to 1024 [ 407.708373][ T30] audit: type=1326 audit(1741592523.607:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f670438d169 code=0x7ffc0000 [ 407.708580][ T30] audit: type=1326 audit(1741592523.607:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f670438d1a3 code=0x7ffc0000 [ 407.708775][ T30] audit: type=1326 audit(1741592523.667:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f670438bc1f code=0x7ffc0000 [ 407.708972][ T30] audit: type=1326 audit(1741592523.817:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f670438d1f7 code=0x7ffc0000 [ 407.782447][ T7572] loop5: detected capacity change from 0 to 1024 [ 407.871127][ T7573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 407.981394][ T7572] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 408.006426][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.010504][ T7572] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 408.041337][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.054793][ T7573] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.166718][ T7572] EXT4-fs (loop5): orphan cleanup on readonly fs [ 408.240994][ T7572] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.545: Invalid inode table block 0 in block_group 0 [ 408.295134][ T7572] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 408.362145][ T7572] EXT4-fs error (device loop5): ext4_quota_write:7299: inode #3: comm syz.5.545: mark_inode_dirty error [ 408.418895][ T7572] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.545: Failed to acquire dquot type 0 [ 408.495173][ T7572] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.545: Invalid inode table block 0 in block_group 0 [ 408.515741][ T7573] IPv6: Can't replace route, no match found [ 408.539380][ T7572] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 408.649500][ T7572] EXT4-fs error (device loop5): ext4_ext_truncate:4457: inode #15: comm syz.5.545: mark_inode_dirty error [ 408.665710][ T7572] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.545: Invalid inode table block 0 in block_group 0 [ 408.735529][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.767646][ T7572] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 408.819944][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.826876][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.847509][ T7572] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 408.886325][ T7572] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.545: Invalid inode table block 0 in block_group 0 [ 408.927306][ T7572] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 409.010079][ T7572] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.545: mark_inode_dirty error [ 409.063770][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.113173][ T7572] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 409.150994][ T7572] EXT4-fs (loop5): 1 truncate cleaned up [ 409.163200][ T7572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.616507][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.134427][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 411.059508][ T7617] loop2: detected capacity change from 0 to 512 [ 411.137173][ T7617] EXT4-fs: Ignoring removed nobh option [ 411.181263][ T7619] loop1: detected capacity change from 0 to 1024 [ 411.254330][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.267809][ T7617] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.385742][ T7619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.754450][ T7628] loop5: detected capacity change from 0 to 1024 [ 411.788716][ T7628] EXT4-fs: inline encryption not supported [ 411.799280][ T7628] ext4: Unknown parameter 'appraise_type' [ 411.954125][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.045546][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.635592][ T7635] loop2: detected capacity change from 0 to 1024 [ 412.792793][ T7635] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 412.882441][ T7635] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 412.996420][ T7635] EXT4-fs (loop2): orphan cleanup on readonly fs [ 413.064864][ T7635] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.561: Invalid inode table block 0 in block_group 0 [ 413.103383][ T7635] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 413.166379][ T7635] EXT4-fs error (device loop2): ext4_quota_write:7299: inode #3: comm syz.2.561: mark_inode_dirty error [ 413.294571][ T7635] __quota_error: 45 callbacks suppressed [ 413.300779][ T7635] Quota error (device loop2): write_blk: dquota write failed [ 413.308825][ T7635] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 413.319298][ T7635] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.561: Failed to acquire dquot type 0 [ 413.420503][ T7635] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.561: Invalid inode table block 0 in block_group 0 [ 413.525096][ T7635] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 413.590612][ T7635] EXT4-fs error (device loop2): ext4_ext_truncate:4457: inode #15: comm syz.2.561: mark_inode_dirty error [ 413.660083][ T7635] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.561: Invalid inode table block 0 in block_group 0 [ 413.736272][ T7635] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 413.805057][ T7635] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 413.836859][ T7635] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.561: Invalid inode table block 0 in block_group 0 [ 413.890132][ T7635] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 413.923724][ T7635] EXT4-fs error (device loop2): ext4_truncate:4240: inode #15: comm syz.2.561: mark_inode_dirty error [ 413.965469][ T7635] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 414.027778][ T7635] EXT4-fs (loop2): 1 truncate cleaned up [ 414.036207][ T7635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 414.315800][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.716627][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 415.989164][ T7665] loop2: detected capacity change from 0 to 256 [ 416.237297][ T30] audit: type=1326 audit(1741592532.387:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.346382][ T30] audit: type=1326 audit(1741592532.407:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.369413][ T30] audit: type=1326 audit(1741592532.407:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.393736][ T30] audit: type=1326 audit(1741592532.417:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.417541][ T30] audit: type=1326 audit(1741592532.427:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.442541][ T30] audit: type=1326 audit(1741592532.427:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.466207][ T30] audit: type=1326 audit(1741592532.467:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 416.489732][ T30] audit: type=1326 audit(1741592532.467:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2026f8d1a3 code=0x7ffc0000 [ 416.574337][ T7671] loop4: detected capacity change from 0 to 1024 [ 416.809154][ T7671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.536801][ T7686] loop5: detected capacity change from 0 to 1024 [ 417.640969][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.708001][ T7686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.842024][ T7688] loop1: detected capacity change from 0 to 1024 [ 417.982510][ T7688] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 418.077376][ T7688] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 418.155961][ T7688] EXT4-fs (loop1): orphan cleanup on readonly fs [ 418.244006][ T7688] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.576: Invalid inode table block 0 in block_group 0 [ 418.312728][ T7688] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 418.376209][ T7688] EXT4-fs error (device loop1): ext4_quota_write:7299: inode #3: comm syz.1.576: mark_inode_dirty error [ 418.471953][ T7688] __quota_error: 24 callbacks suppressed [ 418.472034][ T7688] Quota error (device loop1): write_blk: dquota write failed [ 418.490792][ T7688] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 418.501308][ T7688] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.576: Failed to acquire dquot type 0 [ 418.563492][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.608486][ T7688] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.576: Invalid inode table block 0 in block_group 0 [ 418.735850][ T7688] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 418.768147][ T7688] EXT4-fs error (device loop1): ext4_ext_truncate:4457: inode #15: comm syz.1.576: mark_inode_dirty error [ 418.855762][ T7688] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.576: Invalid inode table block 0 in block_group 0 [ 418.870816][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 418.950022][ T7688] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 419.017572][ T7688] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 419.135230][ T7688] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.576: Invalid inode table block 0 in block_group 0 [ 419.246493][ T7688] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 419.279763][ T7688] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm syz.1.576: mark_inode_dirty error [ 419.345531][ T7688] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 419.400281][ T7688] EXT4-fs (loop1): 1 truncate cleaned up [ 419.408322][ T7688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.791158][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.955681][ T7713] loop5: detected capacity change from 0 to 256 [ 420.038094][ T7713] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 422.466520][ T7743] netlink: 'syz.0.591': attribute type 21 has an invalid length. [ 422.477459][ T7743] netlink: 156 bytes leftover after parsing attributes in process `syz.0.591'. [ 422.488900][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 422.740340][ T7745] loop1: detected capacity change from 0 to 1024 [ 422.952868][ T7745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.126037][ T30] audit: type=1804 audit(1741592539.267:487): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.590" name="/newroot/122/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 423.268254][ T7753] loop0: detected capacity change from 0 to 512 [ 423.399188][ T7753] EXT4-fs: Ignoring removed nobh option [ 423.531985][ T7753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.545595][ T7753] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.907337][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.158734][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.890409][ T7770] loop4: detected capacity change from 0 to 512 [ 425.002219][ T7770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 425.129086][ T7770] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 425.289950][ T7770] EXT4-fs (loop4): 1 truncate cleaned up [ 425.299249][ T7770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.485337][ T7770] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 425.617369][ T7770] EXT4-fs (loop4): Remounting filesystem read-only [ 425.624391][ T7770] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 426.027795][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.527910][ T7798] netlink: 'syz.4.604': attribute type 21 has an invalid length. [ 426.536402][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.4.604'. [ 426.545984][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 426.720650][ T7799] loop1: detected capacity change from 0 to 512 [ 426.762110][ T7799] EXT4-fs: Ignoring removed nobh option [ 426.987826][ T7799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.001216][ T7799] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.249792][ T7811] netlink: 'syz.0.609': attribute type 27 has an invalid length. [ 427.833181][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.894391][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.904253][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.145527][ T30] audit: type=1326 audit(1741592544.247:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 428.150024][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.168564][ T30] audit: type=1326 audit(1741592544.247:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 428.193916][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.351057][ T30] audit: type=1326 audit(1741592544.497:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 428.375222][ T30] audit: type=1326 audit(1741592544.497:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 428.400203][ T30] audit: type=1326 audit(1741592544.497:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 428.696279][ T7811] veth1_macvtap: left allmulticast mode [ 428.702969][ T7811] macsec0: left promiscuous mode [ 428.709063][ T7811] macsec0: left allmulticast mode [ 428.815640][ T7811] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.835966][ T7811] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.845479][ T7811] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.854856][ T7811] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.929318][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 429.170472][ T7811] macsec1: left allmulticast mode [ 429.870846][ T7846] netlink: 'syz.5.620': attribute type 21 has an invalid length. [ 429.879440][ T7846] netlink: 156 bytes leftover after parsing attributes in process `syz.5.620'. [ 429.889041][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.620'. [ 430.538060][ T7856] loop1: detected capacity change from 0 to 512 [ 430.563714][ T7856] EXT4-fs: Ignoring removed nobh option [ 430.707192][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.720376][ T7856] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.345555][ T5787] Bluetooth: hci5: command 0x0406 tx timeout [ 431.418213][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.616522][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 432.200939][ T7890] process 'syz.2.631' launched '/dev/fd/6' with NULL argv: empty string added [ 434.471103][ T7922] loop2: detected capacity change from 0 to 512 [ 434.512643][ T7922] EXT4-fs: Ignoring removed nobh option [ 434.666710][ T7922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.684258][ T7922] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.179504][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.465873][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.652'. [ 437.293781][ T7977] loop4: detected capacity change from 0 to 512 [ 437.380410][ T7977] EXT4-fs: Ignoring removed nobh option [ 437.611775][ T7977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.628219][ T7977] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.994974][ T7994] loop1: detected capacity change from 0 to 128 [ 438.127416][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.250717][ T7996] syz.1.661: attempt to access beyond end of device [ 438.250717][ T7996] loop1: rw=2049, sector=145, nr_sectors = 400 limit=128 [ 438.637016][ T7996] syz.1.661: attempt to access beyond end of device [ 438.637016][ T7996] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 438.654067][ T7996] syz.1.661: attempt to access beyond end of device [ 438.654067][ T7996] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 438.705799][ T7996] syz.1.661: attempt to access beyond end of device [ 438.705799][ T7996] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 438.787030][ T7996] syz.1.661: attempt to access beyond end of device [ 438.787030][ T7996] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 438.882219][ T7996] syz.1.661: attempt to access beyond end of device [ 438.882219][ T7996] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 440.141031][ T8019] loop1: detected capacity change from 0 to 2048 [ 440.307737][ T8019] loop1: p1 < > p4 [ 440.403804][ T30] audit: type=1800 audit(1741592556.537:493): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.668" name="file2" dev="tmpfs" ino=734 res=0 errno=0 [ 440.473275][ T8019] loop1: p4 size 8388608 extends beyond EOD, truncated [ 441.015588][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 441.034208][ T7073] udevd[7073]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 441.154527][ T8039] loop0: detected capacity change from 0 to 512 [ 441.237525][ T8039] EXT4-fs: Ignoring removed nobh option [ 441.407623][ T8039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.423560][ T8039] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.651541][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 441.879761][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.939353][ T8055] loop4: detected capacity change from 0 to 128 [ 442.037733][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 442.430400][ T8058] syz.4.678: attempt to access beyond end of device [ 442.430400][ T8058] loop4: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 442.868614][ T8058] syz.4.678: attempt to access beyond end of device [ 442.868614][ T8058] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 442.883348][ T8058] syz.4.678: attempt to access beyond end of device [ 442.883348][ T8058] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 443.005126][ T8058] syz.4.678: attempt to access beyond end of device [ 443.005126][ T8058] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 444.113911][ T8090] loop2: detected capacity change from 0 to 512 [ 444.168242][ T8090] EXT4-fs: Ignoring removed nobh option [ 444.357357][ T8090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.370588][ T8090] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.703671][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'. [ 445.088570][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.701763][ T8114] loop1: detected capacity change from 0 to 128 [ 447.288021][ T8119] syz.1.696: attempt to access beyond end of device [ 447.288021][ T8119] loop1: rw=2049, sector=145, nr_sectors = 264 limit=128 [ 447.654098][ T8119] syz.1.696: attempt to access beyond end of device [ 447.654098][ T8119] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 447.672037][ T8119] syz.1.696: attempt to access beyond end of device [ 447.672037][ T8119] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.789966][ T8119] syz.1.696: attempt to access beyond end of device [ 447.789966][ T8119] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.987820][ T8127] loop4: detected capacity change from 0 to 256 [ 448.005640][ T8127] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 448.297017][ T8132] loop2: detected capacity change from 0 to 1024 [ 448.397162][ T8132] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 448.526243][ T8132] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 448.605279][ T8132] EXT4-fs (loop2): orphan cleanup on readonly fs [ 448.697102][ T8132] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.701: Invalid inode table block 0 in block_group 0 [ 448.802191][ T8132] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 448.957121][ T8132] EXT4-fs error (device loop2): ext4_quota_write:7299: inode #3: comm syz.2.701: mark_inode_dirty error [ 449.034331][ T8142] netlink: 40 bytes leftover after parsing attributes in process `syz.5.704'. [ 449.034388][ T8132] Quota error (device loop2): write_blk: dquota write failed [ 449.035585][ T8132] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 449.061618][ T8132] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.701: Failed to acquire dquot type 0 [ 449.240096][ T8132] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.701: Invalid inode table block 0 in block_group 0 [ 449.320915][ T8132] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 449.339826][ T8132] EXT4-fs error (device loop2): ext4_ext_truncate:4457: inode #15: comm syz.2.701: mark_inode_dirty error [ 449.435425][ T8132] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.701: Invalid inode table block 0 in block_group 0 [ 449.507852][ T8132] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 449.577050][ T8132] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 449.644948][ T8132] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.701: Invalid inode table block 0 in block_group 0 [ 449.724963][ T8132] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 449.794272][ T8132] EXT4-fs error (device loop2): ext4_truncate:4240: inode #15: comm syz.2.701: mark_inode_dirty error [ 449.879593][ T8132] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 449.955227][ T8132] EXT4-fs (loop2): 1 truncate cleaned up [ 449.963208][ T8132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.298199][ T8156] program syz.1.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.446012][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.931653][ T8169] loop1: detected capacity change from 0 to 128 [ 451.064534][ T8167] loop2: detected capacity change from 0 to 512 [ 451.148717][ T8167] EXT4-fs: Ignoring removed bh option [ 451.239878][ T8167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 451.339310][ T8171] syz.1.712: attempt to access beyond end of device [ 451.339310][ T8171] loop1: rw=2049, sector=145, nr_sectors = 376 limit=128 [ 451.443148][ T8167] EXT4-fs (loop2): 1 truncate cleaned up [ 451.453350][ T8167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.534137][ T8178] syz.1.712: attempt to access beyond end of device [ 451.534137][ T8178] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 451.548704][ T8178] syz.1.712: attempt to access beyond end of device [ 451.548704][ T8178] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 451.727220][ T8178] syz.1.712: attempt to access beyond end of device [ 451.727220][ T8178] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 452.465780][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.716'. [ 452.955172][ T30] audit: type=1326 audit(1741592569.087:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 452.978408][ T30] audit: type=1326 audit(1741592569.087:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.077293][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.182919][ T30] audit: type=1326 audit(1741592569.187:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.208491][ T30] audit: type=1326 audit(1741592569.197:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.232076][ T30] audit: type=1326 audit(1741592569.197:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.254947][ T30] audit: type=1326 audit(1741592569.197:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.278383][ T30] audit: type=1326 audit(1741592569.217:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.303318][ T30] audit: type=1326 audit(1741592569.247:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 453.417102][ T8199] loop1: detected capacity change from 0 to 512 [ 453.758357][ T8199] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.719: Failed to acquire dquot type 1 [ 453.841478][ T8199] EXT4-fs (loop1): 1 truncate cleaned up [ 453.849177][ T8199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.862518][ T8199] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.395742][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.730396][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 454.767239][ T8219] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.964366][ T8223] loop0: detected capacity change from 0 to 128 [ 455.389970][ T8227] syz.0.726: attempt to access beyond end of device [ 455.389970][ T8227] loop0: rw=2049, sector=145, nr_sectors = 392 limit=128 [ 456.012971][ T8239] syz.0.726: attempt to access beyond end of device [ 456.012971][ T8239] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 456.027534][ T8239] syz.0.726: attempt to access beyond end of device [ 456.027534][ T8239] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 456.222031][ T8239] syz.0.726: attempt to access beyond end of device [ 456.222031][ T8239] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 456.574279][ T8239] syz.0.726: attempt to access beyond end of device [ 456.574279][ T8239] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 456.799434][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 456.950226][ T8245] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.961920][ T8245] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 458.726607][ T8255] loop2: detected capacity change from 0 to 512 [ 458.862851][ T8255] __quota_error: 47 callbacks suppressed [ 458.862928][ T8255] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 458.879970][ T8255] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 458.890415][ T8255] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.734: Failed to acquire dquot type 1 [ 458.919135][ T8255] EXT4-fs (loop2): 1 truncate cleaned up [ 459.039249][ T8255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.053449][ T8255] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.514079][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.629334][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.738'. [ 459.696577][ T30] audit: type=1326 audit(1741592575.827:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.720212][ T30] audit: type=1326 audit(1741592575.827:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.745923][ T30] audit: type=1326 audit(1741592575.847:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.769645][ T30] audit: type=1326 audit(1741592575.847:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.792365][ T30] audit: type=1326 audit(1741592575.847:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.815164][ T30] audit: type=1326 audit(1741592575.867:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.837856][ T30] audit: type=1326 audit(1741592575.897:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 459.862844][ T30] audit: type=1326 audit(1741592575.897:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.1.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270938d169 code=0x7ffc0000 [ 460.369797][ T8278] loop1: detected capacity change from 0 to 512 [ 460.468455][ T8278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 460.612195][ T8278] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.739: corrupted in-inode xattr: e_name out of bounds [ 460.661698][ T8278] EXT4-fs (loop1): Remounting filesystem read-only [ 460.672396][ T8278] EXT4-fs (loop1): 1 truncate cleaned up [ 460.681287][ T8278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.719618][ T8287] loop4: detected capacity change from 0 to 128 [ 461.114547][ T8287] syz.4.743: attempt to access beyond end of device [ 461.114547][ T8287] loop4: rw=2049, sector=145, nr_sectors = 480 limit=128 [ 461.522703][ T8300] syz.4.743: attempt to access beyond end of device [ 461.522703][ T8300] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 461.537272][ T8300] syz.4.743: attempt to access beyond end of device [ 461.537272][ T8300] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 461.692705][ T8300] syz.4.743: attempt to access beyond end of device [ 461.692705][ T8300] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 461.765418][ T8300] syz.4.743: attempt to access beyond end of device [ 461.765418][ T8300] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 461.849925][ T8300] syz.4.743: attempt to access beyond end of device [ 461.849925][ T8300] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 462.067561][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.218336][ T8315] loop0: detected capacity change from 0 to 512 [ 464.578058][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 464.578135][ T30] audit: type=1326 audit(1741592580.717:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.608666][ T30] audit: type=1326 audit(1741592580.717:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.631723][ T30] audit: type=1326 audit(1741592580.737:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.732518][ T30] audit: type=1326 audit(1741592580.857:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.757478][ T30] audit: type=1326 audit(1741592580.907:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.835138][ T30] audit: type=1326 audit(1741592580.977:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.858252][ T30] audit: type=1326 audit(1741592580.977:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.883304][ T8315] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 464.883910][ T8315] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 464.894358][ T30] audit: type=1326 audit(1741592580.977:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 464.904008][ T8315] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.751: Failed to acquire dquot type 1 [ 465.077380][ T8315] EXT4-fs (loop0): 1 truncate cleaned up [ 465.085769][ T8315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.099008][ T8315] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.444563][ T8327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 466.051216][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.160729][ T8344] loop1: detected capacity change from 0 to 512 [ 466.385974][ T8344] EXT4-fs error (device loop1): ext4_quota_enable:7101: comm syz.1.760: inode #33554432: comm syz.1.760: iget: illegal inode # [ 466.458400][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.757'. [ 466.469123][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.757'. [ 466.481548][ T8344] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.760: Bad quota inode: 33554432, type: 2 [ 466.551336][ T8344] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 466.637578][ T8344] EXT4-fs (loop1): mount failed [ 466.922585][ T8355] loop4: detected capacity change from 0 to 128 [ 467.480801][ T8355] syz.4.763: attempt to access beyond end of device [ 467.480801][ T8355] loop4: rw=2049, sector=145, nr_sectors = 488 limit=128 [ 469.775725][ T8380] IPv6: Can't replace route, no match found [ 470.266898][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.273568][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.043932][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 471.044006][ T30] audit: type=1326 audit(1741592587.187:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 471.185548][ T30] audit: type=1326 audit(1741592587.237:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 471.208419][ T30] audit: type=1326 audit(1741592587.237:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 471.233388][ T30] audit: type=1326 audit(1741592587.237:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 471.257205][ T30] audit: type=1326 audit(1741592587.237:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5858d169 code=0x7ffc0000 [ 471.463945][ T8399] loop4: detected capacity change from 0 to 1024 [ 471.647785][ T8399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.693885][ T8409] loop2: detected capacity change from 0 to 128 [ 472.062413][ T8415] syz.2.780: attempt to access beyond end of device [ 472.062413][ T8415] loop2: rw=2049, sector=145, nr_sectors = 592 limit=128 [ 472.286533][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.402451][ T8415] syz.2.780: attempt to access beyond end of device [ 472.402451][ T8415] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 472.417244][ T8415] syz.2.780: attempt to access beyond end of device [ 472.417244][ T8415] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.513847][ T8415] syz.2.780: attempt to access beyond end of device [ 472.513847][ T8415] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.595824][ T8415] syz.2.780: attempt to access beyond end of device [ 472.595824][ T8415] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 475.738611][ T8451] loop1: detected capacity change from 0 to 128 [ 476.087891][ T8454] syz.1.795: attempt to access beyond end of device [ 476.087891][ T8454] loop1: rw=2049, sector=145, nr_sectors = 352 limit=128 [ 476.327187][ T8454] syz.1.795: attempt to access beyond end of device [ 476.327187][ T8454] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 476.344501][ T8454] syz.1.795: attempt to access beyond end of device [ 476.344501][ T8454] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 476.372906][ T8454] syz.1.795: attempt to access beyond end of device [ 476.372906][ T8454] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 476.444194][ T8454] syz.1.795: attempt to access beyond end of device [ 476.444194][ T8454] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 476.486937][ T8454] syz.1.795: attempt to access beyond end of device [ 476.486937][ T8454] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 476.560735][ T8454] syz.1.795: attempt to access beyond end of device [ 476.560735][ T8454] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 479.407090][ T30] audit: type=1326 audit(1741592595.537:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 479.429995][ T30] audit: type=1326 audit(1741592595.567:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 479.453065][ T30] audit: type=1326 audit(1741592595.577:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 479.532041][ T8485] loop2: detected capacity change from 0 to 128 [ 479.757563][ T30] audit: type=1326 audit(1741592595.717:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 479.780345][ T30] audit: type=1326 audit(1741592595.717:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x7ffc0000 [ 480.028123][ T8489] syz.2.810: attempt to access beyond end of device [ 480.028123][ T8489] loop2: rw=2049, sector=145, nr_sectors = 416 limit=128 [ 480.281953][ T8489] syz.2.810: attempt to access beyond end of device [ 480.281953][ T8489] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 480.296476][ T8489] syz.2.810: attempt to access beyond end of device [ 480.296476][ T8489] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 480.384082][ T8489] syz.2.810: attempt to access beyond end of device [ 480.384082][ T8489] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 481.192378][ T8502] loop5: detected capacity change from 0 to 128 [ 481.265395][ T8502] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 481.318692][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'. [ 481.328402][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'. [ 481.383177][ T30] audit: type=1800 audit(1741592597.527:728): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.818" name="file1" dev="loop5" ino=24 res=0 errno=0 [ 481.446301][ T8502] FAT-fs (loop5): error, invalid access to FAT (entry 0x0affffff) [ 481.457557][ T8502] FAT-fs (loop5): Filesystem has been set read-only [ 481.521489][ T8502] FAT-fs (loop5): error, invalid access to FAT (entry 0x0affffff) [ 481.784968][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'. [ 481.794541][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'. [ 481.935244][ T6511] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 482.644243][ T8524] loop4: detected capacity change from 0 to 128 [ 482.928875][ T8526] syz.4.826: attempt to access beyond end of device [ 482.928875][ T8526] loop4: rw=2049, sector=145, nr_sectors = 280 limit=128 [ 483.145232][ T8526] syz.4.826: attempt to access beyond end of device [ 483.145232][ T8526] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 483.159712][ T8526] syz.4.826: attempt to access beyond end of device [ 483.159712][ T8526] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 483.291749][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'. [ 483.357158][ T8526] syz.4.826: attempt to access beyond end of device [ 483.357158][ T8526] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 483.496338][ T8526] syz.4.826: attempt to access beyond end of device [ 483.496338][ T8526] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 486.297528][ T8561] loop1: detected capacity change from 0 to 128 [ 487.704460][ T8561] syz.1.843: attempt to access beyond end of device [ 487.704460][ T8561] loop1: rw=2049, sector=145, nr_sectors = 464 limit=128 [ 489.765580][ T30] audit: type=1326 audit(1741592605.907:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 489.883695][ T30] audit: type=1326 audit(1741592605.937:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 489.906586][ T30] audit: type=1326 audit(1741592605.947:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 489.929382][ T30] audit: type=1326 audit(1741592605.967:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 489.954180][ T30] audit: type=1326 audit(1741592605.967:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 489.977584][ T30] audit: type=1326 audit(1741592605.987:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 490.000711][ T30] audit: type=1326 audit(1741592605.987:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 490.023354][ T30] audit: type=1326 audit(1741592605.987:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 490.046037][ T30] audit: type=1326 audit(1741592605.987:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 490.071318][ T30] audit: type=1326 audit(1741592605.997:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 490.477998][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 490.944071][ T8595] loop1: detected capacity change from 0 to 164 [ 492.656956][ T8608] loop0: detected capacity change from 0 to 128 [ 493.600835][ T8612] syz.0.858: attempt to access beyond end of device [ 493.600835][ T8612] loop0: rw=2049, sector=145, nr_sectors = 152 limit=128 [ 494.007213][ T8616] syz.0.858: attempt to access beyond end of device [ 494.007213][ T8616] loop0: rw=524288, sector=145, nr_sectors = 152 limit=128 [ 494.028599][ T8616] syz.0.858: attempt to access beyond end of device [ 494.028599][ T8616] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 494.097596][ T8616] syz.0.858: attempt to access beyond end of device [ 494.097596][ T8616] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 494.228119][ T8616] syz.0.858: attempt to access beyond end of device [ 494.228119][ T8616] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 494.330121][ T8616] syz.0.858: attempt to access beyond end of device [ 494.330121][ T8616] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 494.416001][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.1.863'. [ 494.977149][ T8626] team0: Device ipvlan2 failed to register rx_handler [ 495.527764][ T8632] loop2: detected capacity change from 0 to 164 [ 496.522923][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 496.749303][ T8648] loop1: detected capacity change from 0 to 512 [ 496.773662][ T8650] loop2: detected capacity change from 0 to 128 [ 496.921039][ T8648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.935203][ T8648] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.014309][ T8654] syz.2.878: attempt to access beyond end of device [ 497.014309][ T8654] loop2: rw=2049, sector=145, nr_sectors = 832 limit=128 [ 497.238176][ T8648] loop1: detected capacity change from 512 to 64 [ 497.286168][ T8657] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Out of memory [ 497.385485][ T8657] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #15: comm syz.1.877: mark_inode_dirty error [ 497.424069][ T8654] syz.2.878: attempt to access beyond end of device [ 497.424069][ T8654] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 497.443254][ T8654] syz.2.878: attempt to access beyond end of device [ 497.443254][ T8654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 497.465774][ T8657] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Out of memory [ 497.490723][ T8657] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4550: inode #15: comm syz.1.877: mark_inode_dirty error [ 497.521089][ T8654] syz.2.878: attempt to access beyond end of device [ 497.521089][ T8654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 498.067038][ T8661] team0: Device ipvlan2 failed to register rx_handler [ 498.332907][ T8666] loop0: detected capacity change from 0 to 164 [ 498.376277][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.822363][ T1874] bond0 (unregistering): Released all slaves [ 500.382763][ T1874] hsr_slave_0: left promiscuous mode [ 500.410299][ T1874] hsr_slave_1: left promiscuous mode [ 502.670720][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.893'. [ 502.890832][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 502.902050][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 502.915284][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 502.939388][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 502.951722][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 502.965860][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.995809][ T8697] loop5: detected capacity change from 0 to 128 [ 503.336006][ T8701] bio_check_eod: 311 callbacks suppressed [ 503.336081][ T8701] syz.5.894: attempt to access beyond end of device [ 503.336081][ T8701] loop5: rw=2049, sector=145, nr_sectors = 328 limit=128 [ 503.516434][ T8701] syz.5.894: attempt to access beyond end of device [ 503.516434][ T8701] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 503.531359][ T8701] syz.5.894: attempt to access beyond end of device [ 503.531359][ T8701] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 503.659429][ T8701] syz.5.894: attempt to access beyond end of device [ 503.659429][ T8701] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 503.677006][ T8701] syz.5.894: attempt to access beyond end of device [ 503.677006][ T8701] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 503.690985][ T8701] syz.5.894: attempt to access beyond end of device [ 503.690985][ T8701] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 503.725448][ T8701] syz.5.894: attempt to access beyond end of device [ 503.725448][ T8701] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 503.797624][ T8701] syz.5.894: attempt to access beyond end of device [ 503.797624][ T8701] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 503.837705][ T8706] syz_tun: Device is already in use. [ 504.519986][ T8696] chnl_net:caif_netlink_parms(): no params data found [ 505.108200][ T5085] Bluetooth: hci0: command tx timeout [ 506.199380][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.210544][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.218579][ T8696] bridge_slave_0: entered allmulticast mode [ 506.227832][ T8696] bridge_slave_0: entered promiscuous mode [ 506.347801][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.355736][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.363503][ T8696] bridge_slave_1: entered allmulticast mode [ 506.372681][ T8696] bridge_slave_1: entered promiscuous mode [ 506.819536][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.965500][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.121938][ T8738] loop5: detected capacity change from 0 to 2048 [ 507.186213][ T5085] Bluetooth: hci0: command tx timeout [ 507.214263][ T8738] EXT4-fs: Ignoring removed bh option [ 507.316840][ T8738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.527593][ T8696] team0: Port device team_slave_0 added [ 507.628684][ T8751] team0: Device ipvlan2 failed to register rx_handler [ 507.771492][ T8696] team0: Port device team_slave_1 added [ 507.885653][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.109302][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.116900][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.143332][ T8696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.314146][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.321591][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.348218][ T8696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.454414][ T8759] loop0: detected capacity change from 0 to 128 [ 509.081779][ T8696] hsr_slave_0: entered promiscuous mode [ 509.091804][ T8696] hsr_slave_1: entered promiscuous mode [ 509.104149][ T8696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.112142][ T8696] Cannot create hsr debugfs directory [ 509.265130][ T5085] Bluetooth: hci0: command tx timeout [ 509.312892][ T8767] loop4: detected capacity change from 0 to 2048 [ 509.364277][ T8767] EXT4-fs: Ignoring removed bh option [ 509.548772][ T8767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.641642][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 509.753265][ T8771] team0 (unregistering): Port device team_slave_0 removed [ 509.800877][ T8771] team0 (unregistering): Port device team_slave_1 removed [ 510.230938][ T1874] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 510.304320][ T1874] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 510.317507][ T1874] EXT4-fs (loop4): This should not happen!! Data will be lost [ 510.317507][ T1874] [ 510.330200][ T1874] EXT4-fs (loop4): Total free blocks count 0 [ 510.337493][ T1874] EXT4-fs (loop4): Free/Dirty block details [ 510.343608][ T1874] EXT4-fs (loop4): free_blocks=2415919104 [ 510.349725][ T1874] EXT4-fs (loop4): dirty_blocks=272 [ 510.355228][ T1874] EXT4-fs (loop4): Block reservation details [ 510.361410][ T1874] EXT4-fs (loop4): i_reserved_data_blocks=17 [ 510.628027][ T1806] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 252 with error 28 [ 510.713224][ T8696] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 510.818979][ T8696] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 510.900068][ T8696] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 511.017369][ T8696] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 511.347840][ T5085] Bluetooth: hci0: command tx timeout [ 511.633551][ T8796] team0: Device ipvlan2 failed to register rx_handler [ 512.691365][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.062394][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.174751][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.182492][ T1791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.202212][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.210036][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.817246][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 513.817318][ T30] audit: type=1326 audit(1741592629.957:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.2.924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc07c98d169 code=0x0 [ 515.529018][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.345623][ T8847] team0: Device ipvlan2 failed to register rx_handler [ 518.656837][ T8696] veth0_vlan: entered promiscuous mode [ 518.797936][ T8696] veth1_vlan: entered promiscuous mode [ 519.062474][ T8696] veth0_macvtap: entered promiscuous mode [ 519.153700][ T8696] veth1_macvtap: entered promiscuous mode [ 519.397825][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.409781][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.419969][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.430789][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.443835][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.455600][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.470661][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.721920][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.733815][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.744955][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.759650][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.771956][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.782736][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.797631][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.161526][ T8696] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.170854][ T8696] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.180025][ T8696] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.189240][ T8696] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.268488][ T8889] team0: Device ipvlan2 failed to register rx_handler [ 520.686727][ T8895] loop2: detected capacity change from 0 to 256 [ 520.805915][ T8895] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 523.036466][ T8920] hub 9-0:1.0: USB hub found [ 523.042670][ T8920] hub 9-0:1.0: 1 port detected [ 524.224221][ T8925] loop4: detected capacity change from 0 to 128 [ 525.746137][ T8935] loop4: detected capacity change from 0 to 1024 [ 525.755977][ T8935] EXT4-fs: Ignoring removed nobh option [ 525.772536][ T8935] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 525.864456][ T8935] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.957: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 526.015454][ T8935] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.957: couldn't read orphan inode 11 (err -117) [ 526.108082][ T8935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.237791][ T8935] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.957: Invalid block bitmap block 0 in block_group 0 [ 526.322215][ T8935] Quota error (device loop4): write_blk: dquota write failed [ 526.330265][ T8935] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 526.345186][ T8935] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.957: Failed to acquire dquot type 0 [ 526.931849][ T3952] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm kworker/u8:16: Invalid inode table block 8589934593 in block_group 0 [ 526.958260][ T30] audit: type=1326 audit(1741592643.097:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 526.981615][ T30] audit: type=1326 audit(1741592643.097:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.041102][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.236258][ T30] audit: type=1326 audit(1741592643.157:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.259425][ T30] audit: type=1326 audit(1741592643.187:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.282515][ T30] audit: type=1326 audit(1741592643.187:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.305489][ T30] audit: type=1326 audit(1741592643.227:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.330336][ T30] audit: type=1326 audit(1741592643.227:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.354085][ T30] audit: type=1326 audit(1741592643.227:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 527.836607][ T8969] vlan2: entered promiscuous mode [ 527.845670][ T8969] bridge0: entered promiscuous mode [ 527.858812][ T8969] bridge0: port 3(vlan2) entered blocking state [ 527.865812][ T8969] bridge0: port 3(vlan2) entered disabled state [ 527.872843][ T8969] vlan2: entered allmulticast mode [ 527.878355][ T8969] bridge0: entered allmulticast mode [ 527.918156][ T8970] loop0: detected capacity change from 0 to 128 [ 528.085967][ T8969] vlan2: left allmulticast mode [ 528.091117][ T8969] bridge0: left allmulticast mode [ 528.098873][ T8969] bridge0: left promiscuous mode [ 530.189213][ T1791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.199622][ T1791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.526053][ T1806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.534133][ T1806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.686344][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 531.700316][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.708339][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.696348][ T9042] netlink: 'syz.6.987': attribute type 3 has an invalid length. [ 534.709600][ T9042] netlink: 'syz.6.987': attribute type 3 has an invalid length. [ 535.271359][ T9048] loop0: detected capacity change from 0 to 128 [ 535.504575][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.991'. [ 536.682408][ T9066] loop6: detected capacity change from 0 to 512 [ 536.933604][ T9070] loop2: detected capacity change from 0 to 512 [ 536.965991][ T9072] batadv_slave_1: entered promiscuous mode [ 536.973128][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 536.993904][ T9066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.037484][ T9070] EXT4-fs: Ignoring removed i_version option [ 537.105955][ T9070] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 537.149474][ T9066] EXT4-fs (loop6): orphan cleanup on readonly fs [ 537.179261][ T9073] loop4: detected capacity change from 0 to 512 [ 537.199817][ T9070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e028, mo2=0002] [ 537.295592][ T9070] System zones: 1-12 [ 537.300575][ T9070] EXT4-fs (loop2): orphan cleanup on readonly fs [ 537.419206][ T9070] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.999: invalid indirect mapped block 12 (level 1) [ 537.458118][ T9066] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.997: bg 0: block 248: padding at end of block bitmap is not set [ 537.480847][ T9070] EXT4-fs (loop2): Remounting filesystem read-only [ 537.518182][ T9070] EXT4-fs (loop2): 1 truncate cleaned up [ 537.526046][ T9070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 537.581678][ T9073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.595309][ T9073] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.777337][ T9066] __quota_error: 4 callbacks suppressed [ 537.777415][ T9066] Quota error (device loop6): write_blk: dquota write failed [ 537.791385][ T9066] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 537.801784][ T9066] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.997: Failed to acquire dquot type 1 [ 537.842094][ T9073] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 537.853460][ T9073] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 537.863461][ T9073] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.998: Failed to acquire dquot type 0 [ 537.943513][ T9066] EXT4-fs (loop6): 1 truncate cleaned up [ 537.960478][ T9066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 538.097646][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 538.563918][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.543222][ T9094] loop0: detected capacity change from 0 to 1024 [ 539.595978][ T9098] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1006'. [ 539.608418][ T9094] EXT4-fs: Ignoring removed oldalloc option [ 539.618542][ T9094] EXT4-fs: Ignoring removed i_version option [ 539.780398][ T9094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.450724][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.679841][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 541.776121][ T9122] loop4: detected capacity change from 0 to 512 [ 541.896897][ T9122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 542.033042][ T9122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1012: bg 0: block 248: padding at end of block bitmap is not set [ 542.105606][ T9122] Quota error (device loop4): write_blk: dquota write failed [ 542.113554][ T9122] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 542.124569][ T9122] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1012: Failed to acquire dquot type 1 [ 542.240666][ T9122] EXT4-fs (loop4): 1 truncate cleaned up [ 542.323395][ T9122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.470354][ T9122] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 542.587024][ T9122] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 542.742362][ T9133] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 543.080639][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.793240][ T9139] loop2: detected capacity change from 0 to 1024 [ 543.858285][ T9139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.097126][ T9139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.711046][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.433049][ T9160] loop2: detected capacity change from 0 to 256 [ 545.561962][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.571447][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.582294][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.595474][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.600574][ T9160] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 545.608361][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.611133][ T9160] FAT-fs (loop2): Filesystem has been set read-only [ 545.619926][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.696716][ T9165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.704977][ T9165] batadv_slave_1: entered promiscuous mode [ 545.721408][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 547.746656][ T5787] Bluetooth: hci4: command tx timeout [ 548.443606][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 549.224146][ T30] audit: type=1326 audit(1741592665.357:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.405106][ T30] audit: type=1326 audit(1741592665.427:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.429219][ T30] audit: type=1326 audit(1741592665.457:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.455090][ T30] audit: type=1326 audit(1741592665.457:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.479766][ T30] audit: type=1326 audit(1741592665.457:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.502685][ T30] audit: type=1326 audit(1741592665.547:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.525499][ T30] audit: type=1326 audit(1741592665.547:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.550958][ T30] audit: type=1326 audit(1741592665.547:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.748846][ T9202] loop0: detected capacity change from 0 to 512 [ 549.829982][ T5787] Bluetooth: hci4: command tx timeout [ 549.850565][ T30] audit: type=1326 audit(1741592665.737:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 549.876503][ T30] audit: type=1326 audit(1741592665.737:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x7ffc0000 [ 550.070113][ T9202] EXT4-fs (loop0): 1 orphan inode deleted [ 550.078892][ T9202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.096962][ T3952] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:16: Failed to release dquot type 1 [ 550.196143][ T9202] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.521550][ T9212] loop4: detected capacity change from 0 to 512 [ 550.620188][ T9212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.633739][ T9212] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 550.697029][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.222219][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.954833][ T9225] loop0: detected capacity change from 0 to 512 [ 551.978837][ T5787] Bluetooth: hci4: command tx timeout [ 552.016479][ T9225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 552.073409][ T9225] EXT4-fs (loop0): orphan cleanup on readonly fs [ 552.085168][ T9225] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1040: Failed to acquire dquot type 1 [ 552.120873][ T9225] EXT4-fs (loop0): 1 truncate cleaned up [ 552.141861][ T9225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 552.167261][ T9225] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.1040: Abort forced by user [ 552.191585][ T9225] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 552.849126][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.857026][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.865051][ T9162] bridge_slave_0: entered allmulticast mode [ 552.874206][ T9162] bridge_slave_0: entered promiscuous mode [ 553.341037][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.349263][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.357389][ T9162] bridge_slave_1: entered allmulticast mode [ 553.366618][ T9162] bridge_slave_1: entered promiscuous mode [ 554.094825][ T5787] Bluetooth: hci4: command tx timeout [ 554.339078][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.527836][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.607133][ T9162] team0: Port device team_slave_0 added [ 555.803897][ T9162] team0: Port device team_slave_1 added [ 556.326049][ T5085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 556.350024][ T5085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 556.367007][ T5085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 556.485928][ T5085] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 556.540252][ T5085] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 556.565938][ T9241] loop2: detected capacity change from 0 to 512 [ 556.573960][ T5085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.910214][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.917663][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.947730][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.299134][ T9241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1045: bg 0: block 248: padding at end of block bitmap is not set [ 557.440081][ T9241] __quota_error: 6 callbacks suppressed [ 557.440162][ T9241] Quota error (device loop2): write_blk: dquota write failed [ 557.457281][ T9241] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 557.467681][ T9241] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1045: Failed to acquire dquot type 1 [ 557.783081][ T9241] EXT4-fs (loop2): 1 truncate cleaned up [ 557.791293][ T9241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.804828][ T9241] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 558.007811][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.015115][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.041517][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.727018][ T5085] Bluetooth: hci6: command tx timeout [ 558.975780][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.237464][ T9162] hsr_slave_0: entered promiscuous mode [ 560.247688][ T9162] hsr_slave_1: entered promiscuous mode [ 560.258861][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.266780][ T9162] Cannot create hsr debugfs directory [ 560.564351][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.786086][ T5085] Bluetooth: hci6: command tx timeout [ 561.890096][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 562.469166][ T9162] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.516278][ T9162] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.566664][ T9162] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 562.660658][ T9162] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 562.875353][ T5085] Bluetooth: hci6: command tx timeout [ 564.707836][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.716763][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.724987][ T9242] bridge_slave_0: entered allmulticast mode [ 564.734049][ T9242] bridge_slave_0: entered promiscuous mode [ 564.936961][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1060'. [ 564.951664][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.959876][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.963030][ T5085] Bluetooth: hci6: command tx timeout [ 564.967955][ T9242] bridge_slave_1: entered allmulticast mode [ 564.982317][ T9242] bridge_slave_1: entered promiscuous mode [ 565.270855][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.487964][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.626711][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.644245][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.771757][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.779556][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.246951][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.254720][ T4592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.284265][ T9242] team0: Port device team_slave_0 added [ 566.322413][ T9242] team0: Port device team_slave_1 added [ 566.829250][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.837769][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.867742][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.039047][ T9322] loop0: detected capacity change from 0 to 1024 [ 567.208524][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.216261][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.243185][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.289931][ T9162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.509054][ T9322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.592881][ T30] audit: type=1800 audit(1741592683.737:768): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1065" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 567.838970][ T9242] hsr_slave_0: entered promiscuous mode [ 567.849542][ T9242] hsr_slave_1: entered promiscuous mode [ 567.858220][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.866126][ T9242] Cannot create hsr debugfs directory [ 568.217251][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.672239][ T9242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 569.786555][ T9242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 569.940108][ T9242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 570.037004][ T9242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 570.409205][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.334295][ T9367] loop0: detected capacity change from 0 to 1024 [ 571.557410][ T9367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.831138][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.143240][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.165634][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.270613][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.278423][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.468925][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.476807][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.858238][ T9162] veth0_vlan: entered promiscuous mode [ 573.993170][ T9162] veth1_vlan: entered promiscuous mode [ 574.424205][ T9162] veth0_macvtap: entered promiscuous mode [ 574.520478][ T9162] veth1_macvtap: entered promiscuous mode [ 574.771115][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.782459][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.792753][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.803585][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.813781][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.824538][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.834801][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.849307][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.865970][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.276332][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.331273][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.342568][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.357662][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.369253][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.379387][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.390139][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.405382][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.704161][ T9162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.715036][ T9162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.724039][ T9162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.733690][ T9162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.951542][ T9433] bridge_slave_0: left allmulticast mode [ 576.957651][ T9433] bridge_slave_0: left promiscuous mode [ 576.964307][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.179282][ T9433] bridge_slave_1: left allmulticast mode [ 577.187465][ T9433] bridge_slave_1: left promiscuous mode [ 577.200009][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.367043][ T9433] bond0: (slave bond_slave_0): Releasing backup interface [ 577.444010][ T9433] bond0: (slave bond_slave_1): Releasing backup interface [ 577.608934][ T9433] team0: Port device team_slave_0 removed [ 577.764434][ T9433] team0: Port device team_slave_1 removed [ 577.775421][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.783210][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.857875][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.576940][ T9242] veth0_vlan: entered promiscuous mode [ 579.744215][ T9242] veth1_vlan: entered promiscuous mode [ 580.232057][ T9242] veth0_macvtap: entered promiscuous mode [ 580.318488][ T9242] veth1_macvtap: entered promiscuous mode [ 580.565576][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.580329][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.591919][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.602917][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.613121][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.623909][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.634185][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.645000][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.660570][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.298784][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.309911][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.321412][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.338663][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.349722][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.360565][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.370779][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.381636][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.401317][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.789085][ T9242] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.799192][ T9242] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.813420][ T9242] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.823969][ T9242] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.800532][ T9511] loop2: detected capacity change from 0 to 512 [ 584.050491][ T9511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.068281][ T9511] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.987541][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.155805][ T9549] tun0: tun_chr_ioctl cmd 2148553947 [ 586.278159][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.287485][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.576758][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.585502][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.929355][ T9065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.400787][ T9608] warning: `syz.2.1135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 590.602004][ T9607] bridge_slave_0: left allmulticast mode [ 590.614462][ T9607] bridge_slave_0: left promiscuous mode [ 590.621354][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.802042][ T9607] bridge_slave_1: left allmulticast mode [ 590.808832][ T9607] bridge_slave_1: left promiscuous mode [ 590.821501][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.003056][ T9607] bond0: (slave bond_slave_0): Releasing backup interface [ 591.165842][ T9607] bond0: (slave bond_slave_1): Releasing backup interface [ 591.292750][ T9607] team0: Port device team_slave_0 removed [ 591.368498][ T9607] team0: Port device team_slave_1 removed [ 591.379417][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.387456][ T9607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.463666][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.471616][ T9607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.655898][ T9618] netlink: 'syz.2.1137': attribute type 29 has an invalid length. [ 591.829402][ T9621] netlink: 'syz.2.1137': attribute type 29 has an invalid length. [ 592.152777][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.161001][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.547992][ T3952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.559995][ T3952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.815735][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 592.844148][ T9634] bridge0: port 3(batadv1) entered blocking state [ 592.851452][ T9634] bridge0: port 3(batadv1) entered disabled state [ 592.858826][ T9634] batadv1: entered allmulticast mode [ 592.874202][ T9634] batadv1: entered promiscuous mode [ 593.131522][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.139117][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.388405][ T1806] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 593.398156][ T1806] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 594.223527][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1146'. [ 594.653959][ T3952] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.870146][ T3952] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.955862][ T5085] Bluetooth: hci6: command tx timeout [ 595.172905][ T3952] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.372762][ T3952] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.785851][ T9669] xt_CT: No such helper "pptp" [ 595.880962][ T9665] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 595.975642][ T3952] bridge_slave_1: left allmulticast mode [ 595.981550][ T3952] bridge_slave_1: left promiscuous mode [ 595.988499][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.021791][ T3952] bridge_slave_0: left allmulticast mode [ 596.027956][ T3952] bridge_slave_0: left promiscuous mode [ 596.034773][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.816521][ T3952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.889572][ T3952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.940305][ T3952] bond0 (unregistering): Released all slaves [ 597.948369][ T3952] hsr_slave_0: left promiscuous mode [ 598.008558][ T3952] hsr_slave_1: left promiscuous mode [ 598.017711][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.025984][ T3952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.127993][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.137015][ T3952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.273239][ T3952] veth1_macvtap: left promiscuous mode [ 598.279341][ T3952] veth0_macvtap: left promiscuous mode [ 598.285432][ T3952] veth1_vlan: left promiscuous mode [ 598.295389][ T3952] veth0_vlan: left promiscuous mode [ 599.575176][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1165'. [ 599.877996][ T3952] team0 (unregistering): Port device team_slave_1 removed [ 599.950662][ T3952] team0 (unregistering): Port device team_slave_0 removed [ 606.099242][ T9884] loop8: detected capacity change from 0 to 512 [ 606.124548][ T9884] EXT4-fs: Ignoring removed bh option [ 606.133013][ T9884] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 606.154140][ T9884] EXT4-fs (loop8): invalid journal inode [ 606.160325][ T9884] EXT4-fs (loop8): can't get journal size [ 606.203092][ T9884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 606.319812][ T9884] System zones: 1-12, 13-13 [ 606.409962][ T9884] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1182: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 606.495025][ T9884] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1182: couldn't read orphan inode 15 (err -117) [ 606.607832][ T9884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.887872][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 607.159909][ T9906] 9pnet_fd: Insufficient options for proto=fd [ 607.188491][ T9242] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.060970][ T9956] 9pnet_fd: Insufficient options for proto=fd [ 610.713007][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1209'. [ 611.658786][ T9802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.816346][ T9802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.956425][ T9802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.174420][ T9802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.213727][ T9802] bridge_slave_1: left allmulticast mode [ 613.220049][ T9802] bridge_slave_1: left promiscuous mode [ 613.226788][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.308538][ T9802] bridge_slave_0: left allmulticast mode [ 613.314793][ T9802] bridge_slave_0: left promiscuous mode [ 613.321395][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.256943][ T9802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.356763][ T9802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.432326][ T9802] bond0 (unregistering): Released all slaves [ 615.290315][ T9802] hsr_slave_0: left promiscuous mode [ 615.306874][ T9802] hsr_slave_1: left promiscuous mode [ 615.314913][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.322661][ T9802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.437842][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.445784][ T9802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.525630][ T9802] veth1_macvtap: left promiscuous mode [ 615.531497][ T9802] veth0_macvtap: left promiscuous mode [ 615.537540][ T9802] veth1_vlan: left promiscuous mode [ 615.543113][ T9802] veth0_vlan: left promiscuous mode [ 616.171091][ T30] audit: type=1326 audit(1741592732.297:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.2.1234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07c98d169 code=0x0 [ 616.881967][ T9802] team0 (unregistering): Port device team_slave_1 removed [ 616.923673][ T9802] team0 (unregistering): Port device team_slave_0 removed [ 619.575480][ T30] audit: type=1326 audit(1741592735.657:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.4.1248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2026f8d169 code=0x0 [ 620.041302][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 625.379868][T10172] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 626.018977][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1286'. [ 627.506585][T10210] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 628.255192][T10224] loop7: detected capacity change from 0 to 512 [ 628.263818][T10224] EXT4-fs: Ignoring removed bh option [ 628.339122][T10224] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 628.434493][T10224] EXT4-fs (loop7): 1 truncate cleaned up [ 628.442749][T10224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.813606][T10234] bridge_slave_0: left allmulticast mode [ 628.822411][T10234] bridge_slave_0: left promiscuous mode [ 628.829374][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.887640][T10234] bridge_slave_1: left allmulticast mode [ 628.893812][T10234] bridge_slave_1: left promiscuous mode [ 628.900652][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.019395][T10234] bond0: (slave bond_slave_0): Releasing backup interface [ 629.052491][ T9162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.143861][T10234] bond0: (slave bond_slave_1): Releasing backup interface [ 629.288383][T10234] team0: Port device team_slave_0 removed [ 629.395800][T10234] team0: Port device team_slave_1 removed [ 629.407024][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.415010][T10234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.482480][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.491295][T10234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.290756][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1320'. [ 632.056931][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1325'. [ 632.270162][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 633.565856][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1339'. [ 633.652839][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 634.095969][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 635.555950][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 637.075455][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 637.276765][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 637.311237][ T26] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 637.322993][ T26] usb 1-1: config 0 has no interface number 0 [ 637.329573][ T26] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 637.340184][ T26] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 637.351933][ T26] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 637.515600][ T26] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 637.525244][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.533484][ T26] usb 1-1: Product: syz [ 637.538465][ T26] usb 1-1: Manufacturer: syz [ 637.543279][ T26] usb 1-1: SerialNumber: syz [ 637.643144][ T26] usb 1-1: config 0 descriptor?? [ 637.651375][T10363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.675120][T10363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 638.028833][T10363] loop0: detected capacity change from 0 to 512 [ 638.078551][T10363] ext4: Unknown parameter 'noacl' [ 638.473419][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 639.757244][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1382'. [ 640.056256][ T26] usb 1-1: USB disconnect, device number 2 [ 640.525176][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1388'. [ 641.085804][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1393'. [ 641.791092][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1398'. [ 642.924136][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1403'. [ 644.318198][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 644.474321][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1408'. [ 645.269962][T10480] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 645.612838][T10486] loop7: detected capacity change from 0 to 128 [ 646.228696][ T30] audit: type=1804 audit(1741592762.357:771): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1417" name="/newroot/64/file0/bus" dev="loop7" ino=31 res=1 errno=0 [ 646.253624][ T30] audit: type=1804 audit(1741592762.377:772): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1417" name="/newroot/64/file0/bus" dev="loop7" ino=31 res=1 errno=0 [ 646.800106][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1423'. [ 647.525400][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 647.751990][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 647.764322][ T26] usb 3-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 647.773842][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.818423][ T26] usb 3-1: config 0 descriptor?? [ 648.387414][ T26] hid-generic 0003:18D1:5030.0002: unbalanced delimiter at end of report description [ 648.439246][ T26] hid-generic 0003:18D1:5030.0002: probe with driver hid-generic failed with error -22 [ 648.694187][ T26] usb 3-1: USB disconnect, device number 2 [ 649.272739][T10541] loop8: detected capacity change from 0 to 128 [ 649.921309][T10541] EXT4-fs (loop8): Test dummy encryption mode enabled [ 649.964353][T10541] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.992437][T10541] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 650.072327][T10541] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 650.231302][T10541] ===================================================== [ 650.238638][T10541] BUG: KMSAN: uninit-value in aes_encrypt+0x15cc/0x1db0 [ 650.245795][T10541] aes_encrypt+0x15cc/0x1db0 [ 650.250601][T10541] aesti_encrypt+0x7d/0xf0 [ 650.255230][T10541] crypto_ecb_encrypt2+0x18a/0x300 [ 650.260514][T10541] crypto_lskcipher_crypt_sg+0x3ba/0x8a0 [ 650.266327][T10541] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 650.272127][T10541] crypto_skcipher_encrypt+0x119/0x1e0 [ 650.277760][T10541] xts_encrypt+0x3c4/0x550 [ 650.282334][T10541] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 650.287971][T10541] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 650.293610][T10541] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 650.300022][T10541] ext4_bio_write_folio+0x1377/0x2e50 [ 650.305591][T10541] mpage_submit_folio+0x360/0x490 [ 650.310777][T10541] mpage_process_page_bufs+0xb92/0xe30 [ 650.316415][T10541] ext4_do_writepages+0x351b/0x62c0 [ 650.321809][T10541] ext4_writepages+0x312/0x830 [ 650.326727][T10541] do_writepages+0x427/0xc30 [ 650.331485][T10541] file_write_and_wait_range+0x6f2/0x7b0 [ 650.337325][T10541] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 650.343413][T10541] ext4_sync_file+0x5ae/0x1390 [ 650.348326][T10541] vfs_fsync_range+0x1f9/0x260 [ 650.353275][T10541] ext4_buffered_write_iter+0xa2a/0xbd0 [ 650.359016][T10541] ext4_file_write_iter+0x26a/0x3930 [ 650.364497][T10541] do_iter_readv_writev+0x93a/0xbc0 [ 650.369882][T10541] vfs_writev+0x56a/0x14e0 [ 650.374436][T10541] __se_sys_pwritev2+0x262/0x460 [ 650.379563][T10541] __x64_sys_pwritev2+0x11f/0x1a0 [ 650.384768][T10541] x64_sys_call+0x368c/0x3c30 [ 650.389606][T10541] do_syscall_64+0xcd/0x1e0 [ 650.394284][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.400372][T10541] [ 650.402778][T10541] Uninit was stored to memory at: [ 650.408092][T10541] xts_xor_tweak+0x4ae/0xbf0 [ 650.412848][T10541] xts_encrypt+0x296/0x550 [ 650.417427][T10541] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 650.423067][T10541] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 650.428700][T10541] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 650.435118][T10541] ext4_bio_write_folio+0x1377/0x2e50 [ 650.440679][T10541] mpage_submit_folio+0x360/0x490 [ 650.445861][T10541] mpage_process_page_bufs+0xb92/0xe30 [ 650.451475][T10541] ext4_do_writepages+0x351b/0x62c0 [ 650.456869][T10541] ext4_writepages+0x312/0x830 [ 650.461786][T10541] do_writepages+0x427/0xc30 [ 650.466549][T10541] file_write_and_wait_range+0x6f2/0x7b0 [ 650.472466][T10541] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 650.478645][T10541] ext4_sync_file+0x5ae/0x1390 [ 650.483559][T10541] vfs_fsync_range+0x1f9/0x260 [ 650.488509][T10541] ext4_buffered_write_iter+0xa2a/0xbd0 [ 650.494284][T10541] ext4_file_write_iter+0x26a/0x3930 [ 650.499805][T10541] do_iter_readv_writev+0x93a/0xbc0 [ 650.505200][T10541] vfs_writev+0x56a/0x14e0 [ 650.509768][T10541] __se_sys_pwritev2+0x262/0x460 [ 650.514906][T10541] __x64_sys_pwritev2+0x11f/0x1a0 [ 650.520121][T10541] x64_sys_call+0x368c/0x3c30 [ 650.524962][T10541] do_syscall_64+0xcd/0x1e0 [ 650.529647][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.535753][T10541] [ 650.538174][T10541] Uninit was created at: [ 650.542679][T10541] __alloc_frozen_pages_noprof+0x9a7/0xe00 [ 650.548701][T10541] alloc_pages_mpol+0x4cd/0x890 [ 650.553753][T10541] folio_alloc_noprof+0x1dc/0x350 [ 650.558972][T10541] filemap_alloc_folio_noprof+0xa6/0x440 [ 650.564820][T10541] __filemap_get_folio+0xb9a/0x1840 [ 650.570232][T10541] ext4_write_begin+0x3e5/0x23d0 [ 650.575354][T10541] ext4_da_write_begin+0x4cd/0xea0 [ 650.580637][T10541] generic_perform_write+0x4d8/0x1080 [ 650.586172][T10541] ext4_buffered_write_iter+0x561/0xbd0 [ 650.591946][T10541] ext4_file_write_iter+0x26a/0x3930 [ 650.597422][T10541] do_iter_readv_writev+0x93a/0xbc0 [ 650.602830][T10541] vfs_writev+0x56a/0x14e0 [ 650.607434][T10541] __se_sys_pwritev2+0x262/0x460 [ 650.612576][T10541] __x64_sys_pwritev2+0x11f/0x1a0 [ 650.617791][T10541] x64_sys_call+0x368c/0x3c30 [ 650.622629][T10541] do_syscall_64+0xcd/0x1e0 [ 650.627315][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.633409][T10541] [ 650.635845][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.8.1439 Not tainted 6.14.0-rc6-syzkaller #0 [ 650.645029][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 650.655210][T10541] ===================================================== [ 650.662234][T10541] Disabling lock debugging due to kernel taint [ 650.668483][T10541] Kernel panic - not syncing: kmsan.panic set ... [ 650.675016][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.8.1439 Tainted: G B 6.14.0-rc6-syzkaller #0 [ 650.685702][T10541] Tainted: [B]=BAD_PAGE [ 650.689950][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 650.700135][T10541] Call Trace: [ 650.703530][T10541] [ 650.706564][T10541] dump_stack_lvl+0x216/0x2d0 [ 650.711406][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 650.717434][T10541] dump_stack+0x1e/0x24 [ 650.721760][T10541] panic+0x4e2/0xcf0 [ 650.725861][T10541] ? kmsan_get_metadata+0x61/0x1c0 [ 650.731192][T10541] kmsan_report+0x2c7/0x2d0 [ 650.735876][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.741273][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.746667][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.752061][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 650.758069][T10541] ? __msan_warning+0x95/0x120 [ 650.763004][T10541] ? aes_encrypt+0x15cc/0x1db0 [ 650.767948][T10541] ? aesti_encrypt+0x7d/0xf0 [ 650.772738][T10541] ? crypto_ecb_encrypt2+0x18a/0x300 [ 650.778185][T10541] ? crypto_lskcipher_crypt_sg+0x3ba/0x8a0 [ 650.784167][T10541] ? crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 650.790145][T10541] ? crypto_skcipher_encrypt+0x119/0x1e0 [ 650.795962][T10541] ? xts_encrypt+0x3c4/0x550 [ 650.800721][T10541] ? crypto_skcipher_encrypt+0x1a0/0x1e0 [ 650.806530][T10541] ? fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 650.812342][T10541] ? fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 650.818949][T10541] ? ext4_bio_write_folio+0x1377/0x2e50 [ 650.824696][T10541] ? mpage_submit_folio+0x360/0x490 [ 650.830066][T10541] ? mpage_process_page_bufs+0xb92/0xe30 [ 650.835869][T10541] ? ext4_do_writepages+0x351b/0x62c0 [ 650.841455][T10541] ? ext4_writepages+0x312/0x830 [ 650.846553][T10541] ? do_writepages+0x427/0xc30 [ 650.851493][T10541] ? file_write_and_wait_range+0x6f2/0x7b0 [ 650.857499][T10541] ? generic_buffers_fsync_noflush+0x7e/0x3c0 [ 650.863764][T10541] ? ext4_sync_file+0x5ae/0x1390 [ 650.868855][T10541] ? vfs_fsync_range+0x1f9/0x260 [ 650.873978][T10541] ? ext4_buffered_write_iter+0xa2a/0xbd0 [ 650.879911][T10541] ? ext4_file_write_iter+0x26a/0x3930 [ 650.885575][T10541] ? do_iter_readv_writev+0x93a/0xbc0 [ 650.891134][T10541] ? vfs_writev+0x56a/0x14e0 [ 650.895868][T10541] ? __se_sys_pwritev2+0x262/0x460 [ 650.901165][T10541] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 650.906552][T10541] ? x64_sys_call+0x368c/0x3c30 [ 650.911568][T10541] ? do_syscall_64+0xcd/0x1e0 [ 650.916430][T10541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.922701][T10541] ? kernel_text_address+0x129/0x1b0 [ 650.928189][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.933588][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 650.939608][T10541] ? filter_irq_stacks+0x60/0x1a0 [ 650.944824][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.950218][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.955616][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 650.961628][T10541] __msan_warning+0x95/0x120 [ 650.966414][T10541] aes_encrypt+0x15cc/0x1db0 [ 650.971194][T10541] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 650.977176][T10541] ? stack_depot_save_flags+0x6db/0x750 [ 650.982927][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 650.988414][T10541] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 650.994944][T10541] aesti_encrypt+0x7d/0xf0 [ 650.999567][T10541] crypto_ecb_encrypt2+0x18a/0x300 [ 651.004843][T10541] ? __pfx_aesti_encrypt+0x10/0x10 [ 651.010171][T10541] crypto_lskcipher_crypt_sg+0x3ba/0x8a0 [ 651.015988][T10541] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 651.021800][T10541] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 651.027604][T10541] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 651.033418][T10541] crypto_skcipher_encrypt+0x119/0x1e0 [ 651.039069][T10541] xts_encrypt+0x3c4/0x550 [ 651.043666][T10541] ? __pfx_xts_encrypt+0x10/0x10 [ 651.048784][T10541] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 651.054434][T10541] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 651.060104][T10541] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 651.066559][T10541] ext4_bio_write_folio+0x1377/0x2e50 [ 651.072155][T10541] mpage_submit_folio+0x360/0x490 [ 651.077381][T10541] mpage_process_page_bufs+0xb92/0xe30 [ 651.083029][T10541] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 651.089561][T10541] ext4_do_writepages+0x351b/0x62c0 [ 651.094973][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.100988][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 651.106411][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.112419][T10541] ? __find_get_block+0x4b/0x1ce0 [ 651.117622][T10541] ? filter_irq_stacks+0x60/0x1a0 [ 651.122921][T10541] ext4_writepages+0x312/0x830 [ 651.127868][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.133889][T10541] ? __pfx_ext4_writepages+0x10/0x10 [ 651.139355][T10541] do_writepages+0x427/0xc30 [ 651.144122][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.150139][T10541] ? _raw_spin_unlock+0x30/0x50 [ 651.155162][T10541] file_write_and_wait_range+0x6f2/0x7b0 [ 651.161061][T10541] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 651.167170][T10541] ext4_sync_file+0x5ae/0x1390 [ 651.172095][T10541] ? __pfx_ext4_sync_file+0x10/0x10 [ 651.177449][T10541] ? __pfx_ext4_sync_file+0x10/0x10 [ 651.182799][T10541] vfs_fsync_range+0x1f9/0x260 [ 651.187763][T10541] ext4_buffered_write_iter+0xa2a/0xbd0 [ 651.193523][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 651.198917][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.204931][T10541] ext4_file_write_iter+0x26a/0x3930 [ 651.210418][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.216422][T10541] ? do_iter_readv_writev+0x4e/0xbc0 [ 651.221898][T10541] ? filter_irq_stacks+0x60/0x1a0 [ 651.227119][T10541] ? stack_depot_save_flags+0x2c/0x750 [ 651.232786][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 651.238180][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 651.243581][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 651.248976][T10541] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 651.254899][T10541] do_iter_readv_writev+0x93a/0xbc0 [ 651.260328][T10541] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 651.266286][T10541] vfs_writev+0x56a/0x14e0 [ 651.270868][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.276892][T10541] ? __rcu_read_unlock+0x7b/0xe0 [ 651.282051][T10541] ? kmsan_get_metadata+0x13e/0x1c0 [ 651.287450][T10541] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 651.293472][T10541] __se_sys_pwritev2+0x262/0x460 [ 651.298612][T10541] __x64_sys_pwritev2+0x11f/0x1a0 [ 651.303836][T10541] x64_sys_call+0x368c/0x3c30 [ 651.308680][T10541] do_syscall_64+0xcd/0x1e0 [ 651.313368][T10541] ? clear_bhb_loop+0x25/0x80 [ 651.318242][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.324362][T10541] RIP: 0033:0x7f6376b8d169 [ 651.328933][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.348748][T10541] RSP: 002b:00007f63749f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 651.357343][T10541] RAX: ffffffffffffffda RBX: 00007f6376da5fa0 RCX: 00007f6376b8d169 [ 651.365463][T10541] RDX: 0000000000000001 RSI: 00004000000002c0 RDI: 0000000000000005 [ 651.373572][T10541] RBP: 00007f6376c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 651.381674][T10541] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000000 [ 651.389781][T10541] R13: 0000000000000000 R14: 00007f6376da5fa0 R15: 00007ffc26a4bcb8 [ 651.397908][T10541] [ 651.401321][T10541] Kernel Offset: disabled [ 651.405702][T10541] Rebooting in 86400 seconds..