last executing test programs: 15m46.850201872s ago: executing program 2 (id=75): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) fcntl$notify(r0, 0x402, 0x34) 15m46.139356974s ago: executing program 2 (id=77): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 15m45.557963713s ago: executing program 2 (id=79): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000b80)="ea", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}, 0x1c) shutdown(r0, 0x1) 15m44.634301467s ago: executing program 2 (id=81): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() io_setup(0x3, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0x101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000380)=0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x1a1281) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), &(0x7f00000002c0)=0x4) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m43.184199171s ago: executing program 2 (id=88): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 15m42.081016296s ago: executing program 2 (id=97): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049cc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1, r0}}, 0x40) 15m26.816872148s ago: executing program 32 (id=97): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049cc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1, r0}}, 0x40) 8m17.214458119s ago: executing program 4 (id=2370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 8m16.821404409s ago: executing program 4 (id=2375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) close(r1) 8m16.366498038s ago: executing program 4 (id=2379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x18000, &(0x7f0000003280)=ANY=[], 0x8, 0x2fd, &(0x7f0000001c00)="$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") r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x40000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m14.641666956s ago: executing program 4 (id=2390): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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") r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x64, 0x183000, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000780)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800010000000000010000000200000008000000040000001800088014000a8008dd0300ac1414bb08007100c0021600a84db3d79b7f98ef62262d5563f01d81897c9733de612b73d6382365eedb8fa35ec2b1e1ba8d5f4466cd825cc470e6818a3507e721bbb569f11dcbd72b25bcc0f9d290026934273e5eb7ae36c65776662158eb6a98c2101dada4064c8cadb9279e6dcdaba6c6a3dd7b2efa8d793a9e2afd7c1e"], 0x34}}, 0x4040801) getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004540)={{{@in, @in6=@dev}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000004640)=0xe8) getegid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) 8m13.246306345s ago: executing program 4 (id=2400): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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") fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000200), &(0x7f0000000740)={0x0, 0xfb, 0x110, 0x4, 0x8, "c17b8cecb16e4b20a0102e1762bd4f07", "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"}, 0x110, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x2448, 0x43, 0x0, 0x0) 6.089278354s ago: executing program 5 (id=4352): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x82000, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="01088eb70026bd70fcbc48d590be59b601a788fe2a0000000008250000000e0001006e657464657673696d0600000000000000782ad3b24ad6d34b0af7060c8b7c20c85585c1", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) r9 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r9, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 5.472687613s ago: executing program 0 (id=4355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.33312698s ago: executing program 5 (id=4356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) 4.91425946s ago: executing program 0 (id=4358): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b4000000000090001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) socket$pptp(0x18, 0x1, 0x2) dup3(0xffffffffffffffff, r3, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x5, 0x7, 0xc1}, 0x50) 4.43074292s ago: executing program 6 (id=4360): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 4.248052425s ago: executing program 1 (id=4361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.768883821s ago: executing program 3 (id=4362): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.7554909s ago: executing program 5 (id=4363): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.331090605s ago: executing program 1 (id=4364): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.244809194s ago: executing program 3 (id=4365): bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe2$9p(&(0x7f0000000140), 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.646111053s ago: executing program 1 (id=4366): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x82000, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="01088eb70026bd70fcbc48d590be59b601a788fe2a0000000008250000000e0001006e657464657673696d0600000000000000782ad3b24ad6d34b0af7060c8b7c20c85585c1", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) r9 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r9, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 2.354462179s ago: executing program 3 (id=4367): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2.17890635s ago: executing program 0 (id=4368): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000000d80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x4f) 2.052398024s ago: executing program 5 (id=4369): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.970945379s ago: executing program 1 (id=4370): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 1.815841349s ago: executing program 3 (id=4371): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x402, 0x1}, 0x10) 1.336096857s ago: executing program 5 (id=4372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {0xd}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x4040084) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 1.251309745s ago: executing program 3 (id=4373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) 1.042192614s ago: executing program 0 (id=4374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 824.219062ms ago: executing program 1 (id=4375): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 278.136881ms ago: executing program 6 (id=4376): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 146.166438ms ago: executing program 0 (id=4377): futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)={0x2c, r7, 0x4, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8814) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast1, 0x4e22, 0x1, 'ovf\x00', 0x0, 0x10000, 0x100004}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'sh\x00', 0x0, 0x821}, 0x2c) 121.942099ms ago: executing program 3 (id=4378): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b4000000000090001007379"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) socket$pptp(0x18, 0x1, 0x2) dup3(0xffffffffffffffff, r3, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x5, 0x7, 0xc1}, 0x50) 0s ago: executing program 1 (id=4379): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 97][T14753] Cannot create hsr debugfs directory [ 887.260449][T14790] loop5: detected capacity change from 0 to 8192 [ 887.368067][T14790] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 888.266073][ T5810] Bluetooth: hci1: command tx timeout [ 888.319926][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3040'. [ 888.610652][T14800] smc: net device bond0 applied user defined pnetid SYZ0 [ 888.611742][ T57] bridge_slave_1: left allmulticast mode [ 888.624246][ T57] bridge_slave_1: left promiscuous mode [ 888.631101][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.204475][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.272045][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.302423][ T57] bond0 (unregistering): Released all slaves [ 889.328488][ T57] bond1 (unregistering): Released all slaves [ 889.352216][ T57] bond2 (unregistering): Released all slaves [ 889.686320][T14809] tipc: Enabled bearer , priority 0 [ 889.701642][ T57] tipc: Disabling bearer [ 889.707565][ T57] tipc: Left network mode [ 890.063329][T14806] tipc: Disabling bearer [ 890.214177][T14753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 890.328844][T14815] team0: Port device dummy0 removed [ 890.346522][ T5810] Bluetooth: hci1: command tx timeout [ 890.392758][ T57] hsr_slave_0: left promiscuous mode [ 890.418686][ T57] hsr_slave_1: left promiscuous mode [ 891.219334][T14822] smc: net device bond0 erased user defined pnetid SYZ0 [ 891.225901][ T57] team0 (unregistering): Port device team_slave_1 removed [ 891.326262][ T57] team0 (unregistering): Port device team_slave_0 removed [ 891.612386][ T57] team0 (unregistering): Port device 0! removed [ 891.876542][T14753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 891.948862][T14753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 892.053891][T14753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 893.132491][T14829] loop1: detected capacity change from 0 to 8192 [ 893.264093][T14829] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 893.654757][T14753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.960034][T14753] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.091293][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.098939][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.241036][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.248738][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.042104][T14851] bond6: entered promiscuous mode [ 895.047565][T14851] bond6: entered allmulticast mode [ 895.054369][T14851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 895.153613][T14851] bond6 (unregistering): Released all slaves [ 896.738998][T14753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.154256][T14753] veth0_vlan: entered promiscuous mode [ 897.265127][T14753] veth1_vlan: entered promiscuous mode [ 897.941293][T14881] loop6: detected capacity change from 0 to 1024 [ 898.007374][T14753] veth0_macvtap: entered promiscuous mode [ 898.070032][T14753] veth1_macvtap: entered promiscuous mode [ 898.090381][T14881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.233118][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 898.233197][ T30] audit: type=1800 audit(1754428323.660:2396): pid=14881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3067" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 898.339655][T14753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.478862][T14753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.577289][ T6194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.608205][ T6194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.623279][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.652037][ T6194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.691110][ T6194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.966508][T14889] loop5: detected capacity change from 0 to 512 [ 899.095864][T14889] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 899.106500][T14889] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 899.130902][T14889] EXT4-fs (loop5): mount failed [ 899.790756][T14897] tipc: Enabling of bearer rejected, already enabled [ 900.739101][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3076'. [ 900.750323][T14914] IPVS: Error connecting to the multicast addr [ 900.944256][T14916] loop1: detected capacity change from 0 to 512 [ 901.485541][T14922] team0: Port device dummy0 removed [ 903.279178][T14937] loop1: detected capacity change from 0 to 512 [ 904.154399][T14937] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 904.165480][T14937] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 904.278030][T14937] EXT4-fs (loop1): mount failed [ 904.484593][ T6194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.493059][ T6194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.662498][T14941] tipc: Enabling of bearer rejected, already enabled [ 904.668073][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.678595][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.576964][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.583693][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.838436][T14955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3086'. [ 907.026608][T14960] loop6: detected capacity change from 0 to 8192 [ 907.090506][T14960] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 907.222837][T14965] loop3: detected capacity change from 0 to 1024 [ 907.374405][T14965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.387771][T14965] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.537137][ T30] audit: type=1800 audit(1754428332.960:2397): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3090" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 907.875221][T14753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.880786][T14971] loop5: detected capacity change from 0 to 512 [ 908.006098][T14972] loop0: detected capacity change from 0 to 512 [ 908.064799][T14971] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 908.076098][T14971] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 908.144488][T14971] EXT4-fs (loop5): mount failed [ 908.336187][ T30] audit: type=1326 audit(1754428333.750:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.3.3095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 908.449005][ T30] audit: type=1326 audit(1754428333.800:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.3.3095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 908.471672][ T30] audit: type=1326 audit(1754428333.800:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.3.3095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 909.176388][T14983] tipc: Enabling of bearer rejected, already enabled [ 910.842242][T14993] loop6: detected capacity change from 0 to 8192 [ 910.897777][ T30] audit: type=1326 audit(1754428336.320:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.0.3102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 910.982836][T14993] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 911.007350][ T30] audit: type=1326 audit(1754428336.410:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.0.3102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 912.397318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 912.406680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 912.416635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 912.439134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 913.551164][T15017] tipc: Enabling of bearer rejected, already enabled [ 914.564642][T15024] loop0: detected capacity change from 0 to 512 [ 916.020523][T15032] bond1: entered promiscuous mode [ 916.026024][T15032] bond1: entered allmulticast mode [ 916.032790][T15032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.223037][T15032] bond1 (unregistering): Released all slaves [ 917.462076][ T30] audit: type=1326 audit(1754428342.880:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.6.3119" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 917.586029][ T30] audit: type=1326 audit(1754428342.920:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.6.3119" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 917.608966][ T30] audit: type=1326 audit(1754428342.940:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.6.3119" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 917.631807][ T30] audit: type=1326 audit(1754428342.950:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.6.3119" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 917.868842][T13011] Bluetooth: hci2: command 0x0406 tx timeout [ 918.242360][T15049] loop6: detected capacity change from 0 to 1024 [ 918.335704][T15039] loop5: detected capacity change from 0 to 8192 [ 918.442069][T15039] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 918.628267][T15049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.643894][T15049] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 918.843985][ T30] audit: type=1800 audit(1754428344.250:2407): pid=15049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3121" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 919.478219][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.686155][ T30] audit: type=1326 audit(1754428345.100:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.3122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 919.710978][ T30] audit: type=1326 audit(1754428345.100:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.3122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 919.734642][ T30] audit: type=1326 audit(1754428345.110:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.3122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 922.447125][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 923.510725][T15088] loop0: detected capacity change from 0 to 1024 [ 923.726748][T15088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.739870][T15088] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.756461][T15091] loop3: detected capacity change from 0 to 2048 [ 924.016336][T15097] loop1: detected capacity change from 0 to 1024 [ 924.059027][T15091] loop3: p2 p3 p7 [ 924.074103][T15097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 924.242094][T15097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 924.299440][T15097] System zones: 0-1, 3-36 [ 924.308844][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.488201][T15082] loop6: detected capacity change from 0 to 8192 [ 924.539576][T15097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.598809][T15082] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 925.370968][T15103] tipc: Enabling of bearer rejected, already enabled [ 925.581379][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.235945][ T30] audit: type=1326 audit(1754428351.640:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.338614][ T30] audit: type=1326 audit(1754428351.700:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.362320][ T30] audit: type=1326 audit(1754428351.700:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.385752][ T30] audit: type=1326 audit(1754428351.700:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.408496][ T30] audit: type=1326 audit(1754428351.700:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.431335][ T30] audit: type=1326 audit(1754428351.710:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.453997][ T30] audit: type=1326 audit(1754428351.710:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.478344][ T30] audit: type=1326 audit(1754428351.750:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.501255][ T30] audit: type=1326 audit(1754428351.750:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 926.524015][ T30] audit: type=1326 audit(1754428351.760:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 927.066866][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3145'. [ 928.189577][T15132] loop6: detected capacity change from 0 to 1024 [ 928.190613][T15127] loop3: detected capacity change from 0 to 512 [ 928.334076][T15127] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 928.951667][T15132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.964439][T15132] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.407933][T15127] EXT4-fs (loop3): failed to open journal device unknown-block(0,9) -6 [ 929.427880][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.764138][T15143] loop0: detected capacity change from 0 to 1024 [ 929.971332][T15143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 930.139949][T15143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 930.221921][T15146] tipc: Started in network mode [ 930.228170][T15146] tipc: Node identity ac14140f, cluster identity 4711 [ 930.235880][T15146] tipc: New replicast peer: 255.255.255.83 [ 930.244440][T15146] tipc: Enabled bearer , priority 10 [ 930.350968][T15143] System zones: 0-1, 3-36 [ 930.406769][T15143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.106313][T15139] loop1: detected capacity change from 0 to 8192 [ 931.366130][T10616] tipc: Node number set to 2886997007 [ 931.556419][T15139] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 931.776863][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3157'. [ 931.823632][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.887791][T13011] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 931.906874][T13011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 931.950338][T13011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 931.971524][T13011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 931.993137][T13011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 932.770420][T15166] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 932.770420][T15166] program syz.6.3160 not setting count and/or reply_len properly [ 934.002367][T15160] chnl_net:caif_netlink_parms(): no params data found [ 934.127736][ T5810] Bluetooth: hci4: command tx timeout [ 935.276239][T15184] loop0: detected capacity change from 0 to 1024 [ 935.691015][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.691404][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.692079][T15160] bridge_slave_0: entered allmulticast mode [ 935.696040][T15160] bridge_slave_0: entered promiscuous mode [ 935.769137][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.769538][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.770184][T15160] bridge_slave_1: entered allmulticast mode [ 935.775981][T15160] bridge_slave_1: entered promiscuous mode [ 935.980728][T15184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.981183][T15184] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.107368][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.179007][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.186772][ T5810] Bluetooth: hci4: command tx timeout [ 936.369531][T15186] loop6: detected capacity change from 0 to 512 [ 936.476938][T15186] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 936.934947][T15160] team0: Port device team_slave_0 added [ 937.017470][T15160] team0: Port device team_slave_1 added [ 937.158353][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.275282][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.285105][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.312872][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.471739][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.479356][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.507310][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.809865][T15186] EXT4-fs (loop6): failed to open journal device unknown-block(0,9) -6 [ 937.934158][T15160] hsr_slave_0: entered promiscuous mode [ 937.944935][T15160] hsr_slave_1: entered promiscuous mode [ 937.954106][T15160] debugfs: 'hsr0' already exists in 'hsr' [ 937.960196][T15160] Cannot create hsr debugfs directory [ 938.276055][ T5810] Bluetooth: hci4: command tx timeout [ 938.390999][T15200] loop3: detected capacity change from 0 to 1024 [ 938.475067][T15200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 938.677384][T15200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 938.806674][T15200] System zones: 0-1, 3-36 [ 938.868525][T15200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.019518][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3169'. [ 939.849143][T14753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.047177][ T4306] bridge_slave_1: left allmulticast mode [ 940.053068][ T4306] bridge_slave_1: left promiscuous mode [ 940.060076][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.356182][ T5810] Bluetooth: hci4: command tx timeout [ 940.753882][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.809184][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.859152][ T4306] bond0 (unregistering): Released all slaves [ 940.882787][ T4306] bond1 (unregistering): Released all slaves [ 940.908728][ T4306] bond2 (unregistering): Released all slaves [ 940.932652][ T4306] bond3 (unregistering): Released all slaves [ 940.959453][ T4306] bond4 (unregistering): Released all slaves [ 941.013972][ T4306] bond5 (unregistering): Released all slaves [ 941.054204][T15205] loop6: detected capacity change from 0 to 8192 [ 941.373314][T15205] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 941.443350][T15160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 941.475098][T15160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 941.589772][T15160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 941.637173][T15160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 941.772295][ T4306] tipc: Disabling bearer [ 941.780938][ T4306] tipc: Left network mode [ 942.208375][ T4306] hsr_slave_0: left promiscuous mode [ 942.225370][ T4306] hsr_slave_1: left promiscuous mode [ 942.233704][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.262238][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.921921][ T4306] team0 (unregistering): Port device team_slave_1 removed [ 943.048229][ T4306] team0 (unregistering): Port device team_slave_0 removed [ 944.515139][T15230] loop3: detected capacity change from 0 to 512 [ 944.757903][T15230] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 946.437506][T15160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.919021][T15160] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.975453][T15230] EXT4-fs (loop3): failed to open journal device unknown-block(0,9) -6 [ 947.173346][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.181012][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.336014][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.343607][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.454402][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3181'. [ 947.915110][T15239] loop6: detected capacity change from 0 to 1024 [ 947.991176][T15239] EXT4-fs: Ignoring removed orlov option [ 948.266899][T15239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.183297][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.677051][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.445502][T15160] veth0_vlan: entered promiscuous mode [ 952.543683][T15160] veth1_vlan: entered promiscuous mode [ 952.881129][T15160] veth0_macvtap: entered promiscuous mode [ 952.959465][T15160] veth1_macvtap: entered promiscuous mode [ 953.109931][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.208464][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.306621][ T3004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.367594][ T3004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.393309][ T3004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.464011][ T3004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.911593][T15286] loop1: detected capacity change from 0 to 512 [ 954.987892][T15295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3194'. [ 955.455842][T15286] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 955.827561][T15286] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 959.620104][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3205'. [ 960.594632][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.603500][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.779925][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.788493][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.809711][T15350] loop1: detected capacity change from 0 to 512 [ 962.369510][T15350] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 963.288009][T15350] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 964.304399][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3217'. [ 967.019404][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.026397][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.042799][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3230'. [ 968.094801][T15421] loop3: detected capacity change from 0 to 512 [ 968.259612][T15421] __quota_error: 4 callbacks suppressed [ 968.259700][T15421] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 968.278648][T15421] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 968.292744][T15416] loop0: detected capacity change from 0 to 512 [ 968.331784][T15421] EXT4-fs (loop3): mount failed [ 968.521617][T15416] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 969.738051][T15416] EXT4-fs (loop0): failed to open journal device unknown-block(0,9) -6 [ 971.853172][T15466] loop6: detected capacity change from 0 to 512 [ 972.021439][T15466] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 972.036294][T15466] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 972.179938][T15466] EXT4-fs (loop6): mount failed [ 972.936468][T15478] netlink: 'syz.6.3255': attribute type 10 has an invalid length. [ 973.016835][T15478] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 973.491459][T15482] loop5: detected capacity change from 0 to 512 [ 973.639525][T15482] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 974.678652][T15482] EXT4-fs (loop5): failed to open journal device unknown-block(0,9) -6 [ 976.340923][T15511] loop0: detected capacity change from 0 to 512 [ 976.746710][T15511] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 976.758017][T15511] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 976.897159][T15511] EXT4-fs (loop0): mount failed [ 977.364879][T15531] loop6: detected capacity change from 0 to 1024 [ 977.550673][T15531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.566651][T15531] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.873743][ T30] audit: type=1800 audit(1754428403.300:2425): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3271" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 978.420736][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.789621][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3278'. [ 978.959735][T15546] loop1: detected capacity change from 0 to 512 [ 979.087109][T15546] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 979.176971][T13011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 979.187414][T13011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 979.198547][T13011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 979.215134][T13011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 979.227649][T13011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 980.478052][T15546] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 981.323478][T15556] chnl_net:caif_netlink_parms(): no params data found [ 981.469288][ T5810] Bluetooth: hci5: command tx timeout [ 981.590622][T15581] loop6: detected capacity change from 0 to 128 [ 981.683311][T15582] loop5: detected capacity change from 0 to 1024 [ 981.841248][T15582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.857654][T15582] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.001473][ T30] audit: type=1800 audit(1754428407.400:2426): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3286" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 982.362771][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.315237][T15556] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.327236][T15556] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.335099][T15556] bridge_slave_0: entered allmulticast mode [ 983.345015][T15556] bridge_slave_0: entered promiscuous mode [ 983.456216][T15556] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.464031][T15556] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.472337][T15556] bridge_slave_1: entered allmulticast mode [ 983.482803][T15556] bridge_slave_1: entered promiscuous mode [ 983.552654][ T5810] Bluetooth: hci5: command tx timeout [ 983.832870][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.954254][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.346782][T15556] team0: Port device team_slave_0 added [ 984.431800][T15615] loop6: detected capacity change from 0 to 512 [ 984.473702][T15556] team0: Port device team_slave_1 added [ 984.504740][T15615] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 984.769134][T15104] syz_tun (unregistering): left allmulticast mode [ 985.225998][T15627] loop3: detected capacity change from 0 to 128 [ 985.450054][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.458801][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.486288][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.626478][ T5810] Bluetooth: hci5: command tx timeout [ 985.688797][T15630] loop5: detected capacity change from 0 to 1024 [ 985.689673][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.703801][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.731163][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.951754][T15615] EXT4-fs (loop6): failed to open journal device unknown-block(0,9) -6 [ 986.114398][T15630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.129081][T15630] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.151908][ T6192] bridge_slave_1: left allmulticast mode [ 986.162201][ T6192] bridge_slave_1: left promiscuous mode [ 986.169476][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.432354][ T30] audit: type=1800 audit(1754428411.840:2427): pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3299" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 986.627901][ T6192]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.735836][ T6192]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.784616][ T6192]  (unregistering): Released all slaves [ 986.808458][ T6192] bond1 (unregistering): Released all slaves [ 986.994257][T15556] hsr_slave_0: entered promiscuous mode [ 987.005126][T15556] hsr_slave_1: entered promiscuous mode [ 987.014615][T15556] debugfs: 'hsr0' already exists in 'hsr' [ 987.020949][T15556] Cannot create hsr debugfs directory [ 987.062906][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.433011][ T6192] tipc: Disabling bearer [ 987.440634][ T6192] tipc: Left network mode [ 987.707733][ T5810] Bluetooth: hci5: command tx timeout [ 988.246410][ T6192] hsr_slave_0: left promiscuous mode [ 989.158350][ T6192] team0 (unregistering): Port device team_slave_1 removed [ 989.206757][ T6192] team0 (unregistering): Port device team_slave_0 removed [ 989.884229][T15680] loop5: detected capacity change from 0 to 128 [ 990.364151][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 990.561002][T15682] bond1: entered promiscuous mode [ 990.567677][T15682] bond1: entered allmulticast mode [ 990.574567][T15682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.831998][T15686] loop3: detected capacity change from 0 to 1024 [ 991.038972][T15686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.056206][T15686] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.250336][ T30] audit: type=1800 audit(1754428416.670:2428): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3313" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 991.954518][T14753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.971179][T15556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 991.999224][T15556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.025203][T15556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 992.122843][T15556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.624337][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 992.669591][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 993.116915][T15721] loop3: detected capacity change from 0 to 128 [ 993.452160][T15556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.694250][T15556] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.795821][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.803384][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.900198][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.907888][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.965161][T15718] loop1: detected capacity change from 0 to 8192 [ 994.068908][T15718] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 994.163920][T15711] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 994.172856][T15711] FAT-fs (loop1): Filesystem has been set read-only [ 994.514243][T14098] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 995.647844][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.033464][T15556] veth0_vlan: entered promiscuous mode [ 996.155272][T15556] veth1_vlan: entered promiscuous mode [ 996.251524][T15753] loop1: detected capacity change from 0 to 128 [ 996.453082][T15556] veth0_macvtap: entered promiscuous mode [ 996.480593][T15556] veth1_macvtap: entered promiscuous mode [ 996.661162][T15556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.739209][T15556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.832420][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3338'. [ 996.857211][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.882805][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.899222][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3338'. [ 996.924300][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.962760][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.240782][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 998.372558][T15782] bond2: entered promiscuous mode [ 998.378094][T15782] bond2: entered allmulticast mode [ 998.384792][T15782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.806567][T15790] loop5: detected capacity change from 0 to 128 [ 999.150907][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3352'. [ 1000.475267][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3360'. [ 1000.554362][T15820] bond1: entered promiscuous mode [ 1000.559945][T15820] bond1: entered allmulticast mode [ 1000.567448][T15820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.827828][T15830] loop5: detected capacity change from 0 to 128 [ 1001.227212][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 1002.611553][T15859] bond2: entered promiscuous mode [ 1002.617089][T15859] bond2: entered allmulticast mode [ 1002.624504][T15859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1002.787613][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.796061][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.823463][T15863] loop1: detected capacity change from 0 to 128 [ 1003.051786][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1003.113843][ T4019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.122487][ T4019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.726668][T15875] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1003.736441][T15875] ksmbd: Unknown IPC event: 3, ignore. [ 1004.660739][T15892] bond3: entered promiscuous mode [ 1004.666157][T15892] bond3: entered allmulticast mode [ 1004.673582][T15892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1004.910672][T13011] Bluetooth: hci1: command 0x0406 tx timeout [ 1005.341048][T15899] loop6: detected capacity change from 0 to 128 [ 1005.716793][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3393'. [ 1007.073678][T15923] bond1: entered promiscuous mode [ 1007.079202][T15923] bond1: entered allmulticast mode [ 1007.086023][T15923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.850595][T15938] loop5: detected capacity change from 0 to 128 [ 1008.342956][T15947] usb usb8: usbfs: process 15947 (syz.3.3409) did not claim interface 0 before use [ 1009.251625][T15958] bond1: entered promiscuous mode [ 1009.257190][T15958] bond1: entered allmulticast mode [ 1009.264527][T15958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1010.125351][T15974] loop0: detected capacity change from 0 to 128 [ 1011.398267][T15989] tipc: Enabled bearer , priority 0 [ 1011.481536][T15988] tipc: Resetting bearer [ 1011.692242][T15988] tipc: Disabling bearer [ 1011.748162][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1011.780605][ T30] audit: type=1326 audit(1754428437.200:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.804735][ T30] audit: type=1326 audit(1754428437.200:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.840382][ T30] audit: type=1326 audit(1754428437.200:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.863277][ T30] audit: type=1326 audit(1754428437.210:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.887844][ T30] audit: type=1326 audit(1754428437.240:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.915422][ T30] audit: type=1326 audit(1754428437.350:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.940280][T16001] loop5: detected capacity change from 0 to 512 [ 1011.954783][ T30] audit: type=1326 audit(1754428437.380:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1011.963960][T16001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1011.979772][ T30] audit: type=1326 audit(1754428437.380:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1012.010574][ T30] audit: type=1326 audit(1754428437.380:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1012.033133][ T30] audit: type=1326 audit(1754428437.380:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.5.3432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1012.092710][T16001] EXT4-fs (loop5): 1 truncate cleaned up [ 1012.101258][T16001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.529841][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.198876][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3443'. [ 1014.218544][T16035] loop0: detected capacity change from 0 to 128 [ 1015.364365][T16052] bond2: entered promiscuous mode [ 1015.369841][T16052] bond2: entered allmulticast mode [ 1015.377572][T16052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1016.148994][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3457'. [ 1016.906606][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1016.906689][ T30] audit: type=1326 audit(1754428442.330:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16082 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.025790][ T30] audit: type=1326 audit(1754428442.380:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16082 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.051787][ T30] audit: type=1326 audit(1754428671.392:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16082 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.276856][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'. [ 1017.376043][ T30] audit: type=1326 audit(1754428671.802:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.400868][ T30] audit: type=1326 audit(1754428671.812:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.615756][ T30] audit: type=1326 audit(1754428671.882:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.638977][ T30] audit: type=1326 audit(1754428671.882:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.663453][ T30] audit: type=1326 audit(1754428671.922:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.686234][ T30] audit: type=1326 audit(1754428671.922:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.712280][ T30] audit: type=1326 audit(1754428671.922:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1017.860812][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1018.862923][T16117] netlink: 'syz.1.3478': attribute type 7 has an invalid length. [ 1019.111112][T16119] loop5: detected capacity change from 0 to 1024 [ 1019.212552][T16119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.225974][T16119] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.307724][T16119] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3479: lblock 0 mapped to illegal pblock 0 (length 1) [ 1019.401950][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 1019.406163][T16119] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1019.423854][T16119] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1019.423854][T16119] [ 1019.441198][T16129] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.3479: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1019.500865][T16129] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 1019.666134][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3484'. [ 1019.882559][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1021.945033][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1022.061545][T16167] tipc: Started in network mode [ 1022.068348][T16167] tipc: Node identity ac14140f, cluster identity 4711 [ 1022.076646][T16167] tipc: New replicast peer: 255.255.255.83 [ 1022.083855][T16167] tipc: Enabled bearer , priority 10 [ 1023.021705][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1023.021797][ T30] audit: type=1326 audit(1754428677.442:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.050900][ T30] audit: type=1326 audit(1754428677.452:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.073591][ T30] audit: type=1326 audit(1754428677.472:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.099221][ T30] audit: type=1326 audit(1754428677.472:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.125251][ T30] audit: type=1326 audit(1754428677.492:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.205335][T11306] tipc: Node number set to 2886997007 [ 1023.321526][ T30] audit: type=1326 audit(1754428677.592:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.347682][ T30] audit: type=1326 audit(1754428677.592:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.371643][ T30] audit: type=1326 audit(1754428677.652:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1023.394643][ T30] audit: type=1326 audit(1754428677.652:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.6.3508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1024.070469][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3513'. [ 1024.467020][T16214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3514'. [ 1024.476757][T16214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3514'. [ 1024.540714][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1024.645114][T16217] loop5: detected capacity change from 0 to 512 [ 1024.777120][T16217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.790804][T16217] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.838358][T16222] loop1: detected capacity change from 0 to 512 [ 1024.984470][T16222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.999759][T16222] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.184629][ T30] audit: type=1326 audit(1754428679.602:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1025.249007][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.853014][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.343171][T16246] loop5: detected capacity change from 0 to 512 [ 1026.384899][T16246] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1026.438081][T16246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 1026.459597][T16246] System zones: 1-12 [ 1026.460028][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1026.515066][T16246] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3529: corrupted in-inode xattr: e_value size too large [ 1026.583108][T16246] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3529: couldn't read orphan inode 15 (err -117) [ 1026.627976][T16246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.801818][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1027.097062][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.184608][T16276] loop1: detected capacity change from 0 to 512 [ 1028.249458][T16276] EXT4-fs (loop1): Invalid log block size: 7 [ 1028.554128][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.561206][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.997685][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1029.252675][T16289] loop5: detected capacity change from 0 to 512 [ 1029.315213][T16289] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1029.324106][T16289] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1029.384798][T16289] EXT4-fs (loop5): 1 truncate cleaned up [ 1029.393160][T16289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.500069][T16289] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1029.657913][T16276] loop1: detected capacity change from 0 to 8192 [ 1029.720327][T16294] loop3: detected capacity change from 0 to 512 [ 1029.844349][T16294] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.3549: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1029.867956][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.944503][T16294] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.3549: Bad quota inode: 3, type: 0 [ 1029.996283][T16294] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1030.067441][T16294] EXT4-fs (loop3): mount failed [ 1031.247767][T16319] program syz.5.3559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1031.823497][T16326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1032.431133][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1032.431208][ T30] audit: type=1326 audit(1754428686.862:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.556972][ T30] audit: type=1326 audit(1754428686.922:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.579892][ T30] audit: type=1326 audit(1754428686.922:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.602560][ T30] audit: type=1326 audit(1754428686.922:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.625833][ T30] audit: type=1326 audit(1754428686.922:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.648992][ T30] audit: type=1326 audit(1754428686.942:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.676064][ T30] audit: type=1326 audit(1754428686.942:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1032.698667][ T30] audit: type=1326 audit(1754428686.952:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1034.174375][ T30] audit: type=1326 audit(1754428688.602:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.3.3580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1034.201588][ T30] audit: type=1326 audit(1754428688.602:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.3.3580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=450 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1036.282043][T16399] loop6: detected capacity change from 0 to 512 [ 1036.381512][T16395] loop5: detected capacity change from 0 to 4096 [ 1036.411217][T16399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 1036.424298][T16395] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1036.442985][T16399] System zones: 1-12 [ 1036.502250][T16399] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3595: error while reading EA inode 32 err=-116 [ 1036.564539][T16395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.573741][T16399] EXT4-fs (loop6): Remounting filesystem read-only [ 1036.584918][T16399] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 1036.595900][T16399] EXT4-fs (loop6): 1 orphan inode deleted [ 1036.603946][T16399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.961479][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.202250][T16414] lo: entered promiscuous mode [ 1037.212529][T16414] tunl0: entered promiscuous mode [ 1037.223041][T16414] gre0: entered promiscuous mode [ 1037.233493][T16414] gretap0: entered promiscuous mode [ 1037.243796][T16414] erspan0: entered promiscuous mode [ 1037.256813][T16414] ip_vti0: entered promiscuous mode [ 1037.267708][T16414] ip6_vti0: entered promiscuous mode [ 1037.278505][T16414] sit0: entered promiscuous mode [ 1037.288536][T16414] ip6tnl0: entered promiscuous mode [ 1037.299109][T16414] ip6gre0: entered promiscuous mode [ 1037.309291][T16414] syz_tun: entered promiscuous mode [ 1037.319857][T16414] ip6gretap0: entered promiscuous mode [ 1037.330115][T16414] bridge0: entered promiscuous mode [ 1037.340401][T16414] vcan0: entered promiscuous mode [ 1037.347644][T16414] bond0: entered promiscuous mode [ 1037.352930][T16414] bond_slave_0: entered promiscuous mode [ 1037.363097][T16414] bond_slave_1: entered promiscuous mode [ 1037.377395][T16414] team0: entered promiscuous mode [ 1037.382839][T16414] team_slave_0: entered promiscuous mode [ 1037.390167][T16414] team_slave_1: entered promiscuous mode [ 1037.404581][T16414] dummy0: entered promiscuous mode [ 1037.420110][T16414] nlmon0: entered promiscuous mode [ 1037.479740][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.501193][T16414] caif0: entered promiscuous mode [ 1037.507113][T16414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1038.009837][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1038.009918][ T30] audit: type=1326 audit(1754428692.442:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.126390][ T30] audit: type=1326 audit(1754428692.492:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.149594][ T30] audit: type=1326 audit(1754428692.492:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.175931][ T30] audit: type=1326 audit(1754428692.492:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.199958][ T30] audit: type=1326 audit(1754428692.492:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.222619][ T30] audit: type=1326 audit(1754428692.492:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=349 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.245306][ T30] audit: type=1326 audit(1754428692.492:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.6.3605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1038.359389][T16427] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1042.880873][T16497] loop3: detected capacity change from 0 to 1024 [ 1042.957695][T16497] ext4: Unknown parameter 'obj_user' [ 1044.589139][T16525] netlink: 'syz.5.3651': attribute type 4 has an invalid length. [ 1044.599404][T16525] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3651'. [ 1044.644706][T16525] : renamed from bond0 (while UP) [ 1045.446975][T16540] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3657'. [ 1045.456653][T16540] IPVS: Unknown mcast interface: vetN1_macvtap [ 1045.757459][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3659'. [ 1047.476596][T16574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3671'. [ 1047.486085][T16574] IPVS: Unknown mcast interface: vetN1_macvtap [ 1048.191752][ T30] audit: type=1326 audit(1754428702.612:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.217953][ T30] audit: type=1326 audit(1754428702.642:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.386445][ T30] audit: type=1326 audit(1754428702.702:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.409538][ T30] audit: type=1326 audit(1754428702.702:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.437371][ T30] audit: type=1326 audit(1754428702.702:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.461391][ T30] audit: type=1326 audit(1754428702.742:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.484090][ T30] audit: type=1326 audit(1754428702.752:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.507468][ T30] audit: type=1326 audit(1754428702.752:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.533368][ T30] audit: type=1326 audit(1754428702.762:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1048.557204][ T30] audit: type=1326 audit(1754428702.762:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1055.538462][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1055.538545][ T30] audit: type=1326 audit(1754428709.972:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16691 comm="syz.6.3726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1055.652002][ T30] audit: type=1326 audit(1754428710.002:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16691 comm="syz.6.3726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1055.675427][ T30] audit: type=1326 audit(1754428710.002:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16691 comm="syz.6.3726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1056.106119][T13011] Bluetooth: hci4: command 0x0406 tx timeout [ 1057.496271][ T30] audit: type=1326 audit(1754428711.902:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1057.520520][ T30] audit: type=1326 audit(1754428711.902:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1057.545023][ T30] audit: type=1326 audit(1754428711.902:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 1057.570441][T16707] loop5: detected capacity change from 0 to 8192 [ 1057.786388][ T30] audit: type=1800 audit(1754428712.212:2572): pid=16707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3731" name="file1" dev="loop5" ino=1048672 res=0 errno=0 [ 1058.137393][T16722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1058.558763][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1058.568316][T16724] bridge_slave_1: left allmulticast mode [ 1058.574197][T16724] bridge_slave_1: left promiscuous mode [ 1058.581362][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.656339][ T30] audit: type=1326 audit(1754428713.082:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16729 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1058.679324][ T30] audit: type=1326 audit(1754428713.082:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16729 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1058.801192][T16724] bridge_slave_0: left allmulticast mode [ 1058.807326][T16724] bridge_slave_0: left promiscuous mode [ 1058.814122][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.851904][ T30] audit: type=1326 audit(1754428713.162:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16729 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1059.326407][T16735] program syz.0.3745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.528758][T16741] loop5: detected capacity change from 0 to 512 [ 1059.560029][T16741] EXT4-fs: Ignoring removed orlov option [ 1059.596594][T16741] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1059.706236][T16741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1059.763073][T16744] loop1: detected capacity change from 0 to 128 [ 1059.792951][T16741] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3748: corrupted in-inode xattr: e_value size too large [ 1059.837864][T16741] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3748: couldn't read orphan inode 15 (err -117) [ 1059.921387][T16741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.064096][T16744] bio_check_eod: 1991 callbacks suppressed [ 1060.064183][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.064183][T16744] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1060.117362][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.117362][T16744] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1060.287119][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.287119][T16744] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1060.303555][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.303555][T16744] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1060.318519][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.318519][T16744] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1060.332789][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.332789][T16744] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1060.346885][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.346885][T16744] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1060.431559][T16744] syz.1.3750: attempt to access beyond end of device [ 1060.431559][T16744] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1060.559557][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.039270][T16757] loop5: detected capacity change from 0 to 512 [ 1061.169048][T16757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.182533][T16757] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.258646][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.539431][T16793] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1063.550288][T16793] unsupported nla_type 65024 [ 1066.223694][T16822] loop1: detected capacity change from 0 to 512 [ 1066.286577][T16822] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1066.854422][T16837] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3784'. [ 1067.344111][T16822] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 1068.631810][T16857] loop6: detected capacity change from 0 to 512 [ 1068.736437][T16857] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1068.793718][T16857] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1068.978804][T16857] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3792: corrupted inode contents [ 1069.038316][T16857] EXT4-fs (loop6): Remounting filesystem read-only [ 1069.069257][T16857] EXT4-fs (loop6): 1 truncate cleaned up [ 1069.087286][ T4306] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1069.103797][ T4306] __quota_error: 15 callbacks suppressed [ 1069.103895][ T4306] Quota error (device loop6): write_blk: dquota write failed [ 1069.114575][T16869] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1069.117577][ T4306] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 1069.117697][ T4306] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1069.117810][ T4306] Quota error (device loop6): write_blk: dquota write failed [ 1069.117908][ T4306] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 1069.118297][ T4306] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 1069.177018][ T4306] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1069.186660][ T4306] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1069.469863][T16857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1069.546644][T16857] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.010234][T16904] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3807'. [ 1072.571360][T16912] netlink: 26 bytes leftover after parsing attributes in process `syz.6.3811'. [ 1073.160307][T16917] loop6: detected capacity change from 0 to 512 [ 1073.239931][T16922] loop1: detected capacity change from 0 to 128 [ 1073.292501][T16917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.310137][T16917] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.327358][T16926] netlink: 'syz.3.3816': attribute type 13 has an invalid length. [ 1073.335781][T16926] netlink: 'syz.3.3816': attribute type 17 has an invalid length. [ 1073.343838][T16926] lo: left promiscuous mode [ 1073.356682][T16926] tunl0: left promiscuous mode [ 1073.368185][T16926] gre0: left promiscuous mode [ 1073.379810][T16926] gretap0: left promiscuous mode [ 1073.413118][T16926] erspan0: left promiscuous mode [ 1073.451952][T16926] ip_vti0: left promiscuous mode [ 1073.463494][T16926] ip6_vti0: left promiscuous mode [ 1073.475203][T16926] sit0: left promiscuous mode [ 1073.485886][T16926] ip6tnl0: left promiscuous mode [ 1073.496707][T16926] ip6gre0: left promiscuous mode [ 1073.510206][T16926] syz_tun: left promiscuous mode [ 1073.535911][ T30] audit: type=1326 audit(1754428727.922:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.5.3817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1073.558827][ T30] audit: type=1326 audit(1754428727.972:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.5.3817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1073.581473][ T30] audit: type=1326 audit(1754428727.972:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.5.3817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1073.606486][ T30] audit: type=1326 audit(1754428727.992:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.5.3817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1073.668071][T16933] syz.1.3815: attempt to access beyond end of device [ 1073.668071][T16933] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1073.752030][T16933] syz.1.3815: attempt to access beyond end of device [ 1073.752030][T16933] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1073.792910][T16933] syz.1.3815: attempt to access beyond end of device [ 1073.792910][T16933] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1073.896030][T16933] syz.1.3815: attempt to access beyond end of device [ 1073.896030][T16933] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1073.935696][T16926] ip6gretap0: left promiscuous mode [ 1073.998078][T16926] vcan0: left promiscuous mode [ 1074.006035][T16926] bond0: left promiscuous mode [ 1074.007422][T16933] syz.1.3815: attempt to access beyond end of device [ 1074.007422][T16933] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1074.011088][T16926] bond_slave_0: left promiscuous mode [ 1074.035456][T16926] bond_slave_1: left promiscuous mode [ 1074.051833][T16926] team0: left promiscuous mode [ 1074.057301][T16926] team_slave_0: left promiscuous mode [ 1074.064008][T16926] team_slave_1: left promiscuous mode [ 1074.097698][T16933] syz.1.3815: attempt to access beyond end of device [ 1074.097698][T16933] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1074.186795][T16933] syz.1.3815: attempt to access beyond end of device [ 1074.186795][T16933] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1074.444984][T16926] dummy0: left promiscuous mode [ 1074.456500][T16926] nlmon0: left promiscuous mode [ 1074.471834][T16933] syz.1.3815: attempt to access beyond end of device [ 1074.471834][T16933] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1074.776253][T16926] caif0: left promiscuous mode [ 1074.781383][T16926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1075.251383][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.433784][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1075.988346][T16945] loop1: detected capacity change from 0 to 512 [ 1076.087173][T16945] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1076.151817][T16956] loop0: detected capacity change from 0 to 736 [ 1076.852273][T16956] Symlink component flag not implemented [ 1076.859815][T16956] Symlink component flag not implemented (122) [ 1077.335285][T16945] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 1077.579950][T16973] loop0: detected capacity change from 0 to 128 [ 1077.941084][T16973] syz.0.3830: attempt to access beyond end of device [ 1077.941084][T16973] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1078.036496][T16973] syz.0.3830: attempt to access beyond end of device [ 1078.036496][T16973] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1078.739536][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1079.779653][T16991] loop6: detected capacity change from 0 to 4096 [ 1079.975329][T16991] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1080.067471][T16991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.323251][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1080.323334][ T30] audit: type=1800 audit(1754428734.732:2619): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1080.729422][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.047328][T17007] loop5: detected capacity change from 0 to 512 [ 1081.146292][T17007] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1081.639160][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1082.317755][T17007] EXT4-fs (loop5): failed to open journal device unknown-block(0,9) -6 [ 1082.397594][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 1084.438189][T17055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1084.943258][T17059] loop6: detected capacity change from 0 to 128 [ 1085.053345][T17059] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1085.166075][T17059] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.739773][T13010] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1086.046488][T17068] loop1: detected capacity change from 0 to 512 [ 1086.178665][T17068] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1087.387393][T17068] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 1088.799870][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3875'. [ 1088.938172][T17097] bond0: (slave dummy0): Releasing backup interface [ 1089.394578][T17100] tipc: Enabling of bearer rejected, already enabled [ 1089.893347][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1090.749516][T17123] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1091.235297][T17122] loop5: detected capacity change from 0 to 512 [ 1091.389111][T17122] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1091.740840][T17137] loop1: detected capacity change from 0 to 512 [ 1091.929261][T17137] EXT4-fs: Ignoring removed orlov option [ 1091.950872][T17136] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 1092.268591][T17137] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1092.368440][T17136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1092.486368][T17137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1092.519656][T17137] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3888: corrupted in-inode xattr: e_value size too large [ 1092.582862][T17138] bond1: (slave dummy0): making interface the new active one [ 1092.597435][T17138] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1092.600975][T17137] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3888: couldn't read orphan inode 15 (err -117) [ 1092.692812][T17137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.740493][T17122] EXT4-fs (loop5): failed to open journal device unknown-block(0,9) -6 [ 1093.632180][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.640973][T17151] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3892'. [ 1095.543194][T17175] loop5: detected capacity change from 0 to 512 [ 1095.576287][T17175] EXT4-fs: Ignoring removed orlov option [ 1095.602112][T17175] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1095.664960][T17175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1095.686755][T17179] netlink: 26 bytes leftover after parsing attributes in process `syz.6.3905'. [ 1095.728757][T17180] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 1095.768647][T17175] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3904: corrupted in-inode xattr: e_value size too large [ 1095.846300][T17175] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3904: couldn't read orphan inode 15 (err -117) [ 1095.917881][T17180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1095.952543][T17175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.151942][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.204372][T17180] bond1: (slave dummy0): Releasing active interface [ 1096.255418][T17180] bond2: (slave dummy0): making interface the new active one [ 1096.271000][T17180] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1096.610712][T17193] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3907'. [ 1096.680049][T17188] loop1: detected capacity change from 0 to 512 [ 1096.929796][T17195] loop6: detected capacity change from 0 to 128 [ 1097.290982][T17188] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1097.510864][T17195] bio_check_eod: 9 callbacks suppressed [ 1097.510948][T17195] syz.6.3910: attempt to access beyond end of device [ 1097.510948][T17195] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1097.706201][T17195] syz.6.3910: attempt to access beyond end of device [ 1097.706201][T17195] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1097.720741][T17195] syz.6.3910: attempt to access beyond end of device [ 1097.720741][T17195] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1097.735107][T17195] syz.6.3910: attempt to access beyond end of device [ 1097.735107][T17195] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1097.830988][T17195] syz.6.3910: attempt to access beyond end of device [ 1097.830988][T17195] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1098.121831][T17188] EXT4-fs (loop1): failed to open journal device unknown-block(0,9) -6 [ 1098.597490][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'. [ 1098.887490][T17208] hsr_slave_0 (unregistering): left promiscuous mode [ 1099.345912][T17227] netlink: 'syz.1.3919': attribute type 1 has an invalid length. [ 1099.356288][T17226] loop5: detected capacity change from 0 to 512 [ 1099.396203][T17226] EXT4-fs: Ignoring removed orlov option [ 1099.463767][T17226] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1099.469709][T17227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1099.610478][T17226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1099.672960][T17227] bond3: (slave dummy0): making interface the new active one [ 1099.687020][T17227] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1099.704815][T17226] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3918: corrupted in-inode xattr: e_value size too large [ 1099.816652][T17226] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3918: couldn't read orphan inode 15 (err -117) [ 1099.928331][T17226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.177051][T17235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1100.405451][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.735060][T17242] loop5: detected capacity change from 0 to 128 [ 1101.176764][T17244] syz.5.3925: attempt to access beyond end of device [ 1101.176764][T17244] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1101.311760][T17244] syz.5.3925: attempt to access beyond end of device [ 1101.311760][T17244] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1101.326167][T17244] syz.5.3925: attempt to access beyond end of device [ 1101.326167][T17244] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1101.340386][T17244] syz.5.3925: attempt to access beyond end of device [ 1101.340386][T17244] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1101.358568][T17244] syz.5.3925: attempt to access beyond end of device [ 1101.358568][T17244] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1101.446784][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3928'. [ 1101.541136][T17252] bridge_slave_0: left allmulticast mode [ 1101.547467][T17252] bridge_slave_0: left promiscuous mode [ 1101.554454][T17252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.586319][T17256] loop6: detected capacity change from 0 to 128 [ 1101.681167][T17252] bridge_slave_1: left allmulticast mode [ 1101.687536][T17252] bridge_slave_1: left promiscuous mode [ 1101.694353][T17252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.831221][T17252] bond0: (slave bond_slave_0): Releasing backup interface [ 1102.189186][T13011] Bluetooth: hci5: command 0x0406 tx timeout [ 1102.201361][T17252] bond0: (slave bond_slave_1): Releasing backup interface [ 1102.383105][T17252] team0: Port device team_slave_0 removed [ 1102.486218][T17252] team0: Port device team_slave_1 removed [ 1102.494291][T17252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.539553][T17252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.670421][T17266] netlink: 'syz.5.3933': attribute type 1 has an invalid length. [ 1102.784945][T17266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.939242][T17270] bond0: (slave dummy0): making interface the new active one [ 1102.953651][T17270] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1103.327792][T17274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1104.072105][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3941'. [ 1104.267561][T17288] loop1: detected capacity change from 0 to 128 [ 1104.531191][T17288] bio_check_eod: 17 callbacks suppressed [ 1104.531286][T17288] syz.1.3943: attempt to access beyond end of device [ 1104.531286][T17288] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1104.531702][T17288] syz.1.3943: attempt to access beyond end of device [ 1104.531702][T17288] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1105.613505][T17307] netlink: 'syz.5.3950': attribute type 1 has an invalid length. [ 1105.772212][T17309] loop0: detected capacity change from 0 to 512 [ 1105.791852][T17309] EXT4-fs: Ignoring removed orlov option [ 1105.878024][T17307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1105.905120][T17312] bond0: (slave dummy0): Releasing active interface [ 1105.920649][T17309] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1105.944140][T17312] bond3: (slave dummy0): making interface the new active one [ 1105.959383][T17312] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1106.035793][T17309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1106.139512][T17309] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3949: corrupted in-inode xattr: e_value size too large [ 1106.190724][T17309] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3949: couldn't read orphan inode 15 (err -117) [ 1106.249173][T17309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.364485][T17318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1106.534135][T17319] 9pnet: p9_errstr2errno: server reported unknown error [ 1106.957627][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1107.119185][T17330] loop5: detected capacity change from 0 to 128 [ 1107.227560][T15556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.437651][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.437651][T17332] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1107.509265][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.509265][T17332] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1107.604676][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.604676][T17332] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1107.708752][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.708752][T17332] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1107.727959][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.727959][T17332] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1107.728414][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.728414][T17332] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1107.728812][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.728812][T17332] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1107.729214][T17332] syz.5.3957: attempt to access beyond end of device [ 1107.729214][T17332] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1108.974358][T17354] netlink: 'syz.0.3965': attribute type 1 has an invalid length. [ 1108.990466][T17347] loop6: detected capacity change from 0 to 512 [ 1109.053585][T17354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1109.072147][T17356] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1109.449398][T17354] bond2: (slave dummy0): Releasing active interface [ 1109.490337][T17354] bond3: (slave dummy0): making interface the new active one [ 1109.497057][T17354] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1109.611973][T17347] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1109.934284][T17363] loop5: detected capacity change from 0 to 512 [ 1109.978365][T17363] EXT4-fs: Ignoring removed orlov option [ 1110.000247][T17363] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1110.027970][T17363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1110.034146][T17363] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3968: corrupted in-inode xattr: e_value size too large [ 1110.035773][T17363] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3968: couldn't read orphan inode 15 (err -117) [ 1110.054483][T17363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.075349][T17365] 9pnet: p9_errstr2errno: server reported unknown error [ 1110.444323][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.517317][T17347] EXT4-fs (loop6): failed to open journal device unknown-block(0,9) -6 [ 1110.869214][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1112.569552][T17398] netlink: 'syz.6.3980': attribute type 1 has an invalid length. [ 1112.672110][T17398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1112.774914][T17401] bond2: (slave dummy0): making interface the new active one [ 1112.788804][T17401] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1112.884676][T17402] loop5: detected capacity change from 0 to 512 [ 1112.933550][T17402] EXT4-fs: Ignoring removed orlov option [ 1112.964817][T17402] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1113.014283][T17402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1113.094757][T17402] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3983: corrupted in-inode xattr: e_value size too large [ 1113.187788][T17404] 9pnet: p9_errstr2errno: server reported unknown error [ 1113.205887][T17402] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3983: couldn't read orphan inode 15 (err -117) [ 1113.267736][T17402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.426365][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3985'. [ 1113.816405][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.362082][T17438] netlink: 'syz.6.3995': attribute type 1 has an invalid length. [ 1115.441838][T17438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1115.512620][T17442] bond2: (slave dummy0): Releasing active interface [ 1115.648225][T17442] bond3: (slave dummy0): making interface the new active one [ 1115.662200][T17442] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1115.749131][T17444] 9pnet: p9_errstr2errno: server reported unknown error [ 1116.219816][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'. [ 1117.307498][T17457] loop1: detected capacity change from 0 to 736 [ 1118.549212][T17476] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 1118.647330][T17476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1118.739111][T17470] tipc: Enabling of bearer rejected, already enabled [ 1118.826362][T17476] bond4: (slave dummy0): making interface the new active one [ 1118.840552][T17476] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1119.551102][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4012'. [ 1121.207011][T17510] netlink: 'syz.5.4023': attribute type 1 has an invalid length. [ 1121.300002][T17510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1121.417973][T17518] loop1: detected capacity change from 0 to 256 [ 1121.434927][T17512] bond3: (slave dummy0): Releasing active interface [ 1121.479504][T17512] bond4: (slave dummy0): making interface the new active one [ 1121.494366][T17512] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1122.045284][T17514] tipc: Enabling of bearer rejected, already enabled [ 1122.712921][T17525] loop5: detected capacity change from 0 to 512 [ 1122.791768][T17525] journal_path: Lookup failure for './file0/../file0' [ 1122.799257][T17525] EXT4-fs: error: could not find journal device path [ 1123.542078][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1124.351820][T17538] loop5: detected capacity change from 0 to 736 [ 1124.770947][T17538] Symlink component flag not implemented [ 1124.777125][T17538] Symlink component flag not implemented (122) [ 1125.295914][ T30] audit: type=1326 audit(1754428779.722:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.320353][ T30] audit: type=1326 audit(1754428779.732:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.343633][ T30] audit: type=1326 audit(1754428779.732:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.367390][ T30] audit: type=1326 audit(1754428779.752:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.390115][ T30] audit: type=1326 audit(1754428779.752:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.733825][ T30] audit: type=1326 audit(1754428779.882:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.757040][ T30] audit: type=1326 audit(1754428779.892:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.780943][ T30] audit: type=1326 audit(1754428779.892:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.803659][ T30] audit: type=1326 audit(1754428779.902:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.827452][ T30] audit: type=1326 audit(1754428779.902:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1125.979190][T17555] tipc: Enabled bearer , priority 0 [ 1126.147344][T17552] tipc: Disabling bearer [ 1126.289420][T17565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1126.306648][T17554] tipc: Enabling of bearer rejected, already enabled [ 1127.882753][T17580] loop6: detected capacity change from 0 to 736 [ 1129.012206][T17591] tipc: Enabling of bearer rejected, failed to enable media [ 1130.286355][T17580] Symlink component flag not implemented [ 1130.292390][T17580] Symlink component flag not implemented (122) [ 1130.905247][T17605] loop1: detected capacity change from 0 to 2048 [ 1131.238542][T17605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.020173][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.580056][T17624] tipc: Started in network mode [ 1132.588041][T17624] tipc: Node identity de54281f7c37, cluster identity 4711 [ 1132.597605][T17624] tipc: Enabled bearer , priority 0 [ 1132.660088][T17623] tipc: Disabling bearer [ 1134.205320][T17644] ip6gretap0: entered promiscuous mode [ 1134.306241][T17644] ip6gretap0: left promiscuous mode [ 1134.396055][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1134.396143][ T30] audit: type=1326 audit(1754428788.822:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1134.425145][ T30] audit: type=1326 audit(1754428788.822:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fa5567 code=0x7ffc0000 [ 1134.449797][ T30] audit: type=1326 audit(1754428788.822:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1134.473063][ T30] audit: type=1326 audit(1754428788.822:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fa5567 code=0x7ffc0000 [ 1134.495971][ T30] audit: type=1326 audit(1754428788.822:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1134.518716][ T30] audit: type=1326 audit(1754428788.822:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fa5567 code=0x7ffc0000 [ 1134.541446][ T30] audit: type=1326 audit(1754428788.832:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1134.565712][ T30] audit: type=1326 audit(1754428788.862:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1134.589158][ T30] audit: type=1326 audit(1754428788.882:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1134.611925][ T30] audit: type=1326 audit(1754428788.882:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.1.4077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1135.037007][T17651] loop1: detected capacity change from 0 to 764 [ 1135.254801][T17655] tipc: Enabled bearer , priority 0 [ 1135.319622][T17654] tipc: Disabling bearer [ 1135.573395][T17660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1137.554883][T17674] loop0: detected capacity change from 0 to 736 [ 1138.829586][T17688] netlink: 'syz.5.4092': attribute type 21 has an invalid length. [ 1138.840257][T17688] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1138.850767][T17688] netlink: 'syz.5.4092': attribute type 4 has an invalid length. [ 1138.858852][T17688] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1139.620502][T17695] tipc: Enabled bearer , priority 0 [ 1139.734851][T17694] tipc: Disabling bearer [ 1139.791823][T17696] loop1: detected capacity change from 0 to 1024 [ 1139.882037][T17696] EXT4-fs: Ignoring removed orlov option [ 1139.897874][T17674] Symlink component flag not implemented [ 1139.903917][T17674] Symlink component flag not implemented (122) [ 1140.171785][T17696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.417669][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1140.417747][ T30] audit: type=1800 audit(1754428794.852:2679): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4094" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1140.920159][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.838543][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4101'. [ 1142.170374][T17727] loop5: detected capacity change from 0 to 512 [ 1142.223956][T17727] EXT4-fs: Ignoring removed orlov option [ 1142.280856][T17727] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1142.378207][T17727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1142.408025][T17727] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4107: corrupted in-inode xattr: e_value size too large [ 1142.510061][T17727] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4107: couldn't read orphan inode 15 (err -117) [ 1142.613937][T17727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1143.034624][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.196314][ T30] audit: type=1326 audit(1754428797.612:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.219644][ T30] audit: type=1326 audit(1754428797.612:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.376613][ T30] audit: type=1326 audit(1754428797.682:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.400064][ T30] audit: type=1326 audit(1754428797.692:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.422936][ T30] audit: type=1326 audit(1754428797.702:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.447725][ T30] audit: type=1326 audit(1754428797.722:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.471148][ T30] audit: type=1326 audit(1754428797.722:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.494407][ T30] audit: type=1326 audit(1754428797.732:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1143.517270][ T30] audit: type=1326 audit(1754428797.732:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.3.4112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 1145.403274][T17766] loop1: detected capacity change from 0 to 512 [ 1145.491303][T17766] EXT4-fs: Ignoring removed mblk_io_submit option [ 1145.540152][T17766] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1145.660991][T17766] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1145.677215][T17766] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1145.717277][T17770] ip6gretap0: entered promiscuous mode [ 1145.735340][T17770] ip6gretap0: left promiscuous mode [ 1145.749440][T17766] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4124: Invalid block bitmap block 0 in block_group 0 [ 1145.846056][T17766] EXT4-fs (loop1): Remounting filesystem read-only [ 1145.919214][T17766] Quota error (device loop1): write_blk: dquota write failed [ 1146.146071][T17766] Quota error (device loop1): write_blk: dquota write failed [ 1146.154402][T17766] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1146.164908][T17766] EXT4-fs (loop1): 1 orphan inode deleted [ 1146.179940][T17766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1146.559096][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.723008][T17782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1147.121610][T17788] loop1: detected capacity change from 0 to 256 [ 1149.914203][T17817] loop1: detected capacity change from 0 to 256 [ 1151.165869][T17833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1151.336663][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1153.128507][T17845] loop6: detected capacity change from 0 to 512 [ 1153.210042][T17845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1153.523283][T17845] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1153.531996][T17845] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1153.631518][T17845] EXT4-fs (loop6): 1 truncate cleaned up [ 1153.640292][T17845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.879287][T17875] loop1: detected capacity change from 0 to 512 [ 1154.940932][T17875] journal_path: Lookup failure for './file0/../file0' [ 1154.948384][T17875] EXT4-fs: error: could not find journal device path [ 1155.067384][T17858] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1155.136459][T17858] EXT4-fs (loop6): Remounting filesystem read-only [ 1155.237698][T17880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1155.548552][T17885] loop1: detected capacity change from 0 to 256 [ 1157.683408][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.966742][T17919] tipc: Enabling of bearer rejected, failed to enable media [ 1159.587428][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1160.236795][ T30] audit: type=1326 audit(1754428814.662:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.376443][ T30] audit: type=1326 audit(1754428814.712:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.399431][ T30] audit: type=1326 audit(1754428814.802:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.422691][ T30] audit: type=1326 audit(1754428814.802:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.447693][ T30] audit: type=1326 audit(1754428814.802:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.471154][ T30] audit: type=1326 audit(1754428814.802:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.882617][ T30] audit: type=1326 audit(1754428814.932:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.906012][ T30] audit: type=1326 audit(1754428814.932:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.928850][ T30] audit: type=1326 audit(1754428815.062:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1160.954007][ T30] audit: type=1326 audit(1754428815.062:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1162.396903][T17954] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4202'. [ 1162.881542][T17962] program syz.5.4207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1163.717604][T17976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1164.481649][T17983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1164.491751][T17983] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1165.187731][T17991] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4217'. [ 1165.920654][T17999] program syz.0.4220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1166.908813][T18016] netlink: 'syz.3.4230': attribute type 9 has an invalid length. [ 1166.990285][T18017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4229'. [ 1169.343615][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1169.343700][ T30] audit: type=1326 audit(1754428823.752:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.476872][ T30] audit: type=1326 audit(1754428823.832:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.500333][ T30] audit: type=1326 audit(1754428823.832:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.522958][ T30] audit: type=1326 audit(1754428823.842:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.546783][ T30] audit: type=1326 audit(1754428823.852:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.572061][ T30] audit: type=1326 audit(1754428823.862:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.596011][ T30] audit: type=1326 audit(1754428823.872:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.618822][ T30] audit: type=1326 audit(1754428823.872:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.642254][ T30] audit: type=1326 audit(1754428823.872:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1169.666581][ T30] audit: type=1326 audit(1754428823.872:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1171.031958][T18059] vlan2: entered allmulticast mode [ 1171.461391][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1172.505022][T18072] loop6: detected capacity change from 0 to 512 [ 1172.674189][T18072] EXT4-fs: Ignoring removed orlov option [ 1172.714353][T18079] bond4: entered promiscuous mode [ 1172.719970][T18079] bond4: entered allmulticast mode [ 1172.732422][T18079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1172.803557][T18072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1172.864624][T18079] bond4 (unregistering): Released all slaves [ 1173.267464][T18072] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1173.413690][T18072] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4253: bg 0: block 248: padding at end of block bitmap is not set [ 1173.558408][T18072] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4253: Failed to acquire dquot type 1 [ 1173.888231][T18072] EXT4-fs (loop6): 1 truncate cleaned up [ 1173.969734][T18072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1174.498167][T18072] EXT4-fs: Ignoring removed orlov option [ 1174.504468][T18072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1174.549447][T18072] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1174.796019][T18072] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.4253: Abort forced by user [ 1174.837233][T18072] EXT4-fs (loop6): Remounting filesystem read-only [ 1174.844146][T18072] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1174.853178][T18072] ext4 filesystem being remounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.638273][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.782581][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1175.782667][ T30] audit: type=1326 audit(1754428830.182:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1175.815003][ T30] audit: type=1326 audit(1754428830.182:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.042283][ T30] audit: type=1326 audit(1754428830.282:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.065198][ T30] audit: type=1326 audit(1754428830.282:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.088023][ T30] audit: type=1326 audit(1754428830.282:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.114008][ T30] audit: type=1326 audit(1754428830.292:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.137790][ T30] audit: type=1326 audit(1754428830.292:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.160547][ T30] audit: type=1326 audit(1754428830.292:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.183924][ T30] audit: type=1326 audit(1754428830.302:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.206496][ T30] audit: type=1326 audit(1754428830.302:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18111 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1176.996738][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1177.033564][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4275'. [ 1181.937611][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1182.809902][T18198] loop0: detected capacity change from 0 to 512 [ 1183.093589][T18198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.107476][T18198] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.892783][T15556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.593535][T18253] loop0: detected capacity change from 0 to 512 [ 1186.666338][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1186.666424][ T30] audit: type=1326 audit(1754428841.082:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18247 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1186.695934][ T30] audit: type=1326 audit(1754428841.082:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18247 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1186.720531][ T30] audit: type=1326 audit(1754428841.102:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18247 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1186.743512][ T30] audit: type=1326 audit(1754428841.102:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18247 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1186.780972][ T30] audit: type=1326 audit(1754428841.212:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18247 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 1186.967933][T18253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.981467][T18253] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.552648][T15556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.559310][T18292] loop5: detected capacity change from 0 to 2048 [ 1190.848275][T18292] loop5: p2 p3 p7 [ 1191.841331][T18302] loop6: detected capacity change from 0 to 2048 [ 1192.211020][T18302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.011680][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.283778][T18342] loop6: detected capacity change from 0 to 512 [ 1195.969048][T18342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.988622][T18342] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.685286][T18362] loop5: detected capacity change from 0 to 2048 [ 1196.882954][T18362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1197.235829][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.761613][T15160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.522969][T18392] loop6: detected capacity change from 0 to 512 [ 1199.631949][T18397] loop5: detected capacity change from 0 to 128 [ 1199.785154][T18401] loop1: detected capacity change from 0 to 512 [ 1199.877655][T18392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.891406][T18392] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.981941][T18401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.996090][T18401] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.012410][T18395] loop0: detected capacity change from 0 to 8192 [ 1200.405268][ T30] audit: type=1800 audit(1754428854.832:2757): pid=18392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4360" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1200.666172][T18413] syzkaller0: entered promiscuous mode [ 1200.671902][T18413] syzkaller0: entered allmulticast mode [ 1200.760166][T14098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.239046][T13010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.731904][ T57] ===================================================== [ 1201.739537][ T57] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 1201.748109][ T57] n_tty_receive_buf_standard+0xafd/0x98a0 [ 1201.754243][ T57] n_tty_receive_buf_common+0x1a68/0x2540 [ 1201.760339][ T57] n_tty_receive_buf2+0x4c/0x60 [ 1201.765389][ T57] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1201.771073][ T57] tty_port_default_receive_buf+0xd7/0x1a0 [ 1201.777947][ T57] flush_to_ldisc+0x43b/0xe30 [ 1201.782907][ T57] process_scheduled_works+0xb91/0x1d80 [ 1201.789096][ T57] worker_thread+0xedf/0x1590 [ 1201.794037][ T57] kthread+0xd59/0xf00 [ 1201.799994][ T57] ret_from_fork+0x1e3/0x310 [ 1201.804866][ T57] ret_from_fork_asm+0x1a/0x30 [ 1201.814257][ T57] [ 1201.818055][ T57] Uninit was stored to memory at: [ 1201.823388][ T57] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 1201.829826][ T57] n_tty_receive_buf_common+0x1a68/0x2540 [ 1201.835954][ T57] n_tty_receive_buf2+0x4c/0x60 [ 1201.841007][ T57] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1201.846560][ T57] tty_port_default_receive_buf+0xd7/0x1a0 [ 1201.852641][ T57] flush_to_ldisc+0x43b/0xe30 [ 1201.857714][ T57] process_scheduled_works+0xb91/0x1d80 [ 1201.863521][ T57] worker_thread+0xedf/0x1590 [ 1201.868743][ T57] kthread+0xd59/0xf00 [ 1201.873440][ T57] ret_from_fork+0x1e3/0x310 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1201.878374][ T57] ret_from_fork_asm+0x1a/0x30 [ 1201.883485][ T57] [ 1201.886036][ T57] Uninit was created at: [ 1201.890661][ T57] __kmalloc_noprof+0x95f/0x1310 [ 1201.895969][ T57] __tty_buffer_request_room+0x3d4/0x7a0 [ 1201.901853][ T57] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1201.908301][ T57] uart_insert_char+0x368/0x930 [ 1201.917922][ T57] serial8250_read_char+0x1ba/0x670 [ 1201.924790][ T57] serial8250_handle_irq+0x930/0x1110 [ 1201.930688][ T57] serial8250_default_handle_irq+0x116/0x330 [ 1201.937230][ T57] serial8250_interrupt+0xc8/0x400 [ 1201.942610][ T57] __handle_irq_event_percpu+0x11f/0xbf0 [ 1201.948730][ T57] handle_irq_event+0xe0/0x2a0 [ 1201.953718][ T57] handle_edge_irq+0x2a9/0xb50 [ 1201.959147][ T57] __common_interrupt+0xa2/0x220 [ 1201.964539][ T57] common_interrupt+0x94/0xb0 [ 1201.969691][ T57] asm_common_interrupt+0x2b/0x40 [ 1201.975131][ T57] [ 1201.977723][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(none) [ 1201.990548][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1202.001044][ T57] Workqueue: events_unbound flush_to_ldisc [ 1202.007267][ T57] ===================================================== [ 1202.008282][T11305] IPVS: starting estimator thread 0... [ 1202.019516][ T57] Disabling lock debugging due to kernel taint [ 1202.031751][ T57] Kernel panic - not syncing: kmsan.panic set ... [ 1202.038373][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G B 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(none) [ 1202.051834][ T57] Tainted: [B]=BAD_PAGE [ 1202.056124][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1202.066365][ T57] Workqueue: events_unbound flush_to_ldisc [ 1202.072440][ T57] Call Trace: [ 1202.075873][ T57] [ 1202.079029][ T57] __dump_stack+0x26/0x30 [ 1202.083615][ T57] dump_stack_lvl+0x53/0x270 [ 1202.088463][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1202.094507][ T57] dump_stack+0x1e/0x25 [ 1202.098873][ T57] vpanic+0x361/0xc50 [ 1202.103084][ T57] panic+0x15d/0x160 [ 1202.107259][ T57] kmsan_report+0x31c/0x320 [ 1202.112034][ T57] ? __msan_warning+0x1b/0x30 [ 1202.116941][ T57] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 1202.123148][ T57] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 1202.129241][ T57] ? n_tty_receive_buf2+0x4c/0x60 [ 1202.134481][ T57] ? tty_ldisc_receive_buf+0xc3/0x2c0 [ 1202.140303][ T57] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1202.146663][ T57] ? flush_to_ldisc+0x43b/0xe30 [ 1202.151721][ T57] ? process_scheduled_works+0xb91/0x1d80 [ 1202.157638][ T57] ? worker_thread+0xedf/0x1590 [ 1202.162735][ T57] ? kthread+0xd59/0xf00 [ 1202.167148][ T57] ? ret_from_fork+0x1e3/0x310 [ 1202.172063][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 1202.177207][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 1202.182355][ T57] ? __mutex_lock+0x75b/0x26f0 [ 1202.187415][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1202.193417][ T57] ? kmsan_get_metadata+0xfb/0x160 [ 1202.198696][ T57] ? kmsan_get_metadata+0x150/0x160 [ 1202.204071][ T57] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1202.210729][ T57] ? kmsan_get_metadata+0x150/0x160 [ 1202.216105][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1202.222109][ T57] ? n_tty_receive_char+0xfae/0x1440 [ 1202.227584][ T57] ? kmsan_get_metadata+0xfb/0x160 [ 1202.232892][ T57] __msan_warning+0x1b/0x30 [ 1202.237545][ T57] n_tty_receive_buf_standard+0xafd/0x98a0 [ 1202.243617][ T57] ? stack_depot_save_flags+0x35/0x7b0 [ 1202.249419][ T57] ? sk_skb_reason_drop+0x126/0x440 [ 1202.254995][ T57] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1202.261575][ T57] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1202.267915][ T57] n_tty_receive_buf_common+0x1a68/0x2540 [ 1202.273853][ T57] ? _raw_spin_lock+0x11/0x60 [ 1202.278734][ T57] ? stack_depot_save_flags+0x35/0x7b0 [ 1202.284449][ T57] n_tty_receive_buf2+0x4c/0x60 [ 1202.289462][ T57] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1202.295171][ T57] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1202.300609][ T57] tty_port_default_receive_buf+0xd7/0x1a0 [ 1202.306662][ T57] flush_to_ldisc+0x43b/0xe30 [ 1202.311569][ T57] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1202.318301][ T57] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1202.323712][ T57] process_scheduled_works+0xb91/0x1d80 [ 1202.329565][ T57] worker_thread+0xedf/0x1590 [ 1202.334604][ T57] kthread+0xd59/0xf00 [ 1202.338823][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1202.344201][ T57] ? __pfx_kthread+0x10/0x10 [ 1202.349046][ T57] ret_from_fork+0x1e3/0x310 [ 1202.353793][ T57] ? __pfx_kthread+0x10/0x10 [ 1202.358546][ T57] ret_from_fork_asm+0x1a/0x30 [ 1202.363553][ T57] [ 1202.367035][ T57] Kernel Offset: disabled [ 1202.371445][ T57] Rebooting in 86400 seconds..