last executing test programs: 1m41.150814862s ago: executing program 3 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d9}, 0x40010) 1m41.138003226s ago: executing program 3 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000f80)=""/4096) 1m41.097268556s ago: executing program 3 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) 1m40.564028644s ago: executing program 3 (id=522): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x1000040, 0x0) 1m40.186800932s ago: executing program 3 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000005c0)='\b', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffdfc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1m39.838856192s ago: executing program 3 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) 1m39.835565951s ago: executing program 32 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) 2.300289239s ago: executing program 4 (id=3203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1.126333926s ago: executing program 1 (id=3228): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x8000000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdb6) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) 1.124871971s ago: executing program 4 (id=3229): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.092240343s ago: executing program 4 (id=3230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d760", 0x5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 1.091995875s ago: executing program 0 (id=3231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.030831257s ago: executing program 1 (id=3232): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1.030529624s ago: executing program 0 (id=3233): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0x358) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x25, 0x6, "66d21aa033c4546c9cc80f0fba9b503ffe5834e763612e3645003ec7f845d46b3a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000008) 1.022773783s ago: executing program 1 (id=3235): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 780.658478ms ago: executing program 5 (id=3239): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000050000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_regs={0x7}}) 357.416166ms ago: executing program 5 (id=3240): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 350.678287ms ago: executing program 1 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x71b5, &(0x7f0000000040)={0x0, 0x9272, 0xc000, 0xfffffffe, 0xad}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffec5, 0x0}, 0x4000000) io_uring_enter(r2, 0xf00, 0x2, 0x17, 0x0, 0x0) 286.713434ms ago: executing program 1 (id=3243): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r3, 0x10, 0x6, 0x105ff) 286.398188ms ago: executing program 5 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) 286.1969ms ago: executing program 2 (id=3245): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x40000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0xa, 0x7, 0x2, 0x81}) 264.594926ms ago: executing program 5 (id=3246): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'ip_vti0\x00'}}, 0x1e) close(r3) 244.800805ms ago: executing program 1 (id=3247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1000}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 190.862287ms ago: executing program 4 (id=3248): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, 0x0) 190.451478ms ago: executing program 2 (id=3249): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x0, 0x10001, 0xffff, 0x5, 0x5, 0xfec8, 0x5, 0x7f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 190.120411ms ago: executing program 0 (id=3250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0xef7, &(0x7f0000003680)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "febe17", 0xeb9, 0x6, 0xff, @local, @empty, {[@srh={0x11, 0x6, 0x4, 0x3, 0x4, 0x40, 0x1, [@local, @private1, @mcast1]}, @routing={0x67, 0xa, 0x2, 0xe6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x5e, 0x2, 0x1, 0xff, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x0, 0x4, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x33, 0x1a2, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @private1}, @generic={0xe, 0xcf3, "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"}]}], {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0xf7, 0x0, 0x7, {[@exp_fastopen={0xfe, 0x9, 0xf989, "29d8fe53d6"}, @sack={0x5, 0xa, [0x6, 0x200]}, @exp_smc={0xfe, 0x6}, @generic={0xfe, 0xf, "7dd91fc572de7162b3fe0a5ff1"}, @mptcp=@mp_join={0x1e, 0x3}, @exp_smc={0xfe, 0x6}]}}, {"b0d143b92ea345efd3bd60c37cb9772765ad696e358ce925573c28e895782d1b3ff1109f7929a8bb769fbe677209f6979c6523df67c233c4000e67711af66bc79830c4e6069c7d52bfe7b655a98bd7a61ab2da28f08fc4547e47cf2b70f8f3ab4bdff4179f2970bbf788868500725ce763a49fd01b970cd2affb89f647e20e0760"}}}}}}}, 0x0) 184.61755ms ago: executing program 5 (id=3251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0xe557, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) 168.016572ms ago: executing program 4 (id=3252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 152.758553ms ago: executing program 0 (id=3253): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$unix(0x1, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) 102.184201ms ago: executing program 0 (id=3254): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x87}}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x444, &(0x7f0000000340)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 101.763507ms ago: executing program 2 (id=3255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') 100.991528ms ago: executing program 4 (id=3256): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 30.797341ms ago: executing program 2 (id=3257): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 30.436364ms ago: executing program 0 (id=3258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 30.24905ms ago: executing program 2 (id=3259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) getpriority(0x0, 0x0) 5.914167ms ago: executing program 5 (id=3260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 2 (id=3261): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000800, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) kernel console output (not intermixed with test programs): ory [ 99.948266][ T6686] udevd[6686]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 99.953860][T11243] team0 (unregistering): Port device team_slave_0 removed [ 99.968853][T11255] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1750'. [ 100.189765][T11267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1753'. [ 100.377020][T11283] netlink: 'syz.5.1762': attribute type 2 has an invalid length. [ 100.378497][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1762'. [ 100.508017][T11292] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1766'. [ 100.825054][T11295] loop0: detected capacity change from 0 to 2048 [ 100.834812][ T31] kauditd_printk_skb: 213 callbacks suppressed [ 100.834849][ T31] audit: type=1326 audit(100.823:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 100.841824][ T31] audit: type=1326 audit(100.823:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 100.841871][ T31] audit: type=1326 audit(100.823:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 100.841897][ T31] audit: type=1326 audit(100.823:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 100.841915][ T31] audit: type=1326 audit(100.823:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 100.843374][ T31] audit: type=1326 audit(100.833:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 100.847745][ T31] audit: type=1326 audit(100.833:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffae55ba1c code=0x7ffc0000 [ 100.847763][ T31] audit: type=1326 audit(100.833:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffae55a0d0 code=0x7ffc0000 [ 100.847776][ T31] audit: type=1326 audit(100.833:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffae55ba8c code=0x7ffc0000 [ 100.847789][ T31] audit: type=1326 audit(100.833:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae559dd4 code=0x7ffc0000 [ 100.925874][T11295] loop0: p2 p3 p7 [ 101.051429][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 101.062463][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 101.958843][T11330] loop5: detected capacity change from 0 to 512 [ 101.968825][T11330] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1781: inode has both inline data and extents flags [ 101.969028][T11330] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1781: couldn't read orphan inode 15 (err -117) [ 101.973243][T11330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.044513][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.213348][T11359] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1795'. [ 102.220241][T11356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1792'. [ 102.257993][T11367] loop5: detected capacity change from 0 to 512 [ 102.271268][T11367] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1798: inode has both inline data and extents flags [ 102.275580][T11367] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1798: couldn't read orphan inode 15 (err -117) [ 102.278225][T11367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.287631][T11372] loop4: detected capacity change from 0 to 2048 [ 102.299502][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.343120][T11379] netlink: 'syz.0.1802': attribute type 2 has an invalid length. [ 102.343150][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1802'. [ 102.352574][T11372] loop4: p2 p3 p7 [ 102.378861][T11385] atomic_op 00000000458f650b conn xmit_atomic 0000000000000000 [ 102.472945][T11396] syz_tun: entered allmulticast mode [ 102.475793][T11394] syz_tun: left allmulticast mode [ 102.533202][T11398] futex_wake_op: syz.1.1806 tries to shift op by -1; fix this program [ 102.624031][T11411] loop5: detected capacity change from 0 to 2048 [ 102.630871][T11416] netlink: 'syz.2.1818': attribute type 2 has an invalid length. [ 102.723786][T11411] loop5: p2 p3 p7 [ 102.733532][T11422] loop4: detected capacity change from 0 to 512 [ 102.797604][T11432] lo speed is unknown, defaulting to 1000 [ 102.797968][T11432] lo speed is unknown, defaulting to 1000 [ 102.868391][T11422] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1824: inode has both inline data and extents flags [ 102.872467][T11422] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1824: couldn't read orphan inode 15 (err -117) [ 102.882237][T11422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.882405][T11433] tipc: Started in network mode [ 102.882431][T11433] tipc: Node identity ac14140f, cluster identity 4711 [ 102.882546][T11433] tipc: New replicast peer: 255.255.255.255 [ 102.884050][T11433] tipc: Enabled bearer , priority 10 [ 102.891074][T11422] syz_tun: entered allmulticast mode [ 102.892552][T11420] syz_tun: left allmulticast mode [ 103.052017][T11440] lo speed is unknown, defaulting to 1000 [ 103.056807][T11440] lo speed is unknown, defaulting to 1000 [ 103.172620][T11434] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.172751][T11434] SET target dimension over the limit! [ 103.206343][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.326223][T11459] loop4: detected capacity change from 0 to 2048 [ 103.364026][ T6192] loop4: p2 p3 p7 [ 103.385714][T11459] loop4: p2 p3 p7 [ 103.436840][T11466] syz_tun: entered allmulticast mode [ 103.439047][T11465] syz_tun: left allmulticast mode [ 103.542951][T11474] lo speed is unknown, defaulting to 1000 [ 103.547589][T11474] lo speed is unknown, defaulting to 1000 [ 103.652950][T11480] openvswitch: netlink: Flow key attr not present in new flow. [ 103.810257][T11498] syz_tun: entered allmulticast mode [ 103.832691][T11494] syz_tun: left allmulticast mode [ 103.936820][T11502] veth1_macvtap: left promiscuous mode [ 103.937768][T11502] macsec0: entered promiscuous mode [ 104.004361][ T9] tipc: Node number set to 2886997007 [ 104.131499][T11542] __nla_validate_parse: 6 callbacks suppressed [ 104.133427][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 104.610953][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1918'. [ 104.610998][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1918'. [ 104.611076][T11630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1918'. [ 104.645092][T11638] syz_tun: entered allmulticast mode [ 104.648162][T11636] syz_tun: left allmulticast mode [ 104.649575][T11640] macvtap0: refused to change device tx_queue_len [ 104.777746][T11659] lo speed is unknown, defaulting to 1000 [ 104.778120][T11659] lo speed is unknown, defaulting to 1000 [ 105.087150][T11666] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 105.116665][T11668] loop0: detected capacity change from 0 to 512 [ 105.128400][T11668] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1934: inode has both inline data and extents flags [ 105.129140][T11668] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1934: couldn't read orphan inode 15 (err -117) [ 105.129682][T11668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.168909][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 105.181912][ T6557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.218226][T11672] team0: Port device team_slave_1 removed [ 105.238922][T11674] loop0: detected capacity change from 0 to 4096 [ 105.241212][T11674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.255347][T11674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.268351][ T6557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.586885][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1944'. [ 105.634839][T11696] loop5: detected capacity change from 0 to 512 [ 105.646148][T11696] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1946: inode has both inline data and extents flags [ 105.646364][T11696] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1946: couldn't read orphan inode 15 (err -117) [ 105.646882][T11696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.648378][T11696] syz_tun: entered allmulticast mode [ 105.651090][T11695] syz_tun: left allmulticast mode [ 105.661614][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.825906][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1956'. [ 105.837789][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1956'. [ 106.136976][T11726] loop5: detected capacity change from 0 to 2048 [ 106.177885][ T6544] loop5: p2 p3 p7 [ 106.190672][T11726] loop5: p2 p3 p7 [ 106.260384][T11730] syz_tun: entered allmulticast mode [ 106.263370][T11729] syz_tun: left allmulticast mode [ 106.298958][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 106.302056][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 106.316133][ T6686] udevd[6686]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 106.333548][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 106.335430][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 106.337628][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 106.350531][T11737] loop5: detected capacity change from 0 to 1024 [ 106.374898][T11737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.412372][T11744] netlink: 'syz.2.1964': attribute type 2 has an invalid length. [ 107.413828][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1964'. [ 107.420441][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.465234][T11755] loop5: detected capacity change from 0 to 2048 [ 107.478426][T11760] vhci_hcd: invalid port number 23 [ 107.492811][T11755] loop5: p1 < > p4 [ 107.495418][T11755] loop5: p4 size 8388608 extends beyond EOD, truncated [ 107.563397][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 107.566429][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 107.579001][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 107.583317][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 107.619808][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1979'. [ 107.642132][T11778] netlink: 'syz.4.1979': attribute type 2 has an invalid length. [ 108.143346][T11814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.144451][ T6563] lo speed is unknown, defaulting to 1000 [ 108.689618][T11874] tipc: Enabled bearer , priority 0 [ 108.692631][T11874] tipc: Disabling bearer [ 109.348547][ T31] kauditd_printk_skb: 82 callbacks suppressed [ 109.348583][ T31] audit: type=1326 audit(109.333:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11895 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 109.353840][ T31] audit: type=1326 audit(109.343:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11895 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=17 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 109.357768][ T31] audit: type=1326 audit(109.343:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11895 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 109.362022][ T31] audit: type=1326 audit(109.343:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11895 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 109.365556][ T31] audit: type=1326 audit(109.353:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11894 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 109.368797][ T31] audit: type=1326 audit(109.353:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11894 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 109.368832][ T31] audit: type=1326 audit(109.353:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11894 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 109.368850][ T31] audit: type=1326 audit(109.353:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11894 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 109.368864][ T31] audit: type=1326 audit(109.353:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11894 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 109.368877][ T31] audit: type=1326 audit(109.353:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11894 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 109.748082][T11915] loop0: detected capacity change from 0 to 1024 [ 109.756024][T11915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.769042][ T8110] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 6) [ 109.772511][ T8110] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 109.772541][ T8110] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.772541][ T8110] [ 109.774396][ T8110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 109.776842][ T8110] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 109.776859][ T8110] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.776859][ T8110] [ 109.794467][ T6557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.634743][T11957] netlink: 'syz.5.2039': attribute type 12 has an invalid length. [ 110.782370][T11972] netlink: 'syz.5.2045': attribute type 2 has an invalid length. [ 110.783754][T11972] __nla_validate_parse: 2 callbacks suppressed [ 110.784790][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2045'. [ 110.797257][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 110.845295][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'. [ 110.851358][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'. [ 110.949270][T11996] vcan0: entered allmulticast mode [ 110.950436][T11996] pim6reg: left allmulticast mode [ 110.951388][T11996] vcan0: left allmulticast mode [ 110.988711][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 111.061613][T12008] netlink: 'syz.0.2062': attribute type 2 has an invalid length. [ 111.065647][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2062'. [ 111.199510][T12015] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2066'. [ 111.285366][T12042] loop4: detected capacity change from 0 to 512 [ 111.295767][T12042] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2074: inode has both inline data and extents flags [ 111.295895][T12042] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2074: couldn't read orphan inode 15 (err -117) [ 111.296381][T12042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.297491][T12042] syz_tun: entered allmulticast mode [ 111.303348][T12041] syz_tun: left allmulticast mode [ 111.319971][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.382552][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 111.403393][T12053] netlink: 'syz.2.2078': attribute type 2 has an invalid length. [ 111.403425][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2078'. [ 111.581344][T12064] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2084'. [ 111.659502][T12071] syz_tun: entered allmulticast mode [ 111.663531][T12070] syz_tun: left allmulticast mode [ 111.945688][T12093] loop5: detected capacity change from 0 to 512 [ 111.964190][T12093] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2097: inode has both inline data and extents flags [ 111.964485][T12093] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2097: couldn't read orphan inode 15 (err -117) [ 111.971807][T12093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.988073][T12093] syz_tun: entered allmulticast mode [ 111.990639][T12091] syz_tun: left allmulticast mode [ 112.062707][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.737489][T10228] syz_tun (unregistering): left allmulticast mode [ 112.776900][T12146] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 112.991888][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.002066][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.004859][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.007800][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.008040][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.013214][T12163] netem: incorrect gi model size [ 113.013250][T12163] netem: change failed [ 113.045435][ T6554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.047478][ T6554] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.048936][ T6554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.062856][ T6554] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.068872][ T6554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.090846][T12161] lo speed is unknown, defaulting to 1000 [ 113.100041][T12161] lo speed is unknown, defaulting to 1000 [ 113.405664][T12161] chnl_net:caif_netlink_parms(): no params data found [ 113.465349][T12190] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 113.465383][T12190] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 113.812232][T12195] netlink: 'syz.1.2137': attribute type 2 has an invalid length. [ 113.982814][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.982953][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.983025][T12161] bridge_slave_0: entered allmulticast mode [ 113.983486][T12161] bridge_slave_0: entered promiscuous mode [ 113.984382][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.984424][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.984477][T12161] bridge_slave_1: entered allmulticast mode [ 113.984871][T12161] bridge_slave_1: entered promiscuous mode [ 114.063233][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.065236][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.076576][T12161] team0: Port device team_slave_0 added [ 114.077326][T12161] team0: Port device team_slave_1 added [ 114.093556][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.093586][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.093602][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.094219][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.094225][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.094236][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.121427][T12161] hsr_slave_0: entered promiscuous mode [ 114.123079][T12161] hsr_slave_1: entered promiscuous mode [ 114.124971][T12161] debugfs: 'hsr0' already exists in 'hsr' [ 114.129199][T12161] Cannot create hsr debugfs directory [ 114.216555][T12161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.225327][T12221] ip6tnl1: entered promiscuous mode [ 114.276582][T12230] loop5: detected capacity change from 0 to 1024 [ 114.278722][T12161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.285846][T12230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.291394][T12230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c01c, mo2=0002] [ 114.293836][T12230] System zones: 0-1, 3-36 [ 114.303374][T12230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.326669][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.369977][T12161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.477781][T12161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.812339][ T53] Bluetooth: hci0: command tx timeout [ 114.812395][ T53] Bluetooth: hci3: command 0x1003 tx timeout [ 114.813691][ T6552] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 114.868643][T12161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.874929][T12161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.877072][T12161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.879939][T12161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.932767][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.938731][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.943023][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.943069][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.945797][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.945841][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.004045][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.019936][T12161] veth0_vlan: entered promiscuous mode [ 115.024820][T12161] veth1_vlan: entered promiscuous mode [ 115.035569][T12161] veth0_macvtap: entered promiscuous mode [ 115.036778][T12161] veth1_macvtap: entered promiscuous mode [ 115.040291][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.042748][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.047417][ T9323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.049014][ T9323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.051597][ T9323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.055422][ T9323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.094739][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.094784][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.106399][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.106441][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.133443][ T6554] Bluetooth: hci5: command tx timeout [ 115.230354][T12292] loop0: detected capacity change from 0 to 512 [ 115.244122][T12292] __quota_error: 126 callbacks suppressed [ 115.245350][T12292] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 115.248350][T12292] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.253021][T12292] EXT4-fs (loop0): mount failed [ 115.291360][T12297] loop0: detected capacity change from 0 to 164 [ 115.303554][T12297] bio_check_eod: 92 callbacks suppressed [ 115.304864][T12297] syz.0.2176: attempt to access beyond end of device [ 115.304864][T12297] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 115.308006][T12297] syz.0.2176: attempt to access beyond end of device [ 115.308006][T12297] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 115.507260][ T31] audit: type=1326 audit(115.493:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.507372][ T31] audit: type=1326 audit(115.493:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508322][ T31] audit: type=1326 audit(115.493:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508383][ T31] audit: type=1326 audit(115.493:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508451][ T31] audit: type=1326 audit(115.493:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508622][ T31] audit: type=1326 audit(115.493:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508719][ T31] audit: type=1326 audit(115.493:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508776][ T31] audit: type=1326 audit(115.493:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.508902][ T31] audit: type=1326 audit(115.493:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12320 comm="syz.5.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 115.561701][T12328] loop0: detected capacity change from 0 to 1024 [ 115.564977][T12328] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 115.586666][T12328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.603257][T12328] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2191: missing EA_INODE flag [ 115.606833][T12328] EXT4-fs (loop0): Remounting filesystem read-only [ 115.619121][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.818144][T12354] loop0: detected capacity change from 0 to 512 [ 115.818539][T12354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.818548][T12354] EXT4-fs: Ignoring removed bh option [ 115.820408][T12354] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 115.826334][T12354] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2199: bg 0: block 255: padding at end of block bitmap is not set [ 115.827063][T12354] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 115.827241][T12354] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2199: invalid indirect mapped block 1 (level 1) [ 115.827522][T12354] EXT4-fs (loop0): 1 truncate cleaned up [ 115.828368][T12354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.869695][T12358] dvmrp0: entered allmulticast mode [ 115.884723][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.958675][T12370] __nla_validate_parse: 9 callbacks suppressed [ 115.959968][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2206'. [ 116.602661][T12415] lo speed is unknown, defaulting to 1000 [ 116.603069][T12415] lo speed is unknown, defaulting to 1000 [ 116.691253][T12418] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2226'. [ 117.024340][T12457] netlink: '+}[@': attribute type 27 has an invalid length. [ 117.024814][T12457] ip6gre1: left promiscuous mode [ 117.024824][T12457] ip6gre1: left allmulticast mode [ 117.117736][T12466] atomic_op 000000001ac7b840 conn xmit_atomic 0000000000000000 [ 117.129363][T12468] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.186852][T12473] lo speed is unknown, defaulting to 1000 [ 117.187208][T12473] lo speed is unknown, defaulting to 1000 [ 117.211871][ T6554] Bluetooth: hci5: command tx timeout [ 117.221609][T12478] netlink: 'syz.1.2245': attribute type 13 has an invalid length. [ 117.307093][T12478] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.307322][T12478] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.577501][T12478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.602661][T12478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.687727][T12522] atomic_op 000000003a4a483e conn xmit_atomic 0000000000000000 [ 117.822620][ T8109] lo speed is unknown, defaulting to 1000 [ 117.822653][ T8109] sz1: Port: 1 Link DOWN [ 117.823247][ T8109] lo speed is unknown, defaulting to 1000 [ 117.845227][ T141] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.845294][ T141] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.845335][ T141] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.845359][ T141] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.964908][T12550] atomic_op 00000000969f5d3f conn xmit_atomic 0000000000000000 [ 118.049008][T12562] loop0: detected capacity change from 0 to 1024 [ 118.056760][T12562] EXT4-fs: inline encryption not supported [ 118.067499][T12562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.204935][T12575] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 118.221815][T12575] EXT4-fs (loop0): Remounting filesystem read-only [ 118.511212][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.719061][T12633] loop5: detected capacity change from 0 to 128 [ 118.732852][T12633] syz.5.2310: attempt to access beyond end of device [ 118.732852][T12633] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 118.733642][T12633] syz.5.2310: attempt to access beyond end of device [ 118.733642][T12633] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 118.733678][T12633] buffer_io_error: 9 callbacks suppressed [ 118.733687][T12633] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 118.733920][T12633] syz.5.2310: attempt to access beyond end of device [ 118.733920][T12633] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 118.733942][T12633] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 118.734748][T12633] syz.5.2310: attempt to access beyond end of device [ 118.734748][T12633] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 118.735441][T12633] syz.5.2310: attempt to access beyond end of device [ 118.735441][T12633] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 118.735457][T12633] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 118.735993][T12633] syz.5.2310: attempt to access beyond end of device [ 118.735993][T12633] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 118.736013][T12633] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 118.736908][T12633] syz.5.2310: attempt to access beyond end of device [ 118.736908][T12633] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 118.737141][T12633] syz.5.2310: attempt to access beyond end of device [ 118.737141][T12633] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 118.737150][T12633] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 118.737345][T12633] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 118.737770][T12633] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 118.737793][T12633] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 118.738080][T12633] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 118.738101][T12633] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 119.112842][T12653] IPv6: Can't replace route, no match found [ 119.301898][ T6554] Bluetooth: hci5: command tx timeout [ 119.496640][T12662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.500281][T12662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.702219][T12681] netlink: 'syz.4.2325': attribute type 14 has an invalid length. [ 119.717884][ T8110] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.717935][ T8110] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.717958][ T8110] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.717973][ T8110] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.832292][T12695] loop0: detected capacity change from 0 to 512 [ 120.272414][T12695] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2334: bad orphan inode 11862016 [ 120.275002][T12695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 120.297525][T12705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.299410][T12705] batman_adv: batadv0: Interface activated: dummy0 [ 120.303190][T12705] batadv0: mtu less than device minimum [ 120.305682][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.307008][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.308299][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.309583][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.310883][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.312206][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.313510][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.314805][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.316095][T12705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.334798][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 120.375077][T12710] lo speed is unknown, defaulting to 1000 [ 120.375438][T12710] lo speed is unknown, defaulting to 1000 [ 120.410388][T12671] lo speed is unknown, defaulting to 1000 [ 120.410426][T12671] syz0: Port: 1 Link ACTIVE [ 120.476561][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2343'. [ 120.852453][ T31] kauditd_printk_skb: 392 callbacks suppressed [ 120.853101][ T31] audit: type=1326 audit(120.843:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.857521][ T31] audit: type=1326 audit(120.843:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.861465][ T31] audit: type=1326 audit(120.843:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.861860][ T31] audit: type=1326 audit(120.843:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.871040][ T31] audit: type=1326 audit(120.853:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.874901][ T31] audit: type=1326 audit(120.863:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.879073][ T31] audit: type=1326 audit(120.863:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.882867][ T31] audit: type=1326 audit(120.873:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.883064][ T31] audit: type=1326 audit(120.873:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.883132][ T31] audit: type=1326 audit(120.873:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.1.2351" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5b9e8 code=0x7ffc0000 [ 120.938645][T12782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'. [ 121.332297][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2363'. [ 121.360979][T12808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2366'. [ 121.371897][ T6554] Bluetooth: hci5: command tx timeout [ 121.405647][T12805] hub 2-0:1.0: USB hub found [ 121.405800][T12805] hub 2-0:1.0: 8 ports detected [ 121.439179][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2372'. [ 121.542871][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2378'. [ 121.556244][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2376'. [ 121.618595][T12843] loop4: detected capacity change from 0 to 512 [ 121.634137][T12843] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2383: inode has both inline data and extents flags [ 121.634339][T12843] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2383: couldn't read orphan inode 15 (err -117) [ 121.634835][T12843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.642112][T12843] syz_tun: entered allmulticast mode [ 121.678447][T12842] syz_tun: left allmulticast mode [ 121.695630][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.798551][T12866] netlink: 'syz.1.2394': attribute type 10 has an invalid length. [ 122.143697][T12866] team0 (unregistering): Port device team_slave_0 removed [ 122.147010][T12866] team0 (unregistering): Port device dummy0 removed [ 122.153075][T12872] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2395'. [ 122.188811][T12870] loop4: detected capacity change from 0 to 512 [ 122.218981][T12870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.249847][T12870] lo speed is unknown, defaulting to 1000 [ 122.251340][T12870] lo speed is unknown, defaulting to 1000 [ 122.398995][T12891] syz_tun: entered allmulticast mode [ 122.401254][T12890] syz_tun: left allmulticast mode [ 122.779742][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.829947][T12902] loop5: detected capacity change from 0 to 512 [ 122.837229][T12902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.849272][T12902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 122.900780][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 122.987994][T12915] xt_hashlimit: max too large, truncated to 1048576 [ 123.127933][T12925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.129316][T12925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.230849][T12950] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.298411][T12950] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.317328][T12963] bond0: (slave bridge0): Releasing backup interface [ 124.345277][T12963] bridge_slave_0: left allmulticast mode [ 124.346969][T12963] bridge_slave_0: left promiscuous mode [ 124.348958][T12963] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.359215][T12963] bridge_slave_1: left allmulticast mode [ 124.360416][T12963] bridge_slave_1: left promiscuous mode [ 124.362011][T12963] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.365665][T12963] bond0: (slave bond_slave_0): Releasing backup interface [ 124.369499][T12969] netlink: 'syz.5.2428': attribute type 10 has an invalid length. [ 124.371229][T12969] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2428'. [ 124.393065][T12963] bond0: (slave bond_slave_1): Releasing backup interface [ 124.414508][T12963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.416446][T12963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.423214][T12969] batman_adv: batadv0: Adding interface: virt_wifi0 [ 124.423242][T12969] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.428927][T12969] batman_adv: batadv0: Interface activated: virt_wifi0 [ 124.504235][T12950] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.593690][T12950] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.680608][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.685732][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.692205][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.696089][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.791839][T13005] xt_bpf: check failed: parse error [ 124.876394][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 124.878249][T13018] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 124.880366][T13018] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 124.951583][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 125.048482][T13041] sch_fq: defrate 4294967295 ignored. [ 125.392451][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2477'. [ 125.698433][T13106] loop0: detected capacity change from 0 to 512 [ 125.761403][T13106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.789083][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.933830][ T2450] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934990][ T2450] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.993886][T13161] loop4: detected capacity change from 0 to 764 [ 126.014878][T13161] rock: directory entry would overflow storage [ 126.015117][T13161] rock: sig=0x4654, size=5, remaining=4 [ 126.088156][T13170] IPv6: Can't replace route, no match found [ 126.191004][T13191] netlink: '+}[@': attribute type 21 has an invalid length. [ 126.470063][T13241] 9pnet_fd: Insufficient options for proto=fd [ 126.787035][T13255] loop5: detected capacity change from 0 to 128 [ 126.887028][T13268] __nla_validate_parse: 5 callbacks suppressed [ 126.887067][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2561'. [ 126.944806][T13266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.945348][T13266] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.976711][T13266] net_ratelimit: 15 callbacks suppressed [ 126.976723][T13266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.039429][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 127.039467][ T31] audit: type=1326 audit(127.023:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.039500][ T31] audit: type=1326 audit(127.023:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045714][ T31] audit: type=1326 audit(127.023:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045740][ T31] audit: type=1326 audit(127.023:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045755][ T31] audit: type=1326 audit(127.023:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045769][ T31] audit: type=1326 audit(127.023:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045782][ T31] audit: type=1326 audit(127.023:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045794][ T31] audit: type=1326 audit(127.033:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=451 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045806][ T31] audit: type=1326 audit(127.033:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.045817][ T31] audit: type=1326 audit(127.033:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 127.309315][T13296] lo speed is unknown, defaulting to 1000 [ 127.312778][T13296] lo speed is unknown, defaulting to 1000 [ 127.722673][T13331] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 127.889855][T13346] loop0: detected capacity change from 0 to 512 [ 127.899286][T13346] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 127.901529][T13346] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.905360][T13346] EXT4-fs (loop0): orphan cleanup on readonly fs [ 127.907254][T13346] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2596: bad orphan inode 11 [ 127.910951][T13346] ext4_test_bit(bit=10, block=2) = 0 [ 127.911495][T13346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.957263][T13346] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.969265][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.004826][T13359] loop4: detected capacity change from 0 to 1024 [ 128.006548][T13359] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.008505][T13359] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.010469][T13359] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.013894][T13359] JBD2: no valid journal superblock found [ 128.013948][T13359] EXT4-fs (loop4): Could not load journal inode [ 128.329405][T13390] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 128.329479][T13390] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 128.570667][T13396] loop4: detected capacity change from 0 to 128 [ 128.578482][T13396] FAT-fs (loop4): Directory bread(block 32) failed [ 128.578514][T13396] FAT-fs (loop4): Directory bread(block 33) failed [ 128.578545][T13396] FAT-fs (loop4): Directory bread(block 34) failed [ 128.578568][T13396] FAT-fs (loop4): Directory bread(block 35) failed [ 128.578590][T13396] FAT-fs (loop4): Directory bread(block 36) failed [ 128.578600][T13396] FAT-fs (loop4): Directory bread(block 37) failed [ 128.578620][T13396] FAT-fs (loop4): Directory bread(block 38) failed [ 128.578630][T13396] FAT-fs (loop4): Directory bread(block 39) failed [ 128.578649][T13396] FAT-fs (loop4): Directory bread(block 40) failed [ 128.578659][T13396] FAT-fs (loop4): Directory bread(block 41) failed [ 128.846339][T13401] netlink: 'syz.5.2621': attribute type 1 has an invalid length. [ 128.861409][T13402] loop4: detected capacity change from 0 to 512 [ 128.865260][T13402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 128.865381][T13402] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.865925][T13402] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.2620: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 128.866119][T13402] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2620: couldn't read orphan inode 13 (err -117) [ 128.866706][T13402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.887279][T13405] loop5: detected capacity change from 0 to 2048 [ 128.892263][T13402] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 128.893272][T13402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 128.894271][T13405] EXT4-fs (loop5): failed to initialize system zone (-117) [ 128.894314][T13405] EXT4-fs (loop5): mount failed [ 128.919881][T13402] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 128.941671][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.076225][T13420] netlink: 'syz.4.2628': attribute type 21 has an invalid length. [ 129.184819][T13437] ip6gre1: entered allmulticast mode [ 129.348406][T13451] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 129.384043][T13456] tipc: Enabling of bearer rejected, failed to enable media [ 129.389799][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2644'. [ 129.508072][T13473] 9pnet_fd: Insufficient options for proto=fd [ 129.520152][T13471] loop4: detected capacity change from 0 to 512 [ 129.543818][T13471] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2651: inode has both inline data and extents flags [ 129.548510][T13471] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2651: couldn't read orphan inode 15 (err -117) [ 129.551702][T13471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.557213][T13471] syz_tun: entered allmulticast mode [ 129.572929][T13470] syz_tun: left allmulticast mode [ 129.582666][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.594985][T13484] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 129.614932][T13484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.619568][T13484] vlan2: entered allmulticast mode [ 129.619610][T13484] batadv0: entered allmulticast mode [ 129.620134][T13484] bond1: (slave vlan2): Opening slave failed [ 129.635361][T13489] tipc: New replicast peer: 255.255.255.32 [ 129.637666][T13489] tipc: Enabled bearer , priority 10 [ 129.874567][T13506] loop4: detected capacity change from 0 to 512 [ 130.052794][T13506] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 130.052947][T13506] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.058705][T13506] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 130.060537][T13506] EXT4-fs (loop4): Remounting filesystem read-only [ 130.060750][T13506] EXT4-fs (loop4): 1 truncate cleaned up [ 130.069578][ T42] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.078007][ T42] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.078085][ T42] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.078926][T13506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.314422][T13546] loop0: detected capacity change from 0 to 1024 [ 130.317619][T13550] syz_tun: entered allmulticast mode [ 130.324027][T13546] EXT4-fs: Ignoring removed orlov option [ 130.324302][T13549] syz_tun: left allmulticast mode [ 130.327223][T13546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.329153][T13546] ext4: Unknown parameter 'subj_role' [ 130.446064][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 130.460367][T13572] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 130.460403][T13572] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 130.512676][T13579] syz_tun: entered allmulticast mode [ 130.534802][T13578] syz_tun: left allmulticast mode [ 130.546760][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.566305][T12668] hid_parser_main: 34 callbacks suppressed [ 130.566370][T12668] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.569691][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'. [ 130.569731][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'. [ 130.575601][T12668] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.588848][T13585] netlink: 'syz.2.2696': attribute type 39 has an invalid length. [ 130.722987][T13592] loop0: detected capacity change from 0 to 32768 [ 130.743808][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 130.753535][T12483] tipc: Node number set to 106032241 [ 130.774146][T13592] loop0: p1 p2 p3 < p5 p6 > [ 130.776305][T13592] loop0: p2 size 16775168 extends beyond EOD, truncated [ 130.782805][T13592] loop0: p5 start 4294970168 is beyond EOD, truncated [ 130.863021][T13607] syz_tun: entered allmulticast mode [ 130.868413][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 130.869104][T13606] syz_tun: left allmulticast mode [ 130.874536][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 130.875233][ T6686] udevd[6686]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 130.879815][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 131.357054][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 131.465302][T13637] loop5: detected capacity change from 0 to 2048 [ 131.465786][T13637] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.465816][T13637] EXT4-fs: Ignoring removed i_version option [ 131.494775][T13637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.679995][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.776718][T13667] loop0: detected capacity change from 0 to 512 [ 131.798832][T13667] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2727: inode has both inline data and extents flags [ 131.803276][T13667] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2727: couldn't read orphan inode 15 (err -117) [ 131.806053][T13667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.813236][T13667] syz_tun: entered allmulticast mode [ 131.825503][T13666] syz_tun: left allmulticast mode [ 131.869039][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.937888][T13685] $Hÿ: renamed from bond0 [ 131.941266][T13685] $Hÿ: entered promiscuous mode [ 131.942438][T13685] bond_slave_0: entered promiscuous mode [ 131.943482][T13685] bond_slave_1: entered promiscuous mode [ 132.129043][T13700] loop0: detected capacity change from 0 to 512 [ 132.139641][T13700] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2741: inode has both inline data and extents flags [ 132.140047][T13700] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2741: couldn't read orphan inode 15 (err -117) [ 132.141623][T13700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.148382][ T31] kauditd_printk_skb: 135 callbacks suppressed [ 132.148420][ T31] audit: type=1326 audit(132.133:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.148447][ T31] audit: type=1326 audit(132.133:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.148986][T13700] syz_tun: entered allmulticast mode [ 132.149716][ T31] audit: type=1326 audit(132.133:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.149744][ T31] audit: type=1326 audit(132.133:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.149768][ T31] audit: type=1326 audit(132.133:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.157457][ T31] audit: type=1326 audit(132.143:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.157479][ T31] audit: type=1326 audit(132.143:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.157493][ T31] audit: type=1326 audit(132.143:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.157506][ T31] audit: type=1326 audit(132.143:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffae55df8c code=0x7ffc0000 [ 132.157519][ T31] audit: type=1326 audit(132.143:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b9e8 code=0x7ffc0000 [ 132.159240][T13699] syz_tun: left allmulticast mode [ 132.181334][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.203758][T13710] netlink: 'syz.0.2745': attribute type 15 has an invalid length. [ 132.205187][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 132.389035][T13732] loop0: detected capacity change from 0 to 512 [ 132.395115][T13732] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2755: inode has both inline data and extents flags [ 132.395340][T13732] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2755: couldn't read orphan inode 15 (err -117) [ 132.399913][T13732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.410631][T13732] syz_tun: entered allmulticast mode [ 132.444046][T13731] syz_tun: left allmulticast mode [ 132.459417][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.732471][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2778'. [ 132.943350][T13807] pim6reg: entered allmulticast mode [ 132.945386][T13807] pim6reg: left allmulticast mode [ 132.969693][T13810] loop0: detected capacity change from 0 to 8192 [ 133.221922][ T6552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.224834][ T6552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.227303][ T6552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.230498][ T6552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.238427][ T6552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.253742][T13838] can0: slcan on ptm0. [ 133.277463][T13833] lo speed is unknown, defaulting to 1000 [ 133.279096][T13833] lo speed is unknown, defaulting to 1000 [ 133.317218][T13846] lo speed is unknown, defaulting to 1000 [ 133.319473][T13846] lo speed is unknown, defaulting to 1000 [ 133.343546][T13835] can0 (unregistered): slcan off ptm0. [ 133.500658][T13870] loop4: detected capacity change from 0 to 512 [ 133.502081][T13870] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.533987][T13870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.584992][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.597199][T13833] chnl_net:caif_netlink_parms(): no params data found [ 133.719699][T13833] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.719845][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.720024][T13833] bridge_slave_0: entered allmulticast mode [ 133.724981][T13833] bridge_slave_0: entered promiscuous mode [ 133.729835][T13833] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.729884][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.729962][T13833] bridge_slave_1: entered allmulticast mode [ 133.733592][T13833] bridge_slave_1: entered promiscuous mode [ 133.845047][T13896] loop4: detected capacity change from 0 to 256 [ 134.058465][T13833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.071210][T13833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.113027][T13833] team0: Port device team_slave_0 added [ 134.122765][T13833] team0: Port device team_slave_1 added [ 134.137131][T13903] loop5: detected capacity change from 0 to 256 [ 134.142184][T13903] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.169008][T13833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.169033][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.169823][T13833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.170590][T13833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.170598][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.170614][T13833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.221405][T13833] hsr_slave_0: entered promiscuous mode [ 134.224652][T13833] hsr_slave_1: entered promiscuous mode [ 134.224890][T13833] debugfs: 'hsr0' already exists in 'hsr' [ 134.224902][T13833] Cannot create hsr debugfs directory [ 134.356080][T13911] loop5: detected capacity change from 0 to 512 [ 134.358898][T13911] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.378469][T13911] EXT4-fs (loop5): 1 truncate cleaned up [ 134.382744][T13911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.498677][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.664397][T13936] netlink: 'syz.1.2831': attribute type 2 has an invalid length. [ 134.665813][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2831'. [ 134.723299][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.766624][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.802366][ T41] bond0 (unregistering): Released all slaves [ 134.829336][T13947] tipc: Started in network mode [ 134.829374][T13947] tipc: Node identity ac141413, cluster identity 4711 [ 134.829493][T13947] tipc: New replicast peer: 10.1.1.2 [ 134.829558][T13947] tipc: Enabled bearer , priority 10 [ 134.863524][ T41] tipc: Disabling bearer [ 134.863657][ T41] tipc: Left network mode [ 135.295497][ T6554] Bluetooth: hci3: command tx timeout [ 135.468515][ T41] hsr_slave_0: left promiscuous mode [ 135.469559][ T41] hsr_slave_1: left promiscuous mode [ 135.469832][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.470710][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.772816][ T41] team0 (unregistering): Port device team_slave_0 removed [ 135.776196][T14023] netlink: 'syz.1.2856': attribute type 2 has an invalid length. [ 135.777512][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2856'. [ 135.949245][T14039] loop4: detected capacity change from 0 to 512 [ 135.990661][T14039] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 135.990795][T14039] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.994783][T14039] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2864: corrupted inode contents [ 135.998140][T14039] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #16: comm syz.4.2864: mark_inode_dirty error [ 136.000233][T14039] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2864: corrupted inode contents [ 136.003327][T14039] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2864: mark_inode_dirty error [ 136.005395][T14039] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2864: corrupted inode contents [ 136.008340][T14039] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 136.009948][T14039] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2864: corrupted inode contents [ 136.015867][T14039] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.2864: mark_inode_dirty error [ 136.017881][T14039] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 136.021232][T14039] EXT4-fs (loop4): 1 truncate cleaned up [ 136.023630][ T8110] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 136.026325][T14039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.027035][T14039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.099546][T14037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2863'. [ 136.106992][T13833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.121904][T12518] tipc: Node number set to 2886997011 [ 136.130982][T13833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.143556][T13833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.157999][T13833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.200202][T14055] loop5: detected capacity change from 0 to 1024 [ 136.202587][T14055] EXT4-fs: Ignoring removed orlov option [ 136.204525][T14055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.215400][T14066] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 136.245984][T13833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.249668][T13833] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.251366][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.251390][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.261695][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.261766][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.275397][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.458928][T13833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.484133][T13833] veth0_vlan: entered promiscuous mode [ 136.486830][T13833] veth1_vlan: entered promiscuous mode [ 136.543547][T13833] veth0_macvtap: entered promiscuous mode [ 136.557360][T13833] veth1_macvtap: entered promiscuous mode [ 136.564266][T13833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.567655][T13833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.574019][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.574061][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.574080][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.574092][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.751822][ T7008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.751856][ T7008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.795379][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.795415][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.033829][T14135] netlink: 'syz.0.2880': attribute type 2 has an invalid length. [ 137.035329][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2880'. [ 137.209118][ T31] kauditd_printk_skb: 331 callbacks suppressed [ 137.209157][ T31] audit: type=1326 audit(137.193:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14100 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 137.215694][ T31] audit: type=1326 audit(137.203:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14100 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 137.262795][T14152] loop4: detected capacity change from 0 to 512 [ 137.279141][T14152] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2888: inode has both inline data and extents flags [ 137.281588][T14152] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2888: couldn't read orphan inode 15 (err -117) [ 137.284575][T14152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.288052][T14152] syz_tun: entered allmulticast mode [ 137.293081][T14151] syz_tun: left allmulticast mode [ 137.305278][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.343619][T14156] hub 5-0:1.0: USB hub found [ 137.346730][T14156] hub 5-0:1.0: 8 ports detected [ 137.371834][ T6554] Bluetooth: hci3: command tx timeout [ 137.439536][T14163] netlink: 'syz.2.2893': attribute type 2 has an invalid length. [ 137.442441][T14163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2893'. [ 137.477840][T14168] loop4: detected capacity change from 0 to 128 [ 137.810743][T14177] loop2: detected capacity change from 0 to 256 [ 138.207649][T14183] loop5: detected capacity change from 0 to 512 [ 138.241288][T14183] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2900: inode has both inline data and extents flags [ 138.241909][T14183] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2900: couldn't read orphan inode 15 (err -117) [ 138.243567][T14183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.250026][T14183] syz_tun: entered allmulticast mode [ 138.252047][T14182] syz_tun: left allmulticast mode [ 138.274092][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.496934][T14190] ip6t_srh: unknown srh match flags 4000 [ 138.647032][T14196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.649588][T14196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.653945][T14196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.668753][T14196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.777076][T14198] netlink: 'syz.5.2906': attribute type 2 has an invalid length. [ 138.777113][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2906'. [ 139.038052][T14215] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2915'. [ 139.043571][T14212] loop5: detected capacity change from 0 to 512 [ 139.059763][T14212] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2912: inode has both inline data and extents flags [ 139.062838][T14215] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2915'. [ 139.102271][T14212] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2912: couldn't read orphan inode 15 (err -117) [ 139.119122][T14212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.135019][T14215] loop4: detected capacity change from 0 to 512 [ 139.137736][T14212] syz_tun: entered allmulticast mode [ 139.138351][T14211] syz_tun: left allmulticast mode [ 139.161147][T14215] EXT4-fs: Ignoring removed oldalloc option [ 139.177347][T14215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.457970][ T6554] Bluetooth: hci3: command tx timeout [ 139.469318][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.475851][T14215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c118, mo2=0002] [ 139.477579][T14215] System zones: 1-3, 19-19, 35-38 [ 139.480972][T14215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.628674][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.730228][ T31] audit: type=1326 audit(139.713:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.736624][ T31] audit: type=1326 audit(139.723:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.748761][ T31] audit: type=1326 audit(139.733:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.752908][ T31] audit: type=1326 audit(139.743:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.757454][ T31] audit: type=1326 audit(139.743:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.764235][ T31] audit: type=1326 audit(139.753:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.768978][ T31] audit: type=1326 audit(139.753:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.775627][ T31] audit: type=1326 audit(139.763:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14231 comm="syz.4.2918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad55b9e8 code=0x7ffc0000 [ 139.929829][T14246] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2924'. [ 139.993169][T14250] loop4: detected capacity change from 0 to 512 [ 140.035677][T14250] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2926: inode has both inline data and extents flags [ 140.038064][T14250] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2926: couldn't read orphan inode 15 (err -117) [ 140.059324][T14250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.068984][T14250] syz_tun: entered allmulticast mode [ 140.072218][T14249] syz_tun: left allmulticast mode [ 140.111381][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.131497][T14267] loop2: detected capacity change from 0 to 1764 [ 140.144139][T14267] loop2: Can't mount, would change RO state [ 140.348360][T14295] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2941'. [ 140.434490][T14294] syz_tun: entered allmulticast mode [ 140.435491][T14293] syz_tun: left allmulticast mode [ 140.480635][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 140.483892][T14308] openvswitch: netlink: Flow key attr not present in new flow. [ 140.517365][T14317] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 140.536429][T14323] loop5: detected capacity change from 0 to 128 [ 140.596521][T14323] bio_check_eod: 38 callbacks suppressed [ 140.597915][T14323] syz.5.2956: attempt to access beyond end of device [ 140.597915][T14323] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 140.599044][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599044][T14323] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 140.599089][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599089][T14323] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 140.599350][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599350][T14323] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 140.599392][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599392][T14323] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 140.599426][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599426][T14323] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 140.599461][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599461][T14323] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 140.599505][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599505][T14323] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 140.599540][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599540][T14323] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 140.599580][T14323] syz.5.2956: attempt to access beyond end of device [ 140.599580][T14323] loop5: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 140.692656][T14337] loop5: detected capacity change from 0 to 1024 [ 140.708485][T14337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.740800][T14337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.2961: inode #1296518400: comm syz.5.2961: iget: illegal inode # [ 140.743019][T14337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2961: error while reading EA inode 1296518400 err=-117 [ 140.753349][T14349] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.760765][T14337] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #15: comm syz.5.2961: corrupted xattr block 113: invalid header [ 140.766093][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 140.767992][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 140.769758][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 140.776861][T14351] netlink: 'syz.0.2967': attribute type 4 has an invalid length. [ 140.779069][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.814157][T14355] smc: net device bond0 applied user defined pnetid SYZ0 [ 140.814882][T14355] smc: net device bond0 erased user defined pnetid SYZ0 [ 140.876496][T14364] loop2: detected capacity change from 0 to 512 [ 140.896595][T14364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.918885][T14364] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 140.930499][T14371] batman_adv: batadv0: Interface deactivated: dummy0 [ 140.930546][T14371] batman_adv: batadv0: Removing interface: dummy0 [ 140.944798][T14371] bridge_slave_0: left allmulticast mode [ 140.945098][T14371] bridge_slave_0: left promiscuous mode [ 140.945262][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.949137][T14371] bridge_slave_1: left allmulticast mode [ 140.950609][T14371] bridge_slave_1: left promiscuous mode [ 140.951018][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.967423][T13833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.978695][T14371] bond0: (slave bond_slave_0): Releasing backup interface [ 140.982507][T14380] netlink: 'syz.4.2972': attribute type 10 has an invalid length. [ 141.045703][T14371] bond0: (slave bond_slave_1): Releasing backup interface [ 141.078103][T14371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.085692][T14371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.087907][T14371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.101434][T14380] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.101468][T14380] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.101662][T14380] batman_adv: batadv0: Interface activated: virt_wifi0 [ 141.112993][ T6552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.118474][ T6552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.122054][ T6552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.133520][ T6552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.135640][ T6552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.175972][T14393] lo speed is unknown, defaulting to 1000 [ 141.177365][T14393] lo speed is unknown, defaulting to 1000 [ 141.233647][T14400] loop2: detected capacity change from 0 to 512 [ 141.332356][T14406] loop2: detected capacity change from 0 to 2048 [ 141.362604][T14406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 141.529216][T14393] chnl_net:caif_netlink_parms(): no params data found [ 141.532099][ T6552] Bluetooth: hci3: command tx timeout [ 141.819343][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.819555][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.820328][T14393] bridge_slave_0: entered allmulticast mode [ 141.824873][T14393] bridge_slave_0: entered promiscuous mode [ 141.826909][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.828895][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.830364][T14393] bridge_slave_1: entered allmulticast mode [ 141.832174][T14393] bridge_slave_1: entered promiscuous mode [ 141.869886][T14406] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.876613][T14406] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 141.879385][T14406] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.879385][T14406] [ 141.880157][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.883059][T14406] EXT4-fs (loop2): Total free blocks count 0 [ 141.884001][T14406] EXT4-fs (loop2): Free/Dirty block details [ 141.884975][T14406] EXT4-fs (loop2): free_blocks=2415919104 [ 141.885857][T14406] EXT4-fs (loop2): dirty_blocks=8192 [ 141.886828][T14406] EXT4-fs (loop2): Block reservation details [ 141.887332][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.889032][T14406] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 141.915415][T14393] team0: Port device team_slave_0 added [ 141.921437][ T14] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 141.923377][T14393] team0: Port device team_slave_1 added [ 141.985357][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.987436][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.992153][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.003281][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.005456][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.010537][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.032231][ T141] bridge_slave_1: left allmulticast mode [ 142.033523][ T141] bridge_slave_1: left promiscuous mode [ 142.034959][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.056907][ T141] bridge_slave_0: left allmulticast mode [ 142.056943][ T141] bridge_slave_0: left promiscuous mode [ 142.057041][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.117274][T14455] loop2: detected capacity change from 0 to 2048 [ 142.157027][ T6544] Alternate GPT is invalid, using primary GPT. [ 142.157229][ T6544] loop2: p2 p3 p7 [ 142.184877][T14455] Alternate GPT is invalid, using primary GPT. [ 142.184989][T14455] loop2: p2 p3 p7 [ 142.207775][ T141] dvmrp0 (unregistering): left allmulticast mode [ 142.225724][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 142.233946][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 142.236263][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 142.255318][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 142.258209][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 142.260775][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 142.349895][ T141] bridge2 (unregistering): left promiscuous mode [ 142.454472][ T141] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.482073][ T141] bond_slave_0: left promiscuous mode [ 142.484258][ T141] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.512259][ T141] bond_slave_1: left promiscuous mode [ 142.512489][ T141] $Hÿ (unregistering): Released all slaves [ 142.569286][ T141] bond1 (unregistering): Released all slaves [ 142.604810][T14393] hsr_slave_0: entered promiscuous mode [ 142.606566][T14393] hsr_slave_1: entered promiscuous mode [ 142.607516][T14393] debugfs: 'hsr0' already exists in 'hsr' [ 142.607715][T14393] Cannot create hsr debugfs directory [ 142.938934][T14480] Falling back ldisc for ttyS3. [ 143.141919][T14509] loop5: detected capacity change from 0 to 1024 [ 143.158895][T14509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.213389][ T6552] Bluetooth: hci2: command tx timeout [ 143.489434][ T141] veth1: left promiscuous mode [ 143.492394][ T141] hsr_slave_0: left promiscuous mode [ 143.493241][ T141] hsr_slave_1: left promiscuous mode [ 143.493465][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.494394][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.527053][ T7008] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 143.527312][ T7008] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 143.527326][ T7008] EXT4-fs (loop5): This should not happen!! Data will be lost [ 143.527326][ T7008] [ 143.527930][ T7008] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 143.528135][ T7008] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 143.528144][ T7008] EXT4-fs (loop5): This should not happen!! Data will be lost [ 143.528144][ T7008] [ 143.529109][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.599203][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 143.600570][ T31] audit: type=1326 audit(143.583:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.605464][ T31] audit: type=1326 audit(143.593:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.610871][ T31] audit: type=1326 audit(143.593:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.614611][ T31] audit: type=1326 audit(143.593:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.614628][ T31] audit: type=1326 audit(143.603:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.627067][ T31] audit: type=1326 audit(143.613:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.637624][ T31] audit: type=1326 audit(143.613:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.641267][ T31] audit: type=1326 audit(143.613:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.644995][ T31] audit: type=1326 audit(143.613:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.649025][ T31] audit: type=1326 audit(143.613:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14523 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 143.673994][T14528] loop5: detected capacity change from 0 to 1024 [ 143.709284][T14528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.727627][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.061034][ T7008] smc: removing ib device sz1 [ 144.064558][T14517] __nla_validate_parse: 9 callbacks suppressed [ 144.064608][T14517] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3016'. [ 144.408696][T14393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.413366][T14393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.418589][T14393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.439000][T14393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.718695][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.759075][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.767323][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.767369][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.772231][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.772271][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.902495][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.902653][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.201086][T14609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.204201][T14609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.291843][ T6552] Bluetooth: hci2: command tx timeout [ 145.537691][T14598] Set syz1 is full, maxelem 65536 reached [ 145.570248][ T14] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.571899][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.571941][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.571962][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.610612][T14633] loop4: detected capacity change from 0 to 1024 [ 145.611013][T14633] EXT4-fs: inline encryption not supported [ 145.649024][T14633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.653590][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.669498][T14393] veth0_vlan: entered promiscuous mode [ 145.673793][T14393] veth1_vlan: entered promiscuous mode [ 145.683088][T14393] veth0_macvtap: entered promiscuous mode [ 145.685467][T14393] veth1_macvtap: entered promiscuous mode [ 145.690984][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.701370][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.705856][ T8110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.705919][ T8110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.705943][ T8110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.705960][ T8110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.766259][T14649] loop0: detected capacity change from 0 to 512 [ 145.789991][ T8110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.794659][ T9323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.796360][ T9323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.800729][ T8110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.824948][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3037'. [ 145.875788][T14649] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3045: invalid indirect mapped block 4294967295 (level 1) [ 145.880496][T14649] EXT4-fs (loop0): Remounting filesystem read-only [ 145.881313][T14644] loop5: detected capacity change from 0 to 1024 [ 145.881711][T14644] EXT4-fs: Ignoring removed orlov option [ 145.881720][T14644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.894891][T14649] EXT4-fs (loop0): 2 truncates cleaned up [ 145.897276][T14645] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 145.898307][T14649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.902424][T14644] ext4: Unknown parameter 'subj_role' [ 145.903503][T14645] EXT4-fs (loop4): Remounting filesystem read-only [ 146.035762][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.068131][ T6558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.236736][ T6554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.240036][ T6554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.243255][ T6554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.246826][ T6554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.248777][ T6554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.331237][T14670] lo speed is unknown, defaulting to 1000 [ 146.341526][T14684] loop1: detected capacity change from 0 to 512 [ 146.369184][T14686] loop0: detected capacity change from 0 to 512 [ 146.375970][T14686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.383591][T14684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.645574][T14686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 146.818887][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 147.049724][T14670] chnl_net:caif_netlink_parms(): no params data found [ 147.381846][ T6552] Bluetooth: hci2: command tx timeout [ 147.525706][T14670] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.527176][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.528851][T14670] bridge_slave_0: entered allmulticast mode [ 147.530605][T14670] bridge_slave_0: entered promiscuous mode [ 147.543568][T14670] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.543831][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.543951][T14670] bridge_slave_1: entered allmulticast mode [ 147.544427][T14670] bridge_slave_1: entered promiscuous mode [ 147.602182][T14393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.025593][ T41] bond0 (unregistering): Released all slaves [ 148.029573][T14670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.083063][T14670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.128088][T14757] loop1: detected capacity change from 0 to 128 [ 148.209681][ T41] tipc: Disabling bearer [ 148.209802][ T41] tipc: Left network mode [ 148.252893][T14670] team0: Port device team_slave_0 added [ 148.281118][T14670] team0: Port device team_slave_1 added [ 148.333485][ T6552] Bluetooth: hci1: command tx timeout [ 148.348700][T14670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.348766][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.348787][T14670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.349519][T14670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.349527][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.349543][T14670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.504348][T14670] hsr_slave_0: entered promiscuous mode [ 148.504700][T14670] hsr_slave_1: entered promiscuous mode [ 148.596902][T14798] loop1: detected capacity change from 0 to 764 [ 148.618088][T14798] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 148.627867][ T41] hsr_slave_0: left promiscuous mode [ 148.629261][ T41] hsr_slave_1: left promiscuous mode [ 148.630496][ T41] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 148.631971][ T41] batman_adv: batadv0: Removing interface: virt_wifi0 [ 148.842156][T14809] loop0: detected capacity change from 0 to 512 [ 148.869924][T14809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 148.871673][T14809] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.875770][T14809] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.3085: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 148.879660][T14809] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3085: couldn't read orphan inode 13 (err -117) [ 148.885738][T14809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.920007][T14809] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 148.922792][T14809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 148.947869][T14809] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 148.967437][T14818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 149.016175][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.092619][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 149.092651][ T31] audit: type=1326 audit(149.083:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14828 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 149.092669][ T31] audit: type=1326 audit(149.083:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14828 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 149.100987][ T31] audit: type=1326 audit(149.083:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14828 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 149.106171][ T31] audit: type=1326 audit(149.083:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14828 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 149.106222][ T31] audit: type=1326 audit(149.093:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14828 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 149.487852][ T6552] Bluetooth: hci2: command tx timeout [ 149.608636][T12483] lo speed is unknown, defaulting to 1000 [ 149.608667][T12483] infiniband syz0: ib_query_port failed (-19) [ 149.619047][T14836] lo: left promiscuous mode [ 149.627001][T14836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.643240][T14836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.684492][T14840] loop5: detected capacity change from 0 to 512 [ 149.719504][T14840] EXT4-fs (loop5): 1 orphan inode deleted [ 149.719967][T14840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.764094][ T7008] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 149.764147][ T7008] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 149.786038][ T8064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.862519][T14860] loop1: detected capacity change from 0 to 2048 [ 149.893601][ T6685] loop1: p1 < > p3 p4 [ 149.895554][ T6685] loop1: partition table partially beyond EOD, truncated [ 149.902353][ T6685] loop1: p3 start 458752 is beyond EOD, truncated [ 149.905603][ T6685] loop1: p4 start 268435456 is beyond EOD, truncated [ 149.932037][T14860] loop1: p1 < > p3 p4 [ 149.932051][T14860] loop1: partition table partially beyond EOD, truncated [ 149.943243][T14860] loop1: p3 start 458752 is beyond EOD, truncated [ 149.943277][T14860] loop1: p4 start 268435456 is beyond EOD, truncated [ 150.017811][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 150.028470][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 150.315354][T14881] loop2: detected capacity change from 0 to 512 [ 150.316289][T14881] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 150.351531][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3108'. [ 150.369655][T14888] loop2: detected capacity change from 0 to 512 [ 150.379526][T14888] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 150.411901][ T6552] Bluetooth: hci1: command tx timeout [ 150.412592][T14888] block device autoloading is deprecated and will be removed. [ 150.413357][T14888] EXT4-fs (loop2): external journal has bad superblock [ 150.508084][ T31] audit: type=1326 audit(150.443:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.0.3112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5b9e8 code=0x7ffc0000 [ 150.508130][ T31] audit: type=1326 audit(150.443:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.0.3112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5b9e8 code=0x7ffc0000 [ 150.508163][ T31] audit: type=1326 audit(150.443:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.0.3112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95d5b9e8 code=0x7ffc0000 [ 150.508178][ T31] audit: type=1326 audit(150.443:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.0.3112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5b9e8 code=0x7ffc0000 [ 150.519502][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.519514][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.519533][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.569954][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.569994][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.570019][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.580908][T14913] can0: slcan on ttyS3. [ 150.589058][T14670] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.598563][T14670] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.602319][T14670] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.608284][T14670] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.612895][T14912] can0 (unregistered): slcan off ttyS3. [ 150.653396][T14670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.656793][T14670] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.668086][T14670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.668122][T14670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.672134][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.672177][ T9328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.672857][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.672877][ T9328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.694110][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.694146][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.694166][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3112'. [ 150.794837][T14670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.000283][T14966] netlink: 'syz.1.3123': attribute type 12 has an invalid length. [ 151.007070][T14670] veth0_vlan: entered promiscuous mode [ 151.014799][T14670] veth1_vlan: entered promiscuous mode [ 151.037944][T14670] veth0_macvtap: entered promiscuous mode [ 151.053504][T14670] veth1_macvtap: entered promiscuous mode [ 151.063651][T14670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.073068][T14670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.076831][ T9323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.076917][ T9323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.076967][ T9323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.077010][ T9323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.136641][T14977] loop0: detected capacity change from 0 to 512 [ 151.146259][T14977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 151.146575][T14977] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.152693][T14977] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.3126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 151.152915][T14977] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3126: couldn't read orphan inode 13 (err -117) [ 151.154029][T14977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.164076][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.164110][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.182899][ T9328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.182932][ T9328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.202283][T14977] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 151.204896][T14977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 151.214411][T14977] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 151.232362][ T9328] Bluetooth: hci4: Frame reassembly failed (-84) [ 151.266576][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.297267][T14998] x_tables: duplicate underflow at hook 1 [ 151.380966][T15011] loop0: detected capacity change from 0 to 512 [ 151.405037][T15011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.411031][T15011] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.3134: corrupted xattr block 33: invalid ea_ino [ 151.419751][T15011] EXT4-fs (loop0): Remounting filesystem read-only [ 151.430453][T15016] loop4: detected capacity change from 0 to 1024 [ 151.432476][T15016] EXT4-fs: Ignoring removed orlov option [ 151.433872][T15016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.435236][T15016] ext4: Unknown parameter 'subj_role' [ 151.437258][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.649728][T15027] loop0: detected capacity change from 0 to 512 [ 151.676487][T15027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.702723][T15027] EXT4-fs (loop0): 1 truncate cleaned up [ 151.706042][T15027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.492011][ T6554] Bluetooth: hci1: command tx timeout [ 152.551478][T15032] loop2: detected capacity change from 0 to 512 [ 152.583820][T15032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 152.583977][T15032] EXT4-fs (loop2): orphan cleanup on readonly fs [ 152.596938][T15032] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.3141: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 152.600766][T15032] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3141: couldn't read orphan inode 13 (err -117) [ 152.608390][T15032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.613386][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.635547][T15032] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 152.641473][T15032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 152.685162][T15032] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 152.712601][T13833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.796883][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.798616][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.811617][T15062] syzkaller0: entered allmulticast mode [ 152.857058][T15070] loop0: detected capacity change from 0 to 512 [ 152.874753][T15070] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 152.875097][T15070] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm wÞ£ÿ: corrupted inode contents [ 152.877713][T15062] syzkaller0 (unregistering): left allmulticast mode [ 152.880432][T15070] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 152.884351][T15070] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm wÞ£ÿ: corrupted inode contents [ 152.886440][T15070] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 152.889183][T15070] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 152.891502][T15070] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 152.891656][T15070] EXT4-fs (loop0): 1 orphan inode deleted [ 152.964830][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.965016][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.002824][T15078] loop0: detected capacity change from 0 to 512 [ 153.023119][T15078] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 153.023250][T15078] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.023840][T15078] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.3160: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 153.025669][T15078] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3160: couldn't read orphan inode 13 (err -117) [ 153.053225][T15078] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 153.054957][T15078] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 153.064345][T15078] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 153.169093][T15076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.171499][T15076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.291847][ T6552] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.291889][ T6554] Bluetooth: hci4: command 0x1003 tx timeout [ 153.475318][ T9328] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.475398][ T9328] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.475423][ T9328] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.475438][ T9328] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.601163][T15107] loop2: detected capacity change from 0 to 512 [ 153.618505][T15107] EXT4-fs (loop2): too many log groups per flexible block group [ 153.618627][T15107] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 153.618663][T15107] EXT4-fs (loop2): mount failed [ 153.757650][T15121] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.757822][T15121] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.765916][T15123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.826526][T15128] loop1: detected capacity change from 0 to 164 [ 153.851443][T15128] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.997982][T15121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.000872][T15121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.294494][T15161] loop1: detected capacity change from 0 to 512 [ 154.313433][T15161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.314255][ T9328] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.314295][ T9328] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.314312][ T9328] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.314327][ T9328] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.487395][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 154.487433][ T31] audit: type=1326 audit(154.473:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15169 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.491148][ T31] audit: type=1326 audit(154.473:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15169 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.491619][ T31] audit: type=1326 audit(154.473:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15169 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=205 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.491643][ T31] audit: type=1326 audit(154.473:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15169 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.513397][T12518] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.513901][T12518] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.574272][ T6552] Bluetooth: hci1: command tx timeout [ 154.641895][ T31] audit: type=1326 audit(154.563:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15179 comm="syz.1.3202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.641943][ T31] audit: type=1326 audit(154.563:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15179 comm="syz.1.3202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.641967][ T31] audit: type=1326 audit(154.563:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15179 comm="syz.1.3202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=78 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.641985][ T31] audit: type=1326 audit(154.563:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15179 comm="syz.1.3202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 154.642002][ T31] audit: type=1326 audit(154.563:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15179 comm="syz.1.3202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b9e8 code=0x7ffc0000 [ 155.017796][T15198] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 155.103730][T15208] bridge0: port 3(macsec1) entered blocking state [ 155.105113][T15208] bridge0: port 3(macsec1) entered disabled state [ 155.106491][T15208] macsec1: entered allmulticast mode [ 155.107723][T15208] bridge0: entered allmulticast mode [ 155.114417][T15208] macsec1: left allmulticast mode [ 155.115364][T15208] bridge0: left allmulticast mode [ 155.265464][T15220] loop6: detected capacity change from 0 to 7 [ 155.268759][T15220] Dev loop6: unable to read RDB block 7 [ 155.269976][T15220] loop6: AHDI p1 p2 p3 [ 155.270806][T15220] loop6: partition table partially beyond EOD, truncated [ 155.272917][T15220] loop6: p1 start 1601398130 is beyond EOD, truncated [ 155.272957][T15220] loop6: p2 start 1702059890 is beyond EOD, truncated [ 155.796353][T15240] futex_wake_op: wÞ£ÿ tries to shift op by -1; fix this program [ 155.796608][T15240] random: crng reseeded on system resumption [ 155.808427][T15240] Restarting kernel threads ... [ 155.808928][T15240] Done restarting kernel threads. [ 155.919815][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.919989][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.182210][T15252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.184999][T15252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.522735][ T41] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.524637][ T41] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.530869][ T41] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.530997][ T41] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.578356][T15275] loop1: detected capacity change from 0 to 512 [ 156.581283][T15275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.610909][ T31] audit: type=1326 audit(156.593:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15279 comm="syz.5.3244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb875b9e8 code=0x7ffc0000 [ 156.724155][T15294] __nla_validate_parse: 8 callbacks suppressed [ 156.724211][T15294] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 156.744047][T15294] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 156.781463][T15294] syzkaller0: entered promiscuous mode [ 156.781500][T15294] syzkaller0: entered allmulticast mode [ 156.790980][T15300] loop0: detected capacity change from 0 to 512 [ 156.792792][T15300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.798327][T15300] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.805117][T15300] EXT4-fs (loop0): 1 truncate cleaned up [ 156.814816][T15305] loop4: detected capacity change from 0 to 512 [ 156.899806][T15315] loop5: detected capacity change from 0 to 512 [ 156.919096][T15315] [ 156.919512][T15315] ====================================================== [ 156.920561][T15315] WARNING: possible circular locking dependency detected [ 156.921582][T15315] syzkaller #0 Not tainted [ 156.922207][T15315] ------------------------------------------------------ [ 156.923272][T15315] syz.5.3260/15315 is trying to acquire lock: [ 156.924167][T15315] ffff0000d2ae8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 156.925642][T15315] [ 156.925642][T15315] but task is already holding lock: [ 156.926717][T15315] ffff0000f5149d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 156.928148][T15315] [ 156.928148][T15315] which lock already depends on the new lock. [ 156.928148][T15315] [ 156.929571][T15315] [ 156.929571][T15315] the existing dependency chain (in reverse order) is: [ 156.930842][T15315] [ 156.930842][T15315] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 156.931992][T15315] down_read+0x58/0x2f8 [ 156.932677][T15315] ext4_xattr_get+0xec/0x58c [ 156.933436][T15315] ext4_get_acl+0x94/0x82c [ 156.934180][T15315] __get_acl+0x248/0x420 [ 156.934999][T15315] posix_acl_create+0x110/0x3d8 [ 156.935802][T15315] ext4_init_acl+0xac/0x340 [ 156.936558][T15315] __ext4_new_inode+0x272c/0x3190 [ 156.937332][T15315] ext4_ext_migrate+0x4b8/0xd10 [ 156.938155][T15315] ext4_ioctl+0x1bb0/0x4130 [ 156.938949][T15315] __arm64_sys_ioctl+0x14c/0x1c4 [ 156.939786][T15315] invoke_syscall+0x98/0x254 [ 156.940587][T15315] el0_svc_common+0xe8/0x23c [ 156.941372][T15315] do_el0_svc+0x48/0x58 ** replaying previous printk message ** [ 156.941921][T15305] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #18: comm syz.4.3256: corrupted inode contents [ 156.944384][T15315] el0_svc+0x5c/0x254 [ 156.944564][T15305] EXT4-fs (loop4): Remounting filesystem read-only [ 156.946087][T15315] el0t_64_sync_handler+0x84/0x12c ** replaying previous printk message ** [ 156.946110][T15305] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 156.948807][T15315] el0t_64_sync+0x198/0x19c [ 156.949564][T15315] [ 156.949564][T15315] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 156.950781][T15315] __lock_acquire+0x1774/0x30a4 [ 156.951623][T15315] lock_acquire+0x14c/0x2e0 [ 156.952373][T15315] percpu_down_read_internal+0x5c/0x298 [ 156.953296][T15315] ext4_writepages+0x150/0x2a0 [ 156.954086][T15315] do_writepages+0x270/0x468 [ 156.954904][T15315] __writeback_single_inode+0x15c/0x13e8 [ 156.955760][T15315] writeback_single_inode+0x18c/0x54c [ 156.956634][T15315] write_inode_now+0x13c/0x1a4 [ 156.957455][T15315] iput+0x7d4/0xad4 [ 156.958051][T15315] ext4_xattr_block_set+0x13dc/0x24bc [ 156.958940][T15315] ext4_expand_extra_isize_ea+0xeb8/0x1830 [ 156.959919][T15315] __ext4_expand_extra_isize+0x2a0/0x37c [ 156.960812][T15315] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 156.961647][T15315] ext4_evict_inode+0x930/0x1084 [ 156.962422][T15315] evict+0x414/0x928 [ 156.963137][T15315] iput+0x95c/0xad4 [ 156.963788][T15315] ext4_process_orphan+0x240/0x2b4 [ 156.964626][T15315] ext4_orphan_cleanup+0x930/0x107c [ 156.965489][T15315] ext4_fill_super+0x4854/0x4fcc [ 156.966289][T15315] get_tree_bdev_flags+0x360/0x414 [ 156.967152][T15315] get_tree_bdev+0x2c/0x3c [ 156.967916][T15315] ext4_get_tree+0x28/0x38 [ 156.968666][T15315] vfs_get_tree+0x90/0x28c [ 156.969425][T15315] do_new_mount+0x284/0x944 [ 156.970160][T15315] path_mount+0x5b4/0xdfc [ 156.970909][T15315] __arm64_sys_mount+0x3e8/0x468 [ 156.971868][T15315] invoke_syscall+0x98/0x254 [ 156.972692][T15315] el0_svc_common+0xe8/0x23c [ 156.973482][T15315] do_el0_svc+0x48/0x58 [ 156.974149][T15315] el0_svc+0x5c/0x254 [ 156.974811][T15315] el0t_64_sync_handler+0x84/0x12c [ 156.975631][T15315] el0t_64_sync+0x198/0x19c [ 156.976336][T15315] [ 156.976336][T15315] other info that might help us debug this: [ 156.976336][T15315] [ 156.977860][T15315] Possible unsafe locking scenario: [ 156.977860][T15315] [ 156.978856][T15315] CPU0 CPU1 [ 156.979573][T15315] ---- ---- [ 156.980405][T15315] lock(&ei->xattr_sem); [ 156.981052][T15315] lock(&sbi->s_writepages_rwsem); [ 156.982215][T15315] lock(&ei->xattr_sem); [ 156.983245][T15315] rlock(&sbi->s_writepages_rwsem); [ 156.984072][T15315] [ 156.984072][T15315] *** DEADLOCK *** [ 156.984072][T15315] [ 156.985318][T15315] 3 locks held by syz.5.3260/15315: [ 156.986187][T15315] #0: ffff00010577e0e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x168/0x7d4 [ 156.987869][T15315] #1: ffff00010577e610 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 156.989308][T15315] #2: ffff0000f5149d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 156.990900][T15315] [ 156.990900][T15315] stack backtrace: [ 156.991772][T15315] CPU: 0 UID: 0 PID: 15315 Comm: syz.5.3260 Not tainted syzkaller #0 PREEMPT [ 156.993006][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 156.994385][T15315] Call trace: [ 156.994822][T15315] show_stack+0x2c/0x3c (C) [ 156.995443][T15315] __dump_stack+0x30/0x40 [ 156.996116][T15315] dump_stack_lvl+0xd8/0x12c [ 156.996793][T15315] dump_stack+0x1c/0x28 [ 156.997419][T15315] print_circular_bug+0x324/0x32c [ 156.998179][T15315] check_noncircular+0x154/0x174 [ 156.998967][T15315] __lock_acquire+0x1774/0x30a4 [ 156.999688][T15315] lock_acquire+0x14c/0x2e0 [ 157.000315][T15315] percpu_down_read_internal+0x5c/0x298 [ 157.001222][T15315] ext4_writepages+0x150/0x2a0 [ 157.001962][T15315] do_writepages+0x270/0x468 [ 157.002704][T15315] __writeback_single_inode+0x15c/0x13e8 [ 157.003567][T15315] writeback_single_inode+0x18c/0x54c [ 157.004450][T15315] write_inode_now+0x13c/0x1a4 [ 157.005141][T15315] iput+0x7d4/0xad4 [ 157.005757][T15315] ext4_xattr_block_set+0x13dc/0x24bc [ 157.006587][T15315] ext4_expand_extra_isize_ea+0xeb8/0x1830 [ 157.007446][T15315] __ext4_expand_extra_isize+0x2a0/0x37c [ 157.008218][T15315] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 157.008981][T15315] ext4_evict_inode+0x930/0x1084 [ 157.009692][T15315] evict+0x414/0x928 [ 157.010270][T15315] iput+0x95c/0xad4 [ 157.010846][T15315] ext4_process_orphan+0x240/0x2b4 [ 157.011517][T15315] ext4_orphan_cleanup+0x930/0x107c [ 157.012266][T15315] ext4_fill_super+0x4854/0x4fcc [ 157.013031][T15315] get_tree_bdev_flags+0x360/0x414 [ 157.013776][T15315] get_tree_bdev+0x2c/0x3c [ 157.014468][T15315] ext4_get_tree+0x28/0x38 [ 157.015121][T15315] vfs_get_tree+0x90/0x28c [ 157.015731][T15315] do_new_mount+0x284/0x944 [ 157.016358][T15315] path_mount+0x5b4/0xdfc [ 157.016959][T15315] __arm64_sys_mount+0x3e8/0x468 [ 157.017641][T15315] invoke_syscall+0x98/0x254 [ 157.018314][T15315] el0_svc_common+0xe8/0x23c [ 157.019026][T15315] do_el0_svc+0x48/0x58 [ 157.019605][T15315] el0_svc+0x5c/0x254 [ 157.020170][T15315] el0t_64_sync_handler+0x84/0x12c [ 157.020920][T15315] el0t_64_sync+0x198/0x19c [ 15 ** replaying previous printk message ** [ 157.024913][T15315] ------------[ cut here ]------------ [ 157.024942][T15315] EA inode 11 i_nlink=2 [ 157.025051][T15315] WARNING: CPU: 0 PID: 15315 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x408/0x44c [ 157.028830][T15315] Modules linked in: [ 157.029460][T15315] CPU: 0 UID: 0 PID: 15315 Comm: syz.5.3260 Not tainted syzkaller #0 PREEMPT [ 157.030859][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 157.032270][T15315] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 157.033473][T15315] pc : ext4_xattr_inode_update_ref+0x408/0x44c [ 157.034409][T15315] lr : ext4_xattr_inode_update_ref+0x408/0x44c [ 157.035326][T15315] sp : ffff80009da96ce0 [ 157.035968][T15315] x29: ffff80009da96d90 x28: 0000000000000000 x27: 1fffe0001ea298ef [ 157.037173][T15315] x26: dfff800000000000 x25: ffff80009da96d00 x24: ffff700013b52da0 [ 157.038415][T15315] x23: ffff800092c19000 x22: ffff0000f514c5c8 x21: 0000000000000002 [ 157.039700][T15315] x20: 0000000000000001 x19: ffff0000f514c588 x18: 1fffe000337d6e90 [ 157.040955][T15315] x17: ffff80008f59e000 x16: ffff800082dee240 x15: 0000000000000001 [ 157.042035][T15315] x14: 1ffff00013b52d10 x13: 0000000000000000 x12: 0000000000000000 [ 157.043231][T15315] x11: 0000000000080000 x10: 0000000000052d61 x9 : 0e513d912e8fae00 [ 157.044442][T15315] x8 : 0e513d912e8fae00 x7 : 0000000000000000 x6 : ffff800080565bcc [ 157.045674][T15315] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807d6fd0 [ 157.047026][T15315] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 157.048334][T15315] Call trace: [ 157.048835][T15315] ext4_xattr_inode_update_ref+0x408/0x44c (P) [ 157.049820][T15315] ext4_xattr_set_entry+0x928/0x15c0 [ 157.050621][T15315] ext4_xattr_ibody_set+0x204/0x5fc [ 157.051453][T15315] ext4_expand_extra_isize_ea+0xf00/0x1830 [ 157.052320][T15315] __ext4_expand_extra_isize+0x2a0/0x37c [ 157.053134][T15315] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 157.053895][T15315] ext4_evict_inode+0x930/0x1084 [ 157.054617][T15315] evict+0x414/0x928 [ 157.055164][T15315] iput+0x95c/0xad4 [ 157.055754][T15315] ext4_process_orphan+0x240/0x2b4 [ 157.056527][T15315] ext4_orphan_cleanup+0x930/0x107c [ 157.057311][T15315] ext4_fill_super+0x4854/0x4fcc [ 157.058030][T15315] get_tree_bdev_flags+0x360/0x414 [ 157.058710][T15315] get_tree_bdev+0x2c/0x3c [ 157.059352][T15315] ext4_get_tree+0x28/0x38 [ 157.060039][T15315] vfs_get_tree+0x90/0x28c [ 157.060746][T15315] do_new_mount+0x284/0x944 [ 157.061403][T15315] path_mount+0x5b4/0xdfc [ 157.062091][T15315] __arm64_sys_mount+0x3e8/0x468 [ 157.062803][T15315] invoke_syscall+0x98/0x254 [ 157.063530][T15315] el0_svc_common+0xe8/0x23c [ 157.064180][T15315] do_el0_svc+0x48/0x58 [ 157.064814][T15315] el0_svc+0x5c/0x254 [ 157.065480][T15315] el0t_64_sync_handler+0x84/0x12c [ 157.066292][T15315] el0t_64_sync+0x198/0x19c [ 157.066918][T15315] irq event stamp: 1847 [ 157.067634][T15315] hardirqs last enabled at (1847): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 157.069288][T15315] hardirqs last disabled at (1846): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 157.070813][T15315] softirqs last enabled at (208): [] local_bh_enable+0x10/0x34 [ 157.072178][T15315] softirqs last disabled at (206): [] local_bh_disable+0x10/0x34 [ 157.073627][T15315] ---[ end trace 0000000000000000 ]--- [ 157.075842][T15315] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3260: iget: bad extra_isize 90 (inode size 256) [ 157.076038][T15315] EXT4-fs (loop5): Remounting filesystem read-only [ 157.076120][T15315] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 157.076145][T15315] EXT4-fs (loop5): 1 orphan inode deleted