last executing test programs: 3m24.043849261s ago: executing program 1 (id=536): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m23.887763143s ago: executing program 1 (id=539): getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0)=0x0, &(0x7f00000007c0)) setgroups(0x1, &(0x7f0000000740)=[r0]) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000300)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@resgid={'resgid', 0x3d, r0}}, {@minixdf}]}, 0x4, 0x534, &(0x7f0000001080)="$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") getgroups(0x2, &(0x7f0000000380)=[r1, r0]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x0, 0xe8, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xff000000, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1c}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x3, 0x1, 0x5}) 3m23.046065266s ago: executing program 1 (id=553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/149, 0x95}], 0x1, 0x31, 0x0) 3m22.502184825s ago: executing program 1 (id=561): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/45, 0x2d}], 0x1}, 0x32050) 3m22.338001407s ago: executing program 1 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getitimer(0x1, 0x0) 3m22.260776319s ago: executing program 1 (id=569): pipe2$9p(&(0x7f00000001c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m7.174135604s ago: executing program 32 (id=569): pipe2$9p(&(0x7f00000001c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m55.037725664s ago: executing program 5 (id=805): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m53.629799026s ago: executing program 5 (id=819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 2m53.430320559s ago: executing program 5 (id=824): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 2m53.237988482s ago: executing program 5 (id=831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 2m53.159062583s ago: executing program 5 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002700)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffffffff, 0x1010000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x17}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0xe, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x6, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x4, 0x0, 0x1, 0x1fb, 0xe5, 0x2f, 0xd, 0x0, 0xa, 0x3, 0x1, 0x9, 0x11, 0x9, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fb, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0x8, 0x10001, 0x4, 0x4, 0x7f, 0x4, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4, 0x0, 0x4, 0x7fff, 0x0, 0x9, 0x80, 0x5, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x120004, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x0, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0x0, 0xfffffffe, 0x200ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0x9, 0xa, 0x6, 0x7, 0x100, 0x1, 0x3, 0x100, 0x100000b, 0x8, 0x4, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x100200, 0x80000001, 0x1, 0x1, 0x6, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x1, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x1, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x5, 0x9, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x40000723, 0x0, 0xe, 0xb, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0x9, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0x2, 0x5, 0xd1b, 0xb87, 0x3, 0x8d8d, 0x55, 0xfff, 0x8, 0x64e8, 0x8, 0x80c, 0x772, 0xfff, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x84]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 2m52.641931232s ago: executing program 5 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x4040000) 2m52.599044032s ago: executing program 33 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x4040000) 9.878716466s ago: executing program 2 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4cf529b6b1cc8778}, 0x40040) 9.778264598s ago: executing program 2 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r2, &(0x7f0000000b40)=""/4096, 0x1000) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0xffffffff, 0xc08}}, 0x120) 9.59600009s ago: executing program 2 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 9.474500722s ago: executing program 2 (id=2281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f96", 0xb3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a35333", 0x51}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d767701", 0x1f}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 8.509861087s ago: executing program 2 (id=2286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 8.2940901s ago: executing program 2 (id=2288): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x18) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) unshare(0x68060200) 4.090941666s ago: executing program 6 (id=2314): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x5c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0xe000) 3.888212669s ago: executing program 6 (id=2318): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x9}, 0x18) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x9, 0x10000) 3.520513625s ago: executing program 6 (id=2320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) 3.294164169s ago: executing program 0 (id=2323): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x610, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x110, 0x138, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) 3.266037359s ago: executing program 0 (id=2325): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 3.2399943s ago: executing program 6 (id=2326): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) 3.130257801s ago: executing program 0 (id=2327): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.123020671s ago: executing program 6 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) 2.973948693s ago: executing program 6 (id=2332): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/147, 0x93}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4000) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) 2.843486126s ago: executing program 3 (id=2334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) 2.544874821s ago: executing program 3 (id=2337): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0xb, 0x0, 0x1, 0x0, 0x2004122d612, 0x328, r1}) 2.463743022s ago: executing program 0 (id=2339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.414923352s ago: executing program 3 (id=2340): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.380880943s ago: executing program 0 (id=2341): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 2.290360785s ago: executing program 4 (id=2342): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 2.043202568s ago: executing program 4 (id=2343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1.965157849s ago: executing program 3 (id=2344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) 1.878246881s ago: executing program 4 (id=2345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, 0xfffffffffffffffc, 0x1) 1.695490984s ago: executing program 4 (id=2346): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x610, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x110, 0x138, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) 1.569942726s ago: executing program 4 (id=2347): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 696.180629ms ago: executing program 3 (id=2348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)=ANY=[], 0x9) 378.271384ms ago: executing program 4 (id=2349): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x8}, 0x8) 351.150844ms ago: executing program 3 (id=2350): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x800000, 0x38b}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2351): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 164.048565][ T26] audit: type=1326 audit(163.920:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 164.064370][ T26] audit: type=1326 audit(163.920:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 164.082460][ T26] audit: type=1326 audit(163.920:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 164.104509][ T26] audit: type=1326 audit(163.920:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 164.111048][ T26] audit: type=1326 audit(163.930:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 164.352132][ T7508] vhci_hcd: invalid port number 236 [ 164.353778][ T7508] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 164.551389][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'. [ 164.773686][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 165.121305][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1120'. [ 166.185147][ T7573] bond0: (slave dummy0): Releasing backup interface [ 166.270037][ T7573] batman_adv: batadv0: Adding interface: dummy0 [ 166.271884][ T7573] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.288938][ T7573] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 166.295818][ T7575] netlink: 'syz.4.1142': attribute type 6 has an invalid length. [ 166.486448][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1146'. [ 166.489038][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1146'. [ 166.938639][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 168.119403][ T7643] loop4: detected capacity change from 0 to 2048 [ 168.142572][ T7643] EXT4-fs (loop4): Ignoring removed bh option [ 168.151597][ T7643] EXT4-fs (loop4): Unrecognized mount option "subj_type=" or missing value [ 168.279409][ T7643] loop4: detected capacity change from 0 to 512 [ 168.308752][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1170'. [ 168.352268][ T7643] EXT4-fs (loop4): too many log groups per flexible block group [ 168.354938][ T7643] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 168.356921][ T7643] EXT4-fs (loop4): mount failed [ 168.375911][ T7643] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1167'. [ 168.740557][ T7669] xt_hashlimit: size too large, truncated to 1048576 [ 169.244874][ T4073] Bluetooth: hci1: command 0x0406 tx timeout [ 169.246740][ T4073] Bluetooth: hci2: command 0x0406 tx timeout [ 169.248489][ T4073] Bluetooth: hci3: command 0x0406 tx timeout [ 169.250127][ T4073] Bluetooth: hci4: command 0x0406 tx timeout [ 171.902860][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 171.902875][ T26] audit: type=1326 audit(171.860:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 171.922578][ T26] audit: type=1326 audit(171.880:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 171.949037][ T26] audit: type=1326 audit(171.900:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 171.972795][ T26] audit: type=1326 audit(171.920:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 171.993727][ T26] audit: type=1326 audit(171.920:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 172.012633][ T26] audit: type=1326 audit(171.920:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 172.032434][ T26] audit: type=1326 audit(171.920:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 172.071521][ T26] audit: type=1326 audit(171.930:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 172.100662][ T26] audit: type=1326 audit(171.930:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 172.234789][ T26] audit: type=1326 audit(172.200:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1e8e8a8 code=0x7ffc0000 [ 172.513540][ T7706] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1191'. [ 172.575665][ T7711] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1194'. [ 173.703435][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 173.708525][ T7732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 173.711262][ T7732] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 173.881144][ T7741] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1206'. [ 173.925982][ T7742] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1207'. [ 173.978193][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 175.591619][ T7781] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1220'. [ 175.620060][ T7778] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1229'. [ 175.748214][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 175.806420][ T7787] bond1: (slave vlan2): Opening slave failed [ 176.991098][ T7812] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1233'. [ 177.046918][ T7810] udc-core: couldn't find an available UDC or it's busy [ 177.049033][ T7810] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.486412][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 178.545918][ T7849] device bridge0 entered promiscuous mode [ 178.560068][ T7849] bridge0: port 4(macsec0) entered blocking state [ 178.578380][ T7849] bridge0: port 4(macsec0) entered disabled state [ 178.591099][ T7849] device bridge0 left promiscuous mode [ 180.821866][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 180.821880][ T26] audit: type=1326 audit(180.780:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 180.837475][ T26] audit: type=1326 audit(180.800:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 180.845928][ T26] audit: type=1326 audit(180.810:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=154 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 180.861668][ T26] audit: type=1326 audit(180.810:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 180.902612][ T26] audit: type=1326 audit(180.810:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 181.782618][ T7948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.841364][ T7948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.906110][ T7948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.974264][ T7948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.081800][ T7958] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 182.087554][ T7958] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 182.131072][ T7948] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.137282][ T7948] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.144844][ T7948] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.150662][ T7948] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.683840][ T7993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.748204][ T7993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.837290][ T7993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.882673][ T7993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.922676][ T26] audit: type=1326 audit(183.880:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.6.1311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 183.990274][ T26] audit: type=1326 audit(183.950:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.6.1311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 183.999816][ T26] audit: type=1326 audit(183.960:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.6.1311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 184.013290][ T26] audit: type=1326 audit(183.960:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.6.1311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 184.021471][ T26] audit: type=1326 audit(183.960:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.6.1311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 184.022380][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 184.038235][ T7993] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.044178][ T7993] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.052188][ T7993] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.058028][ T7993] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.125055][ T8019] loop4: detected capacity change from 0 to 512 [ 184.249499][ T8019] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 184.251921][ T8019] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.313843][ T8019] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.332096][ T8019] EXT4-fs (loop4): 1 truncate cleaned up [ 184.333693][ T8019] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,nomblk_io_submit,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 185.462828][ T8051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.512248][ T8051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.571696][ T8051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.702818][ T8051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.802379][ T8072] loop2: detected capacity change from 0 to 128 [ 185.837719][ T8076] IPVS: length: 71 != 24 [ 186.193728][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 186.477581][ T8051] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.483634][ T8051] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.492356][ T8051] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.502144][ T8051] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.882759][ T8107] loop0: detected capacity change from 0 to 512 [ 186.890269][ T8106] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 186.900770][ T8106] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1354'. [ 187.121657][ T8107] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 187.917948][ T8121] loop3: detected capacity change from 0 to 1024 [ 187.929490][ T8123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.002771][ T8123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.024738][ T8121] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 188.077629][ T8121] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 188.085844][ T8123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.098196][ T8121] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.101669][ T8121] EXT4-fs (loop3): This should not happen!! Data will be lost [ 188.101669][ T8121] [ 188.104484][ T8121] EXT4-fs (loop3): Total free blocks count 0 [ 188.106052][ T8121] EXT4-fs (loop3): Free/Dirty block details [ 188.107633][ T8121] EXT4-fs (loop3): free_blocks=68451041280 [ 188.111921][ T8121] EXT4-fs (loop3): dirty_blocks=80 [ 188.113335][ T8121] EXT4-fs (loop3): Block reservation details [ 188.119582][ T8121] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 188.152435][ T8123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.158419][ T8121] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 188.162145][ T8121] EXT4-fs (loop3): This should not happen!! Data will be lost [ 188.162145][ T8121] [ 188.303625][ T8123] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.309746][ T8123] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.315695][ T8123] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.321446][ T8123] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.420557][ T8140] loop2: detected capacity change from 0 to 512 [ 188.425420][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 188.456602][ T8141] bond1: (slave vlan4): Opening slave failed [ 188.572659][ T8140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.681089][ T8154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1371'. [ 188.685937][ T8140] EXT4-fs (loop2): 1 truncate cleaned up [ 188.687617][ T8140] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 188.761593][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 188.761606][ T26] audit: type=1326 audit(188.720:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.775355][ T26] audit: type=1326 audit(188.730:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.782513][ T26] audit: type=1326 audit(188.740:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.790416][ T26] audit: type=1326 audit(188.750:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.802539][ T26] audit: type=1326 audit(188.750:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.808829][ T26] audit: type=1326 audit(188.750:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.815088][ T26] audit: type=1326 audit(188.750:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.821422][ T26] audit: type=1326 audit(188.750:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=441 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.830890][ T26] audit: type=1326 audit(188.750:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 188.839792][ T26] audit: type=1326 audit(188.800:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.6.1370" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 189.031817][ T8176] netlink: 'syz.2.1376': attribute type 13 has an invalid length. [ 189.194683][ T8176] gretap0: refused to change device tx_queue_len [ 189.223145][ T8176] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.374028][ T8201] netlink: 'syz.0.1390': attribute type 13 has an invalid length. [ 189.567399][ T8201] gretap0: refused to change device tx_queue_len [ 189.569256][ T8201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.583753][ T7] lo speed is unknown, defaulting to 1000 [ 189.591899][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1388'. [ 189.623012][ T8203] device team1 entered promiscuous mode [ 189.685371][ T8216] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.714747][ T8217] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 189.897466][ T8227] loop6: detected capacity change from 0 to 512 [ 189.924165][ T8216] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.953177][ T8227] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.010506][ T8227] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 190.042735][ T8227] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1400: invalid indirect mapped block 2683928664 (level 1) [ 190.093580][ T8216] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.101474][ T8227] EXT4-fs (loop6): Remounting filesystem read-only [ 190.103682][ T8227] EXT4-fs (loop6): 1 truncate cleaned up [ 190.121777][ T8236] vhci_hcd: invalid port number 236 [ 190.123286][ T8236] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 190.130822][ T8227] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 190.152771][ T8216] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.300820][ T8243] loop0: detected capacity change from 0 to 1024 [ 190.364206][ T8243] EXT4-fs (loop0): Ignoring removed bh option [ 190.379580][ T8245] loop6: detected capacity change from 0 to 256 [ 190.411306][ T8243] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 190.521583][ T8245] FAT-fs (loop6): Directory bread(block 64) failed [ 190.523507][ T8245] FAT-fs (loop6): Directory bread(block 65) failed [ 190.535807][ T8250] EXT4-fs error (device loop0): ext4_check_all_de:667: inode #12: block 7: comm syz.0.1408: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 190.545943][ T8243] lo speed is unknown, defaulting to 1000 [ 190.552364][ T8248] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 190.554723][ T8245] FAT-fs (loop6): Directory bread(block 66) failed [ 190.557253][ T8245] FAT-fs (loop6): Directory bread(block 67) failed [ 190.557746][ T8250] EXT4-fs (loop0): Remounting filesystem read-only [ 190.559344][ T8245] FAT-fs (loop6): Directory bread(block 68) failed [ 190.562876][ T8245] FAT-fs (loop6): Directory bread(block 69) failed [ 190.565586][ T8245] FAT-fs (loop6): Directory bread(block 70) failed [ 190.582651][ T8245] FAT-fs (loop6): Directory bread(block 71) failed [ 190.585054][ T8245] FAT-fs (loop6): Directory bread(block 72) failed [ 190.587017][ T8245] FAT-fs (loop6): Directory bread(block 73) failed [ 190.647255][ T8245] device veth0 entered promiscuous mode [ 190.649601][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1409'. [ 191.543883][ T8216] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.584001][ T8216] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.591450][ T8216] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.614159][ T8216] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.129094][ T8309] loop3: detected capacity change from 0 to 2048 [ 192.255526][ T8309] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.516662][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.683527][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 192.812501][ T8341] device pim6reg1 entered promiscuous mode [ 193.115252][ T8351] loop6: detected capacity change from 0 to 2048 [ 193.190095][ T8351] Alternate GPT is invalid, using primary GPT. [ 193.214698][ T8351] loop6: p1 p2 p3 [ 193.342865][ T4073] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 193.364173][ T4073] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.560500][ T8358] fido_id[8358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.625923][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 193.634200][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 193.653026][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 193.839695][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1446'. [ 194.046682][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 194.046695][ T26] audit: type=1326 audit(194.010:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.073235][ T26] audit: type=1326 audit(194.030:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.092335][ T26] audit: type=1326 audit(194.040:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.104476][ T26] audit: type=1326 audit(194.050:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.124929][ T26] audit: type=1326 audit(194.090:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.135331][ T26] audit: type=1326 audit(194.090:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.141308][ T26] audit: type=1326 audit(194.090:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.174398][ T26] audit: type=1326 audit(194.090:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.180405][ T26] audit: type=1326 audit(194.090:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.207687][ T26] audit: type=1326 audit(194.090:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8368 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 194.333915][ T4078] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 194.337981][ T4078] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.433525][ T8381] fido_id[8381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.378596][ T8400] loop6: detected capacity change from 0 to 1024 [ 195.431024][ T8400] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.639549][ T8007] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 195.642856][ T8007] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.703238][ T8417] fido_id[8417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.561914][ T8426] lo speed is unknown, defaulting to 1000 [ 198.255113][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1474'. [ 198.455065][ T8450] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 198.537379][ T8449] device veth0 entered promiscuous mode [ 198.569940][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'. [ 198.720197][ T8459] loop2: detected capacity change from 0 to 128 [ 198.825210][ T4069] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 198.828344][ T4069] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.835799][ T8461] hid-generic 0000:0000:0000.0011: pid 8461 passed too short report [ 198.919641][ T8462] fido_id[8462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.215531][ T8472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1486'. [ 199.701669][ T8478] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1488'. [ 200.530630][ T8340] Set syz1 is full, maxelem 65536 reached [ 200.634689][ T8492] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 200.683648][ T8007] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 200.708487][ T8007] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.729392][ T8494] hid-generic 0000:0000:0000.0012: pid 8494 passed too short report [ 200.784144][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.831456][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 200.850472][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.853916][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.861919][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.879516][ T8500] device bridge_slave_0 left promiscuous mode [ 200.891874][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.953272][ T8510] loop3: detected capacity change from 0 to 1024 [ 201.018041][ T8500] device bridge_slave_1 left promiscuous mode [ 201.019868][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.120539][ T8513] vhci_hcd: default hub control req: 0012 v0009 i0004 l0 [ 201.139814][ T8500] bond0: (slave bond_slave_1): Releasing backup interface [ 201.550527][ T8510] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.674160][ T8500] team0: Port device team_slave_0 removed [ 201.785947][ T8500] team0: Port device team_slave_1 removed [ 201.950408][ T8500] team0: Port device geneve0 removed [ 202.016730][ T8504] lo speed is unknown, defaulting to 1000 [ 202.151824][ T8526] netlink: 'syz.4.1503': attribute type 12 has an invalid length. [ 203.354611][ T8546] loop2: detected capacity change from 0 to 512 [ 204.000031][ T8547] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 204.133408][ T8555] loop7: detected capacity change from 0 to 16384 [ 204.254600][ T13] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 204.257460][ T13] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.263096][ T8560] hid-generic 0000:0000:0000.0013: pid 8560 passed too short report [ 204.299096][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 204.519271][ T8570] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1520'. [ 204.952110][ T8563] fido_id[8563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.200857][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 205.203314][ T8580] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1521'. [ 205.270891][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1523'. [ 205.369177][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 205.369190][ T26] audit: type=1326 audit(205.330:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.393628][ T26] audit: type=1326 audit(205.350:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.401483][ T26] audit: type=1326 audit(205.360:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.425533][ T26] audit: type=1326 audit(205.360:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.431696][ T26] audit: type=1326 audit(205.360:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.454514][ T26] audit: type=1326 audit(205.370:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=272 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.460456][ T26] audit: type=1326 audit(205.370:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.473597][ T26] audit: type=1326 audit(205.380:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.492693][ T26] audit: type=1326 audit(205.380:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.499141][ T26] audit: type=1326 audit(205.380:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 205.595099][ T13] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 205.604796][ T13] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.621127][ T8596] hid-generic 0000:0000:0000.0014: pid 8596 passed too short report [ 205.730011][ T8597] fido_id[8597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.973064][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 206.108924][ T8610] loop0: detected capacity change from 0 to 512 [ 206.234020][ T8610] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 206.236338][ T8610] EXT4-fs (loop0): Ignoring removed bh option [ 206.238247][ T8610] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.279170][ T8610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.376553][ T8610] EXT4-fs (loop0): 1 truncate cleaned up [ 206.378352][ T8610] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 207.073699][ T8628] loop3: detected capacity change from 0 to 1024 [ 207.197456][ T8628] EXT4-fs (loop3): Ignoring removed orlov option [ 207.275271][ T8628] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 207.587139][ T4068] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 207.590295][ T4068] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.692739][ T8638] fido_id[8638]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.818038][ T8643] loop2: detected capacity change from 0 to 1024 [ 207.935402][ T8643] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 208.152669][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 208.161052][ T8648] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1543'. [ 208.503397][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 208.506260][ T8660] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1547'. [ 208.662447][ T8662] loop3: detected capacity change from 0 to 512 [ 209.409615][ T8666] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1549'. [ 209.518591][ T6407] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 209.521791][ T6407] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.608359][ T8671] fido_id[8671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.729981][ T8679] loop4: detected capacity change from 0 to 1024 [ 209.934515][ T8679] EXT4-fs (loop4): inline encryption not supported [ 209.936557][ T8679] EXT4-fs (loop4): Ignoring removed bh option [ 209.976992][ T8679] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 211.015453][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 211.020914][ T8695] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.023667][ T8695] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 211.110358][ T8703] netlink: 'syz.0.1562': attribute type 10 has an invalid length. [ 211.131884][ T8703] team0: Device hsr_slave_0 failed to register rx_handler [ 211.240019][ T4078] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 211.242959][ T4078] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.363343][ T8711] fido_id[8711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.610559][ T8733] loop0: detected capacity change from 0 to 1024 [ 211.709117][ T8733] EXT4-fs (loop0): Ignoring removed nobh option [ 211.721261][ T8733] EXT4-fs (loop0): Ignoring removed nobh option [ 211.736178][ T8733] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 211.739179][ T8733] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: comm syz.0.1568: inode #4294967295: comm syz.0.1568: iget: illegal inode # [ 211.755718][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 211.755731][ T26] audit: type=1326 audit(211.720:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1e8e8a8 code=0x7ffc0000 [ 211.758646][ T8733] EXT4-fs (loop0): no journal found [ 211.777979][ T8733] EXT4-fs (loop0): can't get journal size [ 211.784144][ T8733] EXT4-fs (loop0): failed to initialize system zone (-22) [ 211.792323][ T8733] EXT4-fs (loop0): mount failed [ 211.843936][ T26] audit: type=1326 audit(211.800:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffffa1e8e8a8 code=0x7ffc0000 [ 211.854716][ T26] audit: type=1326 audit(211.800:1154): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1e8e8a8 code=0x7ffc0000 [ 212.072442][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 212.081907][ T26] audit: type=1326 audit(212.040:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.094734][ T26] audit: type=1326 audit(212.040:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.100228][ T4078] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 212.100928][ T26] audit: type=1326 audit(212.040:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.112568][ T26] audit: type=1326 audit(212.040:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.112761][ T4078] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.119013][ T26] audit: type=1326 audit(212.040:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.119052][ T26] audit: type=1326 audit(212.040:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=89 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.119082][ T26] audit: type=1326 audit(212.040:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 212.201753][ T8771] fido_id[8771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.217034][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 212.350664][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 212.372063][ T8779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.459065][ T8779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.543226][ T8779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.663715][ T8779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.858253][ T8779] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.884256][ T8798] loop3: detected capacity change from 0 to 1024 [ 212.889056][ T8779] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.918420][ T8798] EXT4-fs (loop3): Ignoring removed nobh option [ 212.922427][ T8798] EXT4-fs (loop3): Ignoring removed nobh option [ 212.926752][ T8779] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.929416][ T8798] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 212.932457][ T8798] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: comm syz.3.1588: inode #4294967295: comm syz.3.1588: iget: illegal inode # [ 212.943737][ T8798] EXT4-fs (loop3): no journal found [ 212.946684][ T8779] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.949332][ T8798] EXT4-fs (loop3): can't get journal size [ 213.011166][ T8798] EXT4-fs (loop3): failed to initialize system zone (-22) [ 213.052089][ T8798] EXT4-fs (loop3): mount failed [ 213.108991][ T4070] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 213.111962][ T4070] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.236537][ T8808] fido_id[8808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.383110][ T8820] loop3: detected capacity change from 0 to 512 [ 213.409212][ T8825] loop0: detected capacity change from 0 to 164 [ 213.429050][ T8820] EXT4-fs (loop3): Ignoring removed orlov option [ 213.431244][ T8820] EXT4-fs (loop3): Ignoring removed oldalloc option [ 213.442266][ T8820] EXT4-fs (loop3): Unrecognized mount option "defcontext=root" or missing value [ 213.506668][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 213.544049][ T8833] loop4: detected capacity change from 0 to 512 [ 213.562619][ T8825] attempt to access beyond end of device [ 213.562619][ T8825] loop0: rw=524288, want=263332, limit=164 [ 213.566577][ T8825] attempt to access beyond end of device [ 213.566577][ T8825] loop0: rw=0, want=263332, limit=164 [ 213.599981][ T13] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 213.603526][ T13] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.619120][ T8833] EXT4-fs (loop4): Ignoring removed oldalloc option [ 213.621097][ T8833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.652794][ T8833] EXT4-fs (loop4): 1 truncate cleaned up [ 213.655377][ T8833] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 213.750262][ T8851] loop6: detected capacity change from 0 to 1024 [ 213.809107][ T8851] EXT4-fs (loop6): Ignoring removed nobh option [ 213.821137][ T8851] EXT4-fs (loop6): Ignoring removed nobh option [ 213.823366][ T8851] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 213.862382][ T8851] EXT4-fs error (device loop6): ext4_get_journal_inode:5160: comm syz.6.1608: inode #4294967295: comm syz.6.1608: iget: illegal inode # [ 213.930631][ T8851] EXT4-fs (loop6): no journal found [ 213.932165][ T8851] EXT4-fs (loop6): can't get journal size [ 213.952455][ T8851] EXT4-fs (loop6): failed to initialize system zone (-22) [ 213.963537][ T8851] EXT4-fs (loop6): mount failed [ 214.103290][ T8857] fido_id[8857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.108126][ T4024] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 214.120593][ T4024] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.171620][ T8869] IPv6: Can't replace route, no match found [ 214.273867][ T8876] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1616'. [ 214.303496][ T8868] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1616'. [ 214.323321][ T8880] loop6: detected capacity change from 0 to 512 [ 214.323767][ T8874] fido_id[8874]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.490072][ T8880] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 214.493379][ T8880] EXT4-fs (loop6): orphan cleanup on readonly fs [ 214.516013][ T8880] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1620: Failed to acquire dquot type 1 [ 214.540556][ T8880] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1620: bg 0: block 40: padding at end of block bitmap is not set [ 214.591740][ T8880] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 214.598888][ T8880] EXT4-fs (loop6): 1 truncate cleaned up [ 214.600616][ T8880] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.675428][ T4078] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 214.679106][ T4078] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.780841][ T8903] fido_id[8903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.113383][ T8934] loop0: detected capacity change from 0 to 128 [ 215.153809][ T6407] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.157656][ T6407] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.237369][ T8939] fido_id[8939]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.694523][ T8955] loop0: detected capacity change from 0 to 8192 [ 215.867677][ T8983] capability: warning: `syz.0.1650' uses 32-bit capabilities (legacy support in use) [ 215.925580][ T8987] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1657'. [ 217.210086][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 217.210100][ T26] audit: type=1326 audit(217.170:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.229900][ T26] audit: type=1326 audit(217.190:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.243073][ T26] audit: type=1326 audit(217.190:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.258070][ T26] audit: type=1326 audit(217.190:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.270228][ T26] audit: type=1326 audit(217.190:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.282611][ T26] audit: type=1326 audit(217.190:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.299376][ T26] audit: type=1326 audit(217.190:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.309485][ T26] audit: type=1326 audit(217.200:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=183 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.318383][ T26] audit: type=1326 audit(217.200:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.335999][ T26] audit: type=1326 audit(217.200:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 217.755257][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 217.891557][ T8958] loop4: detected capacity change from 0 to 1024 [ 217.904187][ T9030] loop0: detected capacity change from 0 to 512 [ 218.021738][ T8958] EXT4-fs (loop4): Ignoring removed bh option [ 218.021822][ T9030] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 218.060493][ T8958] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.063381][ T8958] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.106165][ T8958] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 218.113813][ T8958] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #3: comm syz.4.1652: mark_inode_dirty error [ 218.162240][ T8958] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1652: Invalid block bitmap block 3 in block_group 0 [ 218.177999][ T8958] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 218.191090][ T8958] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #3: comm syz.4.1652: mark_inode_dirty error [ 218.196489][ T8958] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm syz.4.1652: lblock 6 mapped to illegal pblock 1 (length 1) [ 218.203893][ T8958] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.1652: lblock 0 mapped to illegal pblock 48 (length 1) [ 218.248485][ T8958] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1652: Failed to acquire dquot type 0 [ 218.264548][ T8958] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 49: comm syz.4.1652: lblock 1 mapped to illegal pblock 49 (length 1) [ 218.289152][ T8958] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1652: Failed to acquire dquot type 0 [ 218.296701][ T8958] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 218.308863][ T8958] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #15: comm syz.4.1652: mark_inode_dirty error [ 218.507961][ T8958] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 218.510934][ T8958] EXT4-fs (loop4): 1 orphan inode deleted [ 218.512782][ T8958] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,grpquota,nouid32,nodelalloc,abort,noblock_validity,barrier,noquota,,errors=continue. Quota mode: none. [ 219.679745][ T9054] loop6: detected capacity change from 0 to 1024 [ 219.692799][ T9054] EXT4-fs (loop6): Ignoring removed orlov option [ 219.733671][ T9054] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 219.941955][ T9059] netlink: 75 bytes leftover after parsing attributes in process `syz.6.1675'. [ 219.983571][ T9061] netlink: 'syz.6.1677': attribute type 4 has an invalid length. [ 220.022950][ T9061] netlink: 'syz.6.1677': attribute type 4 has an invalid length. [ 220.441585][ T9072] loop4: detected capacity change from 0 to 512 [ 220.458045][ T9072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.465198][ T9072] EXT4-fs (loop4): 1 truncate cleaned up [ 220.467021][ T9072] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000ffe,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,errors=remount-ro,minixdf,. Quota mode: none. [ 220.505448][ T9072] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1682: corrupted in-inode xattr [ 220.509806][ T9072] EXT4-fs (loop4): Remounting filesystem read-only [ 220.511809][ T9072] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1760: inode #15: comm syz.4.1682: unable to update i_inline_off [ 220.516511][ T9072] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1682: corrupted in-inode xattr [ 220.522054][ T9072] EXT4-fs (loop4): Remounting filesystem read-only [ 220.527028][ T9072] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1682: corrupted in-inode xattr [ 220.536763][ T9072] EXT4-fs (loop4): Remounting filesystem read-only [ 221.042585][ T9076] loop4: detected capacity change from 0 to 1024 [ 221.144575][ T9076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.264163][ T9084] loop0: detected capacity change from 0 to 128 [ 222.111221][ T9125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 222.113570][ T9125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.146936][ T9125] vhci_hcd vhci_hcd.0: Device attached [ 222.191618][ T9132] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 222.193479][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.201791][ T9132] vhci_hcd vhci_hcd.0: Device attached [ 222.222043][ T9125] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 222.223904][ T9125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.244120][ T9125] vhci_hcd vhci_hcd.0: Device attached [ 222.258072][ T9132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.294462][ T9132] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 222.296494][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.317774][ T9132] vhci_hcd vhci_hcd.0: Device attached [ 222.364102][ T9125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(17) [ 222.366044][ T9125] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.390583][ T9125] vhci_hcd vhci_hcd.0: Device attached [ 222.391537][ T9132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.396710][ T9125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.400038][ T9125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.404680][ T8007] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 222.421481][ T9141] vhci_hcd: connection closed [ 222.421869][ T9135] vhci_hcd: connection closed [ 222.422996][ T9139] vhci_hcd: connection closed [ 222.424981][ T9137] vhci_hcd: connection closed [ 222.428467][ T9129] vhci_hcd: connection reset by peer [ 222.438047][ T153] vhci_hcd: stop threads [ 222.439405][ T153] vhci_hcd: release socket [ 222.440701][ T153] vhci_hcd: disconnect device [ 222.442675][ T153] vhci_hcd: stop threads [ 222.443867][ T153] vhci_hcd: release socket [ 222.452765][ T153] vhci_hcd: disconnect device [ 222.456313][ T153] vhci_hcd: stop threads [ 222.457541][ T153] vhci_hcd: release socket [ 222.458859][ T153] vhci_hcd: disconnect device [ 222.464381][ T153] vhci_hcd: stop threads [ 222.465637][ T153] vhci_hcd: release socket [ 222.466986][ T153] vhci_hcd: disconnect device [ 222.468521][ T153] vhci_hcd: stop threads [ 222.469723][ T153] vhci_hcd: release socket [ 222.471081][ T153] vhci_hcd: disconnect device [ 222.581554][ T9079] loop6: detected capacity change from 0 to 1024 [ 222.592562][ T9079] EXT4-fs (loop6): Ignoring removed bh option [ 222.602044][ T9102] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1691'. [ 222.614698][ T9079] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 222.625472][ T9079] EXT4-fs (loop6): orphan cleanup on readonly fs [ 222.637990][ T9079] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 222.650593][ T9079] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.1684: mark_inode_dirty error [ 222.675050][ T9079] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.1684: Invalid block bitmap block 3 in block_group 0 [ 222.721189][ T9079] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 222.731433][ T9079] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.1684: mark_inode_dirty error [ 222.753364][ T9079] __quota_error: 6 callbacks suppressed [ 222.753377][ T9079] Quota error (device loop6): write_blk: dquota write failed [ 222.759796][ T9079] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm syz.6.1684: lblock 6 mapped to illegal pblock 1 (length 1) [ 222.787683][ T9079] Quota error (device loop6): write_blk: dquota write failed [ 222.789854][ T9079] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 222.792651][ T9079] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.1684: lblock 0 mapped to illegal pblock 48 (length 1) [ 222.798567][ T9079] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 222.806121][ T9079] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1684: Failed to acquire dquot type 0 [ 222.814043][ T9079] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 49: comm syz.6.1684: lblock 1 mapped to illegal pblock 49 (length 1) [ 222.824254][ T9079] Quota error (device loop6): do_insert_tree: Can't read tree quota block 1 [ 222.829256][ T9079] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 222.835735][ T9079] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1684: Failed to acquire dquot type 0 [ 222.843175][ T9079] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 222.853043][ T9079] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #15: comm syz.6.1684: mark_inode_dirty error [ 222.860629][ T9079] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 222.871207][ T9079] EXT4-fs (loop6): 1 orphan inode deleted [ 222.873062][ T9079] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,grpquota,nouid32,nodelalloc,abort,noblock_validity,barrier,noquota,,errors=continue. Quota mode: none. [ 223.189680][ T9166] netlink: 'syz.0.1703': attribute type 3 has an invalid length. [ 223.292004][ T9173] device syzkaller1 entered promiscuous mode [ 223.449341][ T9165] lo speed is unknown, defaulting to 1000 [ 223.561163][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 223.688548][ T26] audit: type=1326 audit(223.650:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 223.704681][ T26] audit: type=1326 audit(223.650:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 223.710861][ T26] audit: type=1326 audit(223.650:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 223.733460][ T26] audit: type=1326 audit(223.650:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 223.739090][ T9185] loop4: detected capacity change from 0 to 8192 [ 226.380745][ T9225] vhci_hcd: invalid port number 96 [ 226.382326][ T9225] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 226.427058][ T8995] Set syz1 is full, maxelem 65536 reached [ 227.574763][ T8007] vhci_hcd: vhci_device speed not set [ 228.610729][ T9253] blk_update_request: I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 228.861682][ T9264] loop2: detected capacity change from 0 to 1024 [ 228.922892][ T9264] EXT4-fs (loop2): Ignoring removed orlov option [ 228.983824][ T9264] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 229.123061][ T9267] loop3: detected capacity change from 0 to 2048 [ 229.262150][ T9267] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 229.303795][ T9267] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.1744: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 229.402910][ T9282] device syzkaller1 entered promiscuous mode [ 229.422888][ T9283] loop2: detected capacity change from 0 to 512 [ 229.455789][ T9283] EXT4-fs (loop2): Ignoring removed oldalloc option [ 229.456393][ T9267] EXT4-fs (loop3): Remounting filesystem read-only [ 229.478281][ T9283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1748: Parent and EA inode have the same ino 15 [ 229.519961][ T9283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1748: Parent and EA inode have the same ino 15 [ 229.531080][ T9283] EXT4-fs (loop2): 1 orphan inode deleted [ 229.532736][ T9283] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,journal_dev=0x0000000000000077,,errors=continue. Quota mode: none. [ 231.450312][ T9300] usb usb1: usbfs: process 9300 (syz.2.1754) did not claim interface 0 before use [ 231.688920][ T9310] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.691424][ T9310] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.914834][ T9325] loop6: detected capacity change from 0 to 512 [ 231.974739][ T9325] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 231.984637][ T9325] EXT4-fs (loop6): Unrecognized mount option "seclabel" or missing value [ 232.600273][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 232.600285][ T26] audit: type=1326 audit(232.560:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 232.685001][ T26] audit: type=1326 audit(232.650:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 232.711716][ T26] audit: type=1326 audit(232.670:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 232.722695][ T9304] loop2: detected capacity change from 0 to 1024 [ 232.734538][ T26] audit: type=1326 audit(232.670:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 232.740953][ T26] audit: type=1326 audit(232.690:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.3.1777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 232.747606][ T26] audit: type=1326 audit(232.690:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.3.1777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 232.753808][ T26] audit: type=1326 audit(232.690:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.3.1777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 232.788055][ T26] audit: type=1326 audit(232.690:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.3.1777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 232.796513][ T26] audit: type=1326 audit(232.690:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.3.1777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 232.802657][ T26] audit: type=1326 audit(232.690:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.3.1777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae6b2dd4 code=0x7ffc0000 [ 232.817210][ T9304] EXT4-fs (loop2): Ignoring removed bh option [ 232.907160][ T9304] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 232.910020][ T9304] EXT4-fs (loop2): orphan cleanup on readonly fs [ 232.942119][ T9384] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 232.945714][ T9384] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 232.952565][ T9304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 232.964612][ T9304] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.1755: mark_inode_dirty error [ 232.970774][ T9304] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1755: Invalid block bitmap block 3 in block_group 0 [ 232.978159][ T9304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 232.991991][ T9304] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.1755: mark_inode_dirty error [ 232.997363][ T9304] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm syz.2.1755: lblock 6 mapped to illegal pblock 1 (length 1) [ 233.022833][ T9304] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.1755: lblock 0 mapped to illegal pblock 48 (length 1) [ 233.062180][ T9304] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1755: Failed to acquire dquot type 0 [ 233.074211][ T9304] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 49: comm syz.2.1755: lblock 1 mapped to illegal pblock 49 (length 1) [ 233.099329][ T9386] loop0: detected capacity change from 0 to 2048 [ 233.099491][ T9304] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1755: Failed to acquire dquot type 0 [ 233.110347][ T9304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 233.113765][ T9304] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #15: comm syz.2.1755: mark_inode_dirty error [ 233.120506][ T9304] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 233.123390][ T9304] EXT4-fs (loop2): 1 orphan inode deleted [ 233.136146][ T9304] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,grpquota,nouid32,nodelalloc,abort,noblock_validity,barrier,noquota,,errors=continue. Quota mode: none. [ 233.201568][ T9386] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.243593][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 234.051187][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 234.366820][ T9436] usb usb1: usbfs: process 9436 (syz.4.1797) did not claim interface 0 before use [ 234.945035][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1805'. [ 235.026520][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1805'. [ 235.149044][ T9475] usb usb1: usbfs: process 9475 (syz.0.1811) did not claim interface 0 before use [ 235.161527][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1805'. [ 235.267465][ T9483] loop7: detected capacity change from 0 to 16384 [ 235.940120][ T9506] loop0: detected capacity change from 0 to 512 [ 235.984103][ T9506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.038657][ T9506] EXT4-fs (loop0): 1 truncate cleaned up [ 236.040295][ T9506] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.086168][ T9515] loop4: detected capacity change from 0 to 1024 [ 236.121330][ T9515] EXT4-fs (loop4): inline encryption not supported [ 236.123295][ T9515] EXT4-fs (loop4): Ignoring removed bh option [ 236.184603][ T9516] loop6: detected capacity change from 0 to 512 [ 236.256144][ T9515] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 236.324456][ T9516] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.345441][ T9516] EXT4-fs (loop6): 1 truncate cleaned up [ 236.345472][ T9516] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 236.693304][ T9530] loop6: detected capacity change from 0 to 512 [ 236.723786][ T9531] rdma_op 000000003f5e53a9 conn xmit_rdma 0000000000000000 [ 236.737016][ T9530] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.762412][ T9530] EXT4-fs (loop6): 1 truncate cleaned up [ 236.764077][ T9530] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 237.610304][ T9564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.612857][ T9564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.664411][ T9564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.808118][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 237.808137][ T26] audit: type=1326 audit(237.770:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 237.820819][ T26] audit: type=1326 audit(237.780:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 237.831638][ T26] audit: type=1326 audit(237.780:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 237.883760][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.887821][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.892694][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.895550][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.293219][ T26] audit: type=1326 audit(238.250:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.301055][ T26] audit: type=1326 audit(238.260:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.307143][ T26] audit: type=1326 audit(238.260:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.314139][ T26] audit: type=1326 audit(238.260:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.321455][ T26] audit: type=1326 audit(238.260:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.328154][ T26] audit: type=1326 audit(238.270:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.334083][ T26] audit: type=1326 audit(238.270:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 238.424780][ T9591] loop6: detected capacity change from 0 to 128 [ 238.452679][ T9591] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.698469][ T9595] loop6: detected capacity change from 0 to 2048 [ 238.763388][ T9595] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.808920][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1857'. [ 239.184219][ T9602] loop6: detected capacity change from 0 to 8192 [ 239.227433][ T9602] loop6: p2 p3 p4 [ 239.228504][ T9602] loop6: partition table partially beyond EOD, truncated [ 239.231174][ T9602] loop6: p2 start 2936012800 is beyond EOD, truncated [ 239.233232][ T9602] loop6: p3 start 1912602624 is beyond EOD, truncated [ 239.239742][ T9602] loop6: p4 size 656640 extends beyond EOD, truncated [ 239.333759][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 239.363725][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 239.386582][ T9605] loop6: detected capacity change from 0 to 256 [ 240.118576][ T9617] loop6: detected capacity change from 0 to 1024 [ 240.143225][ T9617] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.182063][ T9617] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nombcache,user_xattr,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 240.510962][ T9625] loop4: detected capacity change from 0 to 2048 [ 240.589876][ T9627] loop2: detected capacity change from 0 to 2048 [ 240.605166][ T9625] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.634194][ T5281] Alternate GPT is invalid, using primary GPT. [ 240.636322][ T5281] loop2: p1 p2 p3 [ 240.681543][ T9627] Alternate GPT is invalid, using primary GPT. [ 240.685372][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'. [ 240.688126][ T9627] loop2: p1 p2 p3 [ 240.834136][ T9629] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 240.840029][ T9629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1867'. [ 240.980651][ T3641] Alternate GPT is invalid, using primary GPT. [ 240.984267][ T3641] loop2: p1 p2 p3 [ 241.063517][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 241.083957][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 241.087669][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 241.123210][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 241.133254][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 241.163119][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 241.241047][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 241.285660][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 241.292863][ T9647] loop0: detected capacity change from 0 to 1024 [ 241.437022][ T9651] netlink: 'syz.2.1872': attribute type 21 has an invalid length. [ 241.439425][ T9651] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1872'. [ 241.443942][ T9651] netlink: 'syz.2.1872': attribute type 6 has an invalid length. [ 241.446270][ T9651] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1872'. [ 242.089572][ T9647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.261786][ T9654] loop6: detected capacity change from 0 to 2048 [ 242.284012][ T4078] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 242.287642][ T4078] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 242.289782][ T4078] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 242.300903][ T4078] hid-generic 0003:0004:0000.001E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 242.349633][ T9668] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 242.351978][ T9668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1880'. [ 242.382160][ T9654] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,. Quota mode: none. [ 242.425669][ T9654] EXT4-fs (loop6): shut down requested (0) [ 242.527683][ T9677] fido_id[9677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.593720][ T9679] xt_connbytes: Forcing CT accounting to be enabled [ 242.625878][ T9679] Cannot find set identified by id 0 to match [ 242.719068][ T9685] loop0: detected capacity change from 0 to 512 [ 242.769456][ T9683] loop2: detected capacity change from 0 to 2048 [ 242.831655][ T9685] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 242.911094][ T9683] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.931765][ T9685] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 243.147578][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 244.428009][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 244.428023][ T26] audit: type=1326 audit(244.390:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.436567][ T26] audit: type=1326 audit(244.400:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.479270][ T26] audit: type=1326 audit(244.440:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.487202][ T26] audit: type=1326 audit(244.450:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.507285][ T26] audit: type=1326 audit(244.450:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.575164][ T26] audit: type=1326 audit(244.540:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.589671][ T26] audit: type=1326 audit(244.540:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.609173][ T26] audit: type=1326 audit(244.540:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.623565][ T26] audit: type=1326 audit(244.580:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 244.648632][ T26] audit: type=1326 audit(244.600:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8281d8a8 code=0x7ffc0000 [ 245.243759][ T9732] lo speed is unknown, defaulting to 1000 [ 245.569515][ T9735] loop0: detected capacity change from 0 to 512 [ 245.622447][ T9737] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 245.645726][ T9735] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 245.967998][ T9746] smc: net device bond0 applied user defined pnetid SYZ2 [ 245.970801][ T9746] smc: net device bond0 erased user defined pnetid SYZ2 [ 246.348898][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 246.524070][ T9763] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.601661][ T9763] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.691520][ T9763] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.759097][ T9763] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.997405][ T9763] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.003245][ T9763] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.015543][ T9763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.021773][ T9763] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.042283][ T9774] loop6: detected capacity change from 0 to 512 [ 247.173216][ T9774] EXT4-fs (loop6): 1 orphan inode deleted [ 247.180907][ T9774] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.201788][ T9774] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 247.411219][ T9586] Set syz1 is full, maxelem 65536 reached [ 248.274210][ T9792] loop2: detected capacity change from 0 to 512 [ 248.348937][ T9792] EXT4-fs (loop2): Ignoring removed oldalloc option [ 248.533368][ T9792] EXT4-fs (loop2): 1 truncate cleaned up [ 248.547052][ T9792] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 248.652347][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.660566][ T9805] device bridge_slave_0 left promiscuous mode [ 248.663832][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.706839][ T9805] device bridge_slave_1 left promiscuous mode [ 248.709110][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.770282][ T9805] bond0: (slave bond_slave_0): Releasing backup interface [ 248.800782][ T9805] device bond_slave_0 left promiscuous mode [ 248.827856][ T9805] bond0: (slave bond_slave_1): Releasing backup interface [ 248.896833][ T9805] device bond_slave_1 left promiscuous mode [ 248.918985][ T9812] loop2: detected capacity change from 0 to 128 [ 248.947187][ T9805] device vlan3 left promiscuous mode [ 248.951298][ T9805] device bond0 left promiscuous mode [ 248.960674][ T9812] EXT4-fs (loop2): Ignoring removed nobh option [ 248.961808][ T9805] bridge0: port 3(vlan3) entered disabled state [ 249.006152][ T9808] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.012503][ T9812] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 249.190394][ T9808] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.269994][ T9808] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.361427][ T9808] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.490145][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 249.490162][ T26] audit: type=1326 audit(249.450:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.504814][ T26] audit: type=1326 audit(249.450:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.511117][ T26] audit: type=1326 audit(249.470:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.523001][ T26] audit: type=1326 audit(249.470:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.533382][ T26] audit: type=1326 audit(249.470:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.548280][ T26] audit: type=1326 audit(249.470:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.554260][ T26] audit: type=1326 audit(249.470:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.572038][ T26] audit: type=1326 audit(249.470:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.581773][ T26] audit: type=1326 audit(249.470:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.592368][ T26] audit: type=1326 audit(249.470:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 249.616664][ T9808] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.660687][ T9808] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.689104][ T9808] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.702289][ T9808] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.039250][ T9840] loop3: detected capacity change from 0 to 2048 [ 250.094956][ T9845] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.101496][ T9845] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 250.102755][ T9840] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 250.328462][ T9835] lo speed is unknown, defaulting to 1000 [ 251.653629][ T9863] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.813181][ T9863] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.918571][ T9863] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.031276][ T9863] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.366413][ T9863] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.403261][ T9863] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.412679][ T9863] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.425035][ T9863] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.359247][ T9892] loop6: detected capacity change from 0 to 2048 [ 254.156321][ T9901] lo speed is unknown, defaulting to 1000 [ 254.195817][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.288850][ T9892] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x00000000000003ff,noblock_validity,,errors=continue. Quota mode: none. [ 255.134547][ T9767] Set syz1 is full, maxelem 65536 reached [ 256.513570][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 256.513584][ T26] audit: type=1326 audit(256.470:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 256.573929][ T26] audit: type=1326 audit(256.530:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 256.607908][ T9941] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 256.620338][ T26] audit: type=1326 audit(256.580:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 256.759351][ T26] audit: type=1326 audit(256.590:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 256.799275][ T26] audit: type=1326 audit(256.690:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 256.834680][ T26] audit: type=1326 audit(256.690:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 257.122249][ T9950] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.275935][ T26] audit: type=1326 audit(256.710:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 257.282073][ T26] audit: type=1326 audit(256.740:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 257.301514][ T26] audit: type=1326 audit(256.740:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 257.547296][ T9950] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.750314][ T9950] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.863897][ T26] audit: type=1326 audit(257.820:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 257.907089][ T9950] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.970828][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 258.742784][ T9988] loop2: detected capacity change from 0 to 512 [ 258.796220][ T9988] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 258.798540][ T9988] EXT4-fs (loop2): Ignoring removed bh option [ 258.800386][ T9988] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.803852][ T9988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.874999][ T9988] EXT4-fs (loop2): 1 truncate cleaned up [ 258.876780][ T9988] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 261.164446][ T4078] Bluetooth: hci5: command 0x0406 tx timeout [ 264.528006][ T9956] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1975'. [ 264.626811][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 264.626826][ T26] audit: type=1326 audit(264.590:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.660503][ T26] audit: type=1326 audit(264.590:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.673051][ T26] audit: type=1326 audit(264.590:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.688134][ T26] audit: type=1326 audit(264.590:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.707498][ T26] audit: type=1326 audit(264.590:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.713931][ T26] audit: type=1326 audit(264.590:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.732199][ T26] audit: type=1326 audit(264.590:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.749393][ T26] audit: type=1326 audit(264.590:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.764004][ T26] audit: type=1326 audit(264.590:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x7ffc0000 [ 264.842736][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1993'. [ 264.929653][T10021] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 264.963562][ T26] audit: type=1326 audit(264.920:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 265.323136][T10039] loop0: detected capacity change from 0 to 512 [ 265.404542][T10039] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 265.406633][T10039] EXT4-fs (loop0): Ignoring removed bh option [ 265.408432][T10039] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.411756][T10039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 265.421137][T10048] loop3: detected capacity change from 0 to 1024 [ 265.430945][T10039] EXT4-fs (loop0): 1 truncate cleaned up [ 265.432650][T10039] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 265.561253][T10048] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 265.585789][T10048] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 1: comm syz.3.2009: lblock 1 mapped to illegal pblock 1 (length 15) [ 265.654255][T10067] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 1: comm syz.3.2009: lblock 1 mapped to illegal pblock 1 (length 1) [ 265.768454][T10067] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 265.773550][T10067] EXT4-fs (loop3): This should not happen!! Data will be lost [ 265.773550][T10067] [ 266.165771][T10088] rdma_op 00000000a8c71f04 conn xmit_rdma 0000000000000000 [ 266.495073][T10099] netlink: 'syz.0.2030': attribute type 13 has an invalid length. [ 266.499419][T10099] gretap0: refused to change device tx_queue_len [ 266.515262][T10099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 266.743280][T10111] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.765356][T10107] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 266.960575][T10098] lo speed is unknown, defaulting to 1000 [ 267.091274][T10122] loop0: detected capacity change from 0 to 512 [ 267.120590][T10122] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 267.122584][T10122] EXT4-fs (loop0): Ignoring removed bh option [ 267.124361][T10122] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.127721][T10122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 267.157684][T10122] EXT4-fs (loop0): 1 truncate cleaned up [ 267.159337][T10122] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 267.522875][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2043'. [ 267.529920][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 267.665172][T10145] loop3: detected capacity change from 0 to 512 [ 267.673905][T10144] usb usb2: usbfs: interface 0 claimed by hub while '+}[@' sets config #0 [ 267.771773][T10145] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 268.727285][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2053'. [ 268.798341][T10168] loop4: detected capacity change from 0 to 512 [ 268.820085][T10168] EXT4-fs (loop4): error: journal path ./bus is not a block device [ 268.993937][T10179] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 269.174262][T10183] loop2: detected capacity change from 0 to 1024 [ 269.250222][T10183] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.282582][T10186] loop4: detected capacity change from 0 to 512 [ 269.334697][T10186] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 269.336748][T10186] EXT4-fs (loop4): Ignoring removed bh option [ 269.338496][T10186] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.341815][T10186] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.362676][T10186] EXT4-fs (loop4): 1 truncate cleaned up [ 269.364562][T10186] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 270.236468][T10165] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.243696][T10165] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.251367][T10165] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.254104][T10165] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.981568][T10218] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 271.022145][T10175] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2056'. [ 271.026841][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 271.029924][T10207] device hsr_slave_0 left promiscuous mode [ 271.055842][T10207] device hsr_slave_1 left promiscuous mode [ 271.089239][T10224] loop3: detected capacity change from 0 to 1024 [ 271.175442][T10224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.391196][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2077'. [ 271.394177][T10230] tipc: Started in network mode [ 271.396413][T10230] tipc: Node identity 120ab2037f18, cluster identity 4711 [ 271.398536][T10230] tipc: Enabled bearer , priority 0 [ 271.461049][T10237] loop3: detected capacity change from 0 to 512 [ 271.530230][T10227] tipc: Resetting bearer [ 271.562611][T10227] tipc: Disabling bearer [ 272.045971][T10237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.060050][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 272.083217][T10237] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 272.100294][T10237] EXT4-fs (loop3): 1 truncate cleaned up [ 272.102050][T10237] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 272.275269][T10257] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 272.323903][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2082'. [ 272.358120][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 272.358134][ T26] audit: type=1326 audit(272.320:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 272.375477][ T26] audit: type=1326 audit(272.340:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 272.382503][ T26] audit: type=1326 audit(272.340:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 275.495756][T10313] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2093'. [ 275.498755][T10310] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2093'. [ 275.578206][T10314] loop3: detected capacity change from 0 to 512 [ 276.993029][T10350] loop0: detected capacity change from 0 to 164 [ 277.145377][T10350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.177874][T10350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.244268][T10350] rock: directory entry would overflow storage [ 277.262161][T10350] rock: sig=0x4f50, size=4, remaining=3 [ 277.278657][T10350] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 279.407123][T10403] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2124'. [ 279.430348][ T4248] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 279.801918][T10417] netlink: 'syz.0.2130': attribute type 10 has an invalid length. [ 279.807001][T10417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2130'. [ 279.810323][T10417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.821297][T10417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.859105][T10417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.864098][T10417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.129192][T10417] team0: Port device geneve0 added [ 281.287074][T10447] tipc: New replicast peer: 10.1.1.2 [ 281.288846][T10447] tipc: Enabled bearer , priority 10 [ 281.459180][T10456] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 281.461408][T10456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2145'. [ 281.494407][ T26] audit: type=1326 audit(281.380:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.6.2144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 281.500421][ T26] audit: type=1326 audit(281.380:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.6.2144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 281.540733][ T26] audit: type=1326 audit(281.380:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.6.2144" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x0 [ 282.434394][ T4068] tipc: Node number set to 3094055780 [ 282.455399][T10470] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2148'. [ 282.783017][T10483] loop4: detected capacity change from 0 to 512 [ 283.018378][T10483] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 283.292875][T10488] lo speed is unknown, defaulting to 1000 [ 284.519547][T10513] lo speed is unknown, defaulting to 1000 [ 284.712718][T10521] loop3: detected capacity change from 0 to 512 [ 284.803827][T10527] netlink: 'syz.4.2168': attribute type 4 has an invalid length. [ 284.925985][T10521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2165: bg 0: block 248: padding at end of block bitmap is not set [ 284.930845][T10537] loop6: detected capacity change from 0 to 1024 [ 284.934259][T10531] netlink: 'syz.4.2169': attribute type 13 has an invalid length. [ 284.936823][T10521] Quota error (device loop3): write_blk: dquota write failed [ 284.940496][T10521] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 284.943243][T10521] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.2165: Failed to acquire dquot type 1 [ 284.948237][T10521] EXT4-fs (loop3): 1 truncate cleaned up [ 284.949828][T10521] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 285.010739][T10537] EXT4-fs (loop6): Ignoring removed orlov option [ 285.053333][T10537] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,discard,barrier=0x0000000000000006,stripe=0x0000000000000008,orlov,,errors=continue. Quota mode: writeback. [ 285.080495][T10531] gretap0: refused to change device tx_queue_len [ 285.119620][T10531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.140478][T10552] loop3: detected capacity change from 0 to 512 [ 285.486440][T10547] lo speed is unknown, defaulting to 1000 [ 286.084666][T10578] lo speed is unknown, defaulting to 1000 [ 287.200645][T10593] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 287.219939][T10593] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 287.743312][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2190'. [ 287.773708][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2190'. [ 288.445768][T10614] loop4: detected capacity change from 0 to 2048 [ 288.518405][T10606] lo speed is unknown, defaulting to 1000 [ 288.560929][T10614] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.059094][T10629] netlink: 'syz.3.2201': attribute type 4 has an invalid length. [ 289.130878][T10629] netlink: 'syz.3.2201': attribute type 4 has an invalid length. [ 289.232369][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2203'. [ 289.744719][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2203'. [ 289.867747][T10639] loop3: detected capacity change from 0 to 512 [ 290.061923][T10639] EXT4-fs (loop3): 1 orphan inode deleted [ 290.063631][T10639] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 290.332395][ T26] audit: type=1326 audit(290.290:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.4.2213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 290.343942][ T26] audit: type=1326 audit(290.290:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.4.2213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 290.354709][ T26] audit: type=1326 audit(290.320:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.4.2213" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 290.354917][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'. [ 290.539586][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'. [ 290.581684][T10680] loop3: detected capacity change from 0 to 1024 [ 292.076337][T10691] loop2: detected capacity change from 0 to 2048 [ 292.238947][T10691] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 292.241016][T10691] EXT4-fs (loop2): Ignoring removed nobh option [ 292.256890][ T26] audit: type=1326 audit(292.220:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.262797][ T26] audit: type=1326 audit(292.220:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.278915][T10691] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,nodelalloc,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nobh,bsddf,,errors=continue. Quota mode: none. [ 292.282866][ T26] audit: type=1326 audit(292.220:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.304550][ T26] audit: type=1326 audit(292.220:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.313587][T10680] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 292.315407][ T26] audit: type=1326 audit(292.220:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.334449][ T26] audit: type=1326 audit(292.220:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.340606][ T26] audit: type=1326 audit(292.220:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 292.372867][T10703] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 292.605590][T10709] loop2: detected capacity change from 0 to 512 [ 292.700715][T10709] EXT4-fs (loop2): 1 orphan inode deleted [ 292.702412][T10709] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.793272][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 292.866237][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 293.861585][T10747] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 294.276657][T10761] loop6: detected capacity change from 0 to 512 [ 294.409602][T10761] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.554119][T10761] EXT4-fs warning (device loop6): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 295.773389][T10789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2258'. [ 295.858371][T10793] netlink: 'syz.6.2256': attribute type 3 has an invalid length. [ 295.920294][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 295.920306][ T26] audit: type=1326 audit(295.880:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 295.958286][ T26] audit: type=1326 audit(295.920:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 295.983472][ T26] audit: type=1326 audit(295.940:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.028203][ T26] audit: type=1326 audit(295.960:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.034226][ T26] audit: type=1326 audit(295.960:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.052515][ T26] audit: type=1326 audit(295.990:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.088641][ T26] audit: type=1326 audit(295.990:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.128531][ T26] audit: type=1326 audit(295.990:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.148658][ T26] audit: type=1326 audit(295.990:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.188650][ T26] audit: type=1326 audit(295.990:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.6.2256" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ee668a8 code=0x7ffc0000 [ 296.269574][T10793] loop6: detected capacity change from 0 to 512 [ 296.334441][T10793] EXT4-fs (loop6): error: journal path ./bus is not a block device [ 296.675200][T10824] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2269'. [ 296.700149][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 296.797398][T10834] loop0: detected capacity change from 0 to 1024 [ 296.981758][ T4078] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 296.983898][ T4078] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 296.991828][ T4078] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 297.010339][ T4078] hid-generic 0003:0004:0000.001F: hidraw0: USB HID vffffff.ff Device [syz0] on syz1 [ 297.049935][T10834] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.050889][T10844] fido_id[10844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 297.241895][T10834] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.2274: Allocating blocks 497-513 which overlap fs metadata [ 297.284183][T10834] EXT4-fs (loop0): pa 000000001ee849b9: logic 256, phys. 385, len 8 [ 297.286961][T10834] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 297.552599][T10832] lo speed is unknown, defaulting to 1000 [ 298.655719][T10880] loop0: detected capacity change from 0 to 1024 [ 299.610415][T10880] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.2290: Invalid block bitmap block 0 in block_group 0 [ 299.634813][T10880] EXT4-fs (loop0): Remounting filesystem read-only [ 299.637048][T10880] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.2290: Failed to acquire dquot type 0 [ 299.650223][T10880] EXT4-fs (loop0): Remounting filesystem read-only [ 299.737178][T10880] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.2290: Freeing blocks not in datazone - block = 0, count = 4096 [ 299.951209][T10880] EXT4-fs (loop0): Remounting filesystem read-only [ 299.959710][T10880] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2290: Invalid inode bitmap blk 0 in block_group 0 [ 299.979874][ T4220] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:12: Failed to release dquot type 0 [ 299.987325][ T4220] EXT4-fs (loop0): Remounting filesystem read-only [ 300.002130][T10880] EXT4-fs (loop0): Remounting filesystem read-only [ 300.003950][T10880] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 300.018715][T10880] EXT4-fs (loop0): Remounting filesystem read-only [ 300.020611][T10880] EXT4-fs (loop0): 1 orphan inode deleted [ 300.022272][T10880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; errors=remount-ro,grpid,. Quota mode: writeback. [ 300.069878][T10880] EXT4-fs error (device loop0): ext4_remount:5855: comm syz.0.2290: Abort forced by user [ 300.113765][T10880] EXT4-fs (loop0): Remounting filesystem read-only [ 300.138715][T10880] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 300.235734][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 300.315908][T10893] lo speed is unknown, defaulting to 1000 [ 301.390142][T10954] loop6: detected capacity change from 0 to 164 [ 301.486140][T10954] Unable to read rock-ridge attributes [ 301.516177][T10954] Unable to read rock-ridge attributes [ 301.948690][T10960] loop6: detected capacity change from 0 to 512 [ 301.957097][T10962] loop4: detected capacity change from 0 to 128 [ 302.031237][T10962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.188241][T10960] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x000000000000000a,user_xattr,. Quota mode: none. [ 302.897583][T10983] loop6: detected capacity change from 0 to 1024 [ 303.000775][T10983] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.182861][T10981] lo speed is unknown, defaulting to 1000 [ 303.447895][T11002] netlink: 'syz.0.2325': attribute type 3 has an invalid length. [ 303.716191][T11015] loop3: detected capacity change from 0 to 1024 [ 303.759349][T11015] EXT4-fs (loop3): Ignoring removed orlov option [ 303.782694][T11015] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 304.304916][T11040] loop3: detected capacity change from 0 to 1024 [ 304.362671][T11040] EXT4-fs (loop3): Ignoring removed nobh option [ 304.369082][T11040] EXT4-fs (loop3): Ignoring removed bh option [ 304.371039][T11040] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.437601][T11040] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,errors=remount-ro,bh,dioread_nolock,. Quota mode: none. [ 304.478744][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 304.478758][ T26] audit: type=1326 audit(304.440:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.539504][ T26] audit: type=1326 audit(304.500:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.559899][ T26] audit: type=1326 audit(304.520:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.570152][ T26] audit: type=1326 audit(304.530:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.591143][ T26] audit: type=1326 audit(304.540:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.604449][ T26] audit: type=1326 audit(304.540:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.610865][ T26] audit: type=1326 audit(304.540:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11043 comm="syz.4.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff858628a8 code=0x7ffc0000 [ 304.711421][T11041] lo speed is unknown, defaulting to 1000 [ 306.357779][ T26] audit: type=1326 audit(306.320:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.3.2350" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae6b48a8 code=0x0 [ 306.408201][T11118] sctp: [Deprecated]: syz.4.2349 (pid 11118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.408201][T11118] Use struct sctp_sack_info instead [ 306.726737][T11121] loop0: detected capacity change from 0 to 512 [ 306.772266][T11121] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 306.863717][T11121] [ 306.864419][T11121] ====================================================== [ 306.866391][T11121] WARNING: possible circular locking dependency detected [ 306.868344][T11121] 5.15.185-syzkaller #0 Not tainted [ 306.869806][T11121] ------------------------------------------------------ [ 306.871876][T11121] syz.0.2351/11121 is trying to acquire lock: [ 306.873542][T11121] ffff0000e9565068 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x50/0x1c4 [ 306.876106][T11121] [ 306.876106][T11121] but task is already holding lock: [ 306.878207][T11121] ffff0000de16be48 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x71c/0x167c [ 306.880897][T11121] [ 306.880897][T11121] which lock already depends on the new lock. [ 306.880897][T11121] [ 306.883849][T11121] [ 306.883849][T11121] the existing dependency chain (in reverse order) is: [ 306.886489][T11121] [ 306.886489][T11121] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 306.888700][T11121] down_read+0xc0/0x390 [ 306.890049][T11121] ext4_map_blocks+0x288/0x167c [ 306.891549][T11121] ext4_getblk+0x138/0x5f0 [ 306.892949][T11121] ext4_bread+0x3c/0x1d4 [ 306.894355][T11121] ext4_quota_read+0x17c/0x354 [ 306.895913][T11121] find_tree_dqentry+0x15c/0x934 [ 306.897455][T11121] find_tree_dqentry+0x300/0x934 [ 306.898987][T11121] find_tree_dqentry+0x300/0x934 [ 306.900521][T11121] find_tree_dqentry+0x300/0x934 [ 306.902048][T11121] qtree_read_dquot+0x12c/0x618 [ 306.903602][T11121] v2_read_dquot+0xbc/0x118 [ 306.905074][T11121] dquot_acquire+0x120/0x510 [ 306.906537][T11121] ext4_acquire_dquot+0x270/0x428 [ 306.908145][T11121] dqget+0x658/0xcf4 [ 306.909346][T11121] __dquot_initialize+0x264/0xa80 [ 306.910926][T11121] dquot_initialize+0x24/0x34 [ 306.912382][T11121] ext4_process_orphan+0x5c/0x2b4 [ 306.914064][T11121] ext4_orphan_cleanup+0x888/0xf8c [ 306.915740][T11121] ext4_fill_super+0x7a5c/0x812c [ 306.917339][T11121] mount_bdev+0x264/0x358 [ 306.918717][T11121] ext4_mount+0x44/0x58 [ 306.920070][T11121] legacy_get_tree+0xd4/0x16c [ 306.921547][T11121] vfs_get_tree+0x90/0x274 [ 306.922920][T11121] do_new_mount+0x228/0x810 [ 306.924366][T11121] path_mount+0x5b4/0x1000 [ 306.925826][T11121] __arm64_sys_mount+0x514/0x5e4 [ 306.927383][T11121] invoke_syscall+0x98/0x2b8 [ 306.928785][T11121] el0_svc_common+0x138/0x258 [ 306.930352][T11121] do_el0_svc+0x58/0x14c [ 306.931618][T11121] el0_svc+0x78/0x1e0 [ 306.932893][T11121] el0t_64_sync_handler+0xcc/0xe4 [ 306.934516][T11121] el0t_64_sync+0x1a0/0x1a4 [ 306.935892][T11121] [ 306.935892][T11121] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 306.938156][T11121] down_read+0xc0/0x390 [ 306.939562][T11121] v2_read_dquot+0x4c/0x118 [ 306.940976][T11121] dquot_acquire+0x120/0x510 [ 306.942435][T11121] ext4_acquire_dquot+0x270/0x428 [ 306.944261][T11121] dqget+0x658/0xcf4 [ 306.945557][T11121] __dquot_initialize+0x2d4/0xa80 [ 306.947187][T11121] dquot_initialize+0x24/0x34 [ 306.948683][T11121] ext4_process_orphan+0x5c/0x2b4 [ 306.950318][T11121] ext4_orphan_cleanup+0x888/0xf8c [ 306.951921][T11121] ext4_fill_super+0x7a5c/0x812c [ 306.953461][T11121] mount_bdev+0x264/0x358 [ 306.954856][T11121] ext4_mount+0x44/0x58 [ 306.956174][T11121] legacy_get_tree+0xd4/0x16c [ 306.957676][T11121] vfs_get_tree+0x90/0x274 [ 306.959121][T11121] do_new_mount+0x228/0x810 [ 306.960501][T11121] path_mount+0x5b4/0x1000 [ 306.961873][T11121] __arm64_sys_mount+0x514/0x5e4 [ 306.963537][T11121] invoke_syscall+0x98/0x2b8 [ 306.964977][T11121] el0_svc_common+0x138/0x258 [ 306.966477][T11121] do_el0_svc+0x58/0x14c [ 306.967825][T11121] el0_svc+0x78/0x1e0 [ 306.969041][T11121] el0t_64_sync_handler+0xcc/0xe4 [ 306.970611][T11121] el0t_64_sync+0x1a0/0x1a4 [ 306.972048][T11121] [ 306.972048][T11121] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 306.974219][T11121] __lock_acquire+0x2928/0x651c [ 306.975784][T11121] lock_acquire+0x1f4/0x620 [ 306.977170][T11121] __mutex_lock_common+0x194/0x1edc [ 306.978815][T11121] mutex_lock_nested+0xac/0x11c [ 306.980391][T11121] dquot_commit+0x50/0x1c4 [ 306.981773][T11121] ext4_write_dquot+0x1b4/0x31c [ 306.983331][T11121] ext4_mark_dquot_dirty+0xe8/0x140 [ 306.984947][T11121] mark_all_dquot_dirty+0x108/0x424 [ 306.986642][T11121] __dquot_alloc_space+0x560/0xd0c [ 306.988231][T11121] ext4_mb_new_blocks+0xd30/0x4024 [ 306.989871][T11121] ext4_ext_map_blocks+0xf70/0x5628 [ 306.991473][T11121] ext4_map_blocks+0x7b8/0x167c [ 306.992975][T11121] _ext4_get_block+0x190/0x4ec [ 306.994506][T11121] ext4_get_block+0x4c/0x60 [ 306.995969][T11121] ext4_block_write_begin+0x528/0x1110 [ 306.997685][T11121] ext4_write_begin+0x5d0/0xdbc [ 306.999165][T11121] ext4_da_write_begin+0x380/0x83c [ 307.000702][T11121] generic_perform_write+0x204/0x480 [ 307.002367][T11121] ext4_buffered_write_iter+0x408/0x538 [ 307.004104][T11121] ext4_file_write_iter+0x698/0x14cc [ 307.005723][T11121] vfs_write+0x7c8/0xa2c [ 307.007116][T11121] ksys_write+0x120/0x210 [ 307.008444][T11121] __arm64_sys_write+0x7c/0x90 [ 307.009904][T11121] invoke_syscall+0x98/0x2b8 [ 307.011446][T11121] el0_svc_common+0x138/0x258 [ 307.012949][T11121] do_el0_svc+0x58/0x14c [ 307.014280][T11121] el0_svc+0x78/0x1e0 [ 307.015564][T11121] el0t_64_sync_handler+0xcc/0xe4 [ 307.017133][T11121] el0t_64_sync+0x1a0/0x1a4 [ 307.018495][T11121] [ 307.018495][T11121] other info that might help us debug this: [ 307.018495][T11121] [ 307.021468][T11121] Chain exists of: [ 307.021468][T11121] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 307.021468][T11121] [ 307.025346][T11121] Possible unsafe locking scenario: [ 307.025346][T11121] [ 307.027439][T11121] CPU0 CPU1 [ 307.028968][T11121] ---- ---- [ 307.030512][T11121] lock(&ei->i_data_sem/2); [ 307.031798][T11121] lock(&s->s_dquot.dqio_sem); [ 307.033923][T11121] lock(&ei->i_data_sem/2); [ 307.035934][T11121] lock(&dquot->dq_lock); [ 307.037159][T11121] [ 307.037159][T11121] *** DEADLOCK *** [ 307.037159][T11121] [ 307.039494][T11121] 5 locks held by syz.0.2351/11121: [ 307.040941][T11121] #0: ffff0000cef44af0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x170 [ 307.043550][T11121] #1: ffff0000ceaf4460 (sb_writers#3){++++}-{0:0}, at: vfs_write+0x228/0xa2c [ 307.046111][T11121] #2: ffff0000de16bfc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0x98/0x538 [ 307.049414][T11121] #3: ffff0000de16be48 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x71c/0x167c [ 307.052212][T11121] #4: ffff800014448658 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 307.054795][T11121] [ 307.054795][T11121] stack backtrace: [ 307.056436][T11121] CPU: 0 PID: 11121 Comm: syz.0.2351 Not tainted 5.15.185-syzkaller #0 [ 307.058709][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.061529][T11121] Call trace: [ 307.062431][T11121] dump_backtrace+0x0/0x43c [ 307.063733][T11121] show_stack+0x2c/0x3c [ 307.064931][T11121] __dump_stack+0x30/0x40 [ 307.066175][T11121] dump_stack_lvl+0xf8/0x160 [ 307.067472][T11121] dump_stack+0x1c/0x5c [ 307.068605][T11121] print_circular_bug+0x148/0x1b0 [ 307.070044][T11121] check_noncircular+0x240/0x2d4 [ 307.071445][T11121] __lock_acquire+0x2928/0x651c [ 307.072797][T11121] lock_acquire+0x1f4/0x620 [ 307.074061][T11121] __mutex_lock_common+0x194/0x1edc [ 307.075508][T11121] mutex_lock_nested+0xac/0x11c [ 307.076914][T11121] dquot_commit+0x50/0x1c4 [ 307.078144][T11121] ext4_write_dquot+0x1b4/0x31c [ 307.079508][T11121] ext4_mark_dquot_dirty+0xe8/0x140 [ 307.081024][T11121] mark_all_dquot_dirty+0x108/0x424 [ 307.082524][T11121] __dquot_alloc_space+0x560/0xd0c [ 307.083990][T11121] ext4_mb_new_blocks+0xd30/0x4024 [ 307.085359][T11121] ext4_ext_map_blocks+0xf70/0x5628 [ 307.086881][T11121] ext4_map_blocks+0x7b8/0x167c [ 307.088294][T11121] _ext4_get_block+0x190/0x4ec [ 307.089668][T11121] ext4_get_block+0x4c/0x60 [ 307.090971][T11121] ext4_block_write_begin+0x528/0x1110 [ 307.092559][T11121] ext4_write_begin+0x5d0/0xdbc [ 307.093886][T11121] ext4_da_write_begin+0x380/0x83c [ 307.095376][T11121] generic_perform_write+0x204/0x480 [ 307.096944][T11121] ext4_buffered_write_iter+0x408/0x538 [ 307.098448][T11121] ext4_file_write_iter+0x698/0x14cc [ 307.099992][T11121] vfs_write+0x7c8/0xa2c [ 307.101223][T11121] ksys_write+0x120/0x210 [ 307.102490][T11121] __arm64_sys_write+0x7c/0x90 [ 307.103802][T11121] invoke_syscall+0x98/0x2b8 [ 307.105116][T11121] el0_svc_common+0x138/0x258 [ 307.106471][T11121] do_el0_svc+0x58/0x14c [ 307.107687][T11121] el0_svc+0x78/0x1e0 [ 307.108837][T11121] el0t_64_sync_handler+0xcc/0xe4 [ 307.110216][T11121] el0t_64_sync+0x1a0/0x1a4 [ 315.395925][ T2054] ieee802154 phy1 wpan1: encryption failed: -22